1. Self-serve compliance automation. Sign up, connect AWS, Google Workspace, Okta, GitHub and Slack, and 100+ tests run continuously for SOC 2, ISO 27001, HIPAA, PCI DSS and more. 2. No per-framework fees 3. 14-day free trial, no credit card 4. Built by a data-security company, so it also finds the AI apps and agents in your workspace and maps them to the customer data they can reach 5. Run it from the dashboard or Claude Code via MCP 6. Platform $4,995/yr. Audit, vCISO and pen test tiers above
Before Strac, I spent 11 years at Amazon building payment security systems. For the last four years, we’ve been building data security for SaaS, cloud, and GenAI.
We’ve also been a compliance customer the entire time.
And every year, the same thing happened: the audit ends, tests quietly drift, and by the next audit cycle we’re collecting evidence almost from scratch again. Compliance somehow gets slower instead of faster.
At the same time, auditors started asking questions that traditional compliance tooling wasn’t designed around:
Which AI tools are employees using?
Which agents can access customer data?
Where is sensitive data actually flowing?
We already had the underlying visibility and controls in Strac.
So we built Strac Comply — security-first compliance for the AI era.
• Continuous tests against your real stack, so you stay audit-ready after the audit • 100+ automated checks and evidence collection from day one • Shadow AI and AI governance as real controls, not just policy documents • SOC 2, ISO 27001, HIPAA, PCI, and GDPR with no per-framework fees • Run compliance from the dashboard — or from Claude Code, Cursor, Codex, and other agents through MCP
And we wanted the buying experience to be different too:
No sales call. Starts at $4,995/year. 14-day free trial. No credit card.
You can sign up tonight and start running checks immediately.
Would love feedback from anyone who has been through SOC 2 or another audit:
What was the most painful part — and what broke after the first audit was over?
Can users set a maximum cost per request or per project so the router stays within a budget?
Hey hunters, happy to launch Strac Comply today and will be all day here if you have questions :) We've built it from ground up for the AI era.
You can do all compliance work from Claude Code! So no need to even login into our UI.
Auditors love love screenshots, so we create them automatically for them, our tests don't just say "fail" they tell you exactly which user, repo or key is the problem and how to fix, you fix it, re-run, and the evidence updates itself.
The MCP server was fun to build. Every token is scoped (read vs write), and every action an agent takes lands in an append only audit log with the agent and the human it acted for.
Ask me anything technical: integrations, how tests work, what MCP can and can't do. Happy to launch!
About Strac Comply on Product Hunt
“Get SOC 2 without the sales call”
Strac Comply launched on Product Hunt on October 8th, 2026 and earned 70 upvotes and 5 comments, placing #31 on the daily leaderboard. 1. Self-serve compliance automation. Sign up, connect AWS, Google Workspace, Okta, GitHub and Slack, and 100+ tests run continuously for SOC 2, ISO 27001, HIPAA, PCI DSS and more. 2. No per-framework fees 3. 14-day free trial, no credit card 4. Built by a data-security company, so it also finds the AI apps and agents in your workspace and maps them to the customer data they can reach 5. Run it from the dashboard or Claude Code via MCP 6. Platform $4,995/yr. Audit, vCISO and pen test tiers above
Strac Comply was featured in Developer Tools (520.9k followers), Artificial Intelligence (480.7k followers) and Security (2.9k followers) on Product Hunt. Together, these topics include over 221.2k products, making this a competitive space to launch in.
Who hunted Strac Comply?
Strac Comply was hunted by Garry Tan. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how Strac Comply stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Garry Tan
Hey Product Hunt 👋 I’m Aatish, founder of Strac (YC W22).
Before Strac, I spent 11 years at Amazon building payment security systems. For the last four years, we’ve been building data security for SaaS, cloud, and GenAI.
We’ve also been a compliance customer the entire time.
And every year, the same thing happened: the audit ends, tests quietly drift, and by the next audit cycle we’re collecting evidence almost from scratch again. Compliance somehow gets slower instead of faster.
At the same time, auditors started asking questions that traditional compliance tooling wasn’t designed around:
Which AI tools are employees using?
Which agents can access customer data?
Where is sensitive data actually flowing?
We already had the underlying visibility and controls in Strac.
So we built Strac Comply — security-first compliance for the AI era.
• Continuous tests against your real stack, so you stay audit-ready after the audit
• 100+ automated checks and evidence collection from day one
• Shadow AI and AI governance as real controls, not just policy documents
• SOC 2, ISO 27001, HIPAA, PCI, and GDPR with no per-framework fees
• Run compliance from the dashboard — or from Claude Code, Cursor, Codex, and other agents through MCP
And we wanted the buying experience to be different too:
No sales call. Starts at $4,995/year. 14-day free trial. No credit card.
You can sign up tonight and start running checks immediately.
Would love feedback from anyone who has been through SOC 2 or another audit:
What was the most painful part — and what broke after the first audit was over?
I’ll be here answering questions all day. 👋