Skip to content

Pricing

One price. All frameworks. No surprises. Start with a free trial and connect your systems today.

SOC 2, ISO 27001, PCI DSS, HIPAA, NIST CSF 2.0 and CCPA / CPRA on every plan. No per-framework fees. Up to 10 employees on every plan.

Monthly billing is available on every plan.

  • Platform

    $4,995per year

    or $499 per month

    Everything you need to run your compliance program. Bring your own auditor.

    • All frameworks, mapped once
    • 100+ automated tests, 100+ integrations
    • Policies, risk register, vendor risk, access reviews
    • Trust portal and auditor portal
    • AI vCISO and an MCP server for your AI agents
    • Vulnerability scanning
    Start free trial

    No credit card

  • Recommended

    Certified

    $8,995per year

    or $899 per month

    Platform plus the audit itself. One vendor, one invoice, one report.

    • Everything in Platform
    • One annual SOC 2 Type II audit by an independent CPA firm
    • Human vCISO to get you audit-ready
    Start free trial

    No credit card

  • Security-First

    $12,995per year

    or $1,299 per month

    Compliance built on real security, from the company that does data security for a living.

    • Everything in Certified
    • Human-led penetration test with retest
    • Shadow IT and AI discovery
    • Strac AI data security (DLP) for Slack, Google Workspace and AI tools
    Book a call

Good to know

  • Every plan covers up to 10 employees. Over 10 employees: book a call.
  • Human-led penetration test, standalone or added to any plan: $3,995.
  • Annual or monthly billing on every plan. Plans renew automatically. Cancel at least 30 days before your renewal date and you keep access until then. Export everything.
  • Within 30 days of your first annual payment, you can instead ask support@strac.io for a full refund. A refund ends your access. Other payments are not refunded.
  • Full Strac data-security platform (endpoints, cloud data and AI agents) available separately.

14-day free trial. No credit card. Everything except web app vulnerability scans, which start after you pay your first invoice. Not a permanent free plan. Explore Strac DLP

Start free trialBook a demo

Questions

Is there a free plan?
No, but there’s a free trial. 14-day free trial. No credit card. It covers everything except web app vulnerability scans, which start after you pay your first invoice.
What happens when the trial ends?
Your workspace turns read-only, but evidence collection keeps running until 90 days after you signed up. Subscribe any time before then and your evidence has no gap. Strac Comply keeps everything it already collected either way. Need more time to decide? Extend the trial once, by 7 days, in the app.
How do I pay?
Subscribe to Platform in the app when you’re ready, yearly or monthly. For Certified or Security-First, our team sets up your plan on a short call. Your tests run from the moment you subscribe.
What does Certified add?
Everything in Platform, plus the audit itself. A human vCISO from Strac gets you ready and prepares the evidence your auditor will ask for. Each year, an independent CPA firm does one SOC 2 Type II audit. The firm issues the report, and Strac is never your auditor.
How long until I have a SOC 2 report?
A first SOC 2 Type II report takes about 4 months, with a 3-month observation period, a common first period. Your auditor agrees on the dates with you and issues the report. See the SOC 2 timeline
What does Security-First add?
Everything in Certified, plus a human-led penetration test with a retest. You also get Shadow IT and AI discovery and Strac AI data security (DLP) for Slack, Google Workspace and AI tools.
How does cancelling work?
Plans renew automatically, yearly or monthly. Cancel at least 30 days before your renewal date and you keep full access until the end of the period you paid for. Within 30 days of your first annual payment, you can instead ask for a full refund, and your access ends on the refund date. Other payments are not refunded. To cancel or ask for a refund, email support@strac.io. You can export everything before you go.
What if we have more than 10 employees?
Every plan covers up to 10 employees. Over 10? Book a call.
Is data loss prevention included?
Security-First includes Strac AI data security (DLP) for Slack, Google Workspace and AI tools. The full Strac data-security platform (endpoints, cloud data and AI agents) is available separately.