Skip to content

Pricing

One price. All frameworks. No surprises. Start with a free trial and connect your systems today.

SOC 2, ISO 27001, PCI DSS, HIPAA and NIST CSF 2.0 on every plan. No per-framework fees. Up to 50 employees on every plan.

Monthly billing is available on Platform.

  • Platform

    $4,995per year

    or $499 per month

    Everything you need to run your compliance program. Bring your own auditor.

    • All frameworks, mapped once
    • 100+ automated tests, 40+ integrations
    • Policies, risk register, vendor risk, access reviews
    • Trust center and auditor portal
    • AI vCISO and MCP server
    • Continuous vulnerability scanning
    Start 14-day free trial

    No credit card

  • Most popular

    Certified

    $8,995per year

    Billed yearly

    Platform plus the audit itself. One vendor, one invoice, one report.

    • Everything in Platform
    • SOC 2 Type I or Type II audit by an independent licensed CPA firm
    • Human vCISO to get you audit-ready
    • One audit per year included
    Start 14-day free trial

    No credit card

  • Security-First

    $12,995per year

    Billed yearly

    Compliance built on real security, from the company that does data security for a living.

    • Everything in Certified
    • Human-led penetration test with retest
    • Shadow-AI Discovery
    • Strac DLP for Slack, Google Workspace and AI tools
    Book a call

The fine print, which isn't fine

  • Every plan covers up to 50 employees. 51–200 employees: +$1,995/year. Over 200: talk to us.
  • Penetration test, standalone or added to any plan: $3,995.
  • Additional framework audits (ISO 27001, HIPAA, PCI DSS): auditor cost + $995.
  • Annual billing, or monthly on Platform. Cancel anytime. Export everything.
  • Full Strac data-security platform (endpoint, cloud DSPM, MCP DLP) available separately.

14-day free trial. No credit card. Everything except pen test scans, which start once your first invoice is paid. Not a permanent free plan. Explore Strac DLP

Start free trialBook a demo

Questions

Is there a free plan?
No. The free way in is the trial. 14-day free trial. No credit card. It covers everything except pen test scans, which start once your first invoice is paid.
What happens when the trial ends?
Daily evidence collection stops, and everything already collected is kept. Need more time? You can extend the trial once, by 7 days, from inside the app. Subscribe to start collecting again.
How do I pay?
Subscribe to Platform from inside the app when you are ready, yearly or monthly. Certified and Security-First are set up with our team on a short call. Your tests keep running from the moment you subscribe.
What does Certified add?
Everything in Platform, plus the audit itself. A human vCISO from Strac gets you ready and prepares the evidence your auditor will ask for. An independent licensed CPA firm performs one SOC 2 Type I or Type II audit a year and issues the report. Strac is never your auditor. An audit for another framework (ISO 27001, PCI DSS or HIPAA) is the auditor's cost plus $995.
What does Security-First add?
Everything in Certified, plus a human-led penetration test with a retest, Shadow-AI Discovery, and Strac DLP for Slack, Google Workspace and AI tools.
What if we have more than 50 employees?
Every plan covers up to 50 employees. From 51 to 200 employees it is $1,995 a year more. Over 200, talk to us.
Is data loss prevention included?
Security-First includes Strac DLP for Slack, Google Workspace and AI tools. The full Strac data-security platform (endpoint, cloud DSPM, MCP DLP) is available separately.