Strike Graph AI-powered Compliance Management Platform

What do you like best about the product?

For us, not much. We gave up on it once we realized it was basically just a never-ending to-do list organizer—something that, with a little elbow grease, you could put together yourself using publicly available information and the built-in compliance tools offered by major cloud service providers.

What do you dislike about the product?

Poor Customer Service and inflexibility on contract terms.

We are a small business and had paid for the platform for two years. We had not even logged in for over a year and had not been using the service in any meaningful way. When the renewal invoice arrived, we promptly notified Strike Graph that we did not intend to renew. We were only a few days late under the cancellation deadline.

Rather than make a reasonable accommodation for a long-standing customer with no recent platform usage, Strike Graph insisted on payment for the full additional year. After a painfully long and drawn-out process consisting of repeated emails, slow responses, and multiple attempts to resolve the issue directly, we ultimately settled.

I understand that companies have contracts and renewal terms. My issue is how Strike Graph chose to handle this situation: rigidly, slowly, and with little apparent concern for the customer relationship. It felt less like a partnership and more like a company relying on auto-renewal language to extract another year of subscription revenue from a customer that clearly did not intend to renew and was not using the platform.

We ultimately resolved the matter commercially simply to end the distraction, but the experience consumed unnecessary time, created significant frustration, and left a very negative impression.

My recommendation to other small businesses: be extremely careful before signing. Consider other less costly (or no cost) options and if you do sign up, make sure you have the staff and bandwidth to fully use the platform.

What problems is the product solving and how is that benefiting you?

If we were using it, I suppose it would have helped organize and generate documentation.

What do you like best about the product?

The website is easy to navigate with clearly defined question and answer sections.

What do you dislike about the product?

Nothing to really dislike as the forms are created by the company.

What problems is the product solving and how is that benefiting you?

Strike Graph enabled my company to submit our information for audit purposes. Upon completion, we were able to continue providing our service.

What do you like best about the product?

Ability to link controls and compliance documentation, as well as incorporate integrations.

What do you dislike about the product?

I have not worked with the tool long enough to provide this feedback. However, it would be helpful to track project performance through status updates, and currently the tool does not provide this.

What problems is the product solving and how is that benefiting you?

We are currently in implementation and I cannot clearly describe what the real benefits are at this time.

What do you like best about the product?

I like being able to assign controls to the people responsible for them. I also appreciate the built-in risk assessment. Having support for multiple organizations is helpful too, since I can inherit a large corporate policy into my system security plan.

The interface is clean and easy to navigate, they consistently add updates. The support is phenomenal.

They do have AI tools built in to query the documentation easier.

It's been great to use and have available during an audit

What do you dislike about the product?

The evidence for controls can be buried through menu options.

What problems is the product solving and how is that benefiting you?

NIST 800-171 Compliance, HIPAA compliance, other regulatory compliance.

Risk Assessments for systems.

Strike Graph definitely makes it easier to handle all the documentation during an audit.

What do you like best about the product?

Great support. They were extermely attentive to all of our questions.

What do you dislike about the product?

I wish they had more flexibility in their automated connectors.

What problems is the product solving and how is that benefiting you?

SOC 2 compliance. We could not accomplish SOC2 without them.

What do you like best about the product?

Strike Graph hasn't been just a SaaS platform, we've received incredible service from their team to help us reach compliance across multiple frameworks. Working with Stephanie Lorraine in particular has been a highlight of our experience.

What do you dislike about the product?

I don't have any negative feedback about Strike Graph so far!

What problems is the product solving and how is that benefiting you?

Strike Graph makes it easier to understand what we need to do, create, implement and/or prove to reach certification across several different security frameworks. Our customer base expects us to be SOC2 compliant and as we grow, they also expect us to be GDPR, PCI and HIPAA compliant. Being able to use one platform/service to help us achieve this has made everything quicker and more efficient.

What do you like best about the product?

All of it. The Compliance Dashboard provide all the necessary summarized information upfront (including the Control Monitoring dashboard). Navigating through the Control Library is very intuitive and intelligently designed to outline related security controls and artifacts uploaded in the Evidence Repository. Furthermore the Evidence Repository and it's built-in Verify AI feature helps you understand where a provided policy/procedure document may be missing required elements of the security control. Lastly, the various integrations along with the new Vendor Trust Center provides exceptional value. Overall this product is very effective and efficient.

What do you dislike about the product?

There isn't anything I dislike about StrikeGraph.

What problems is the product solving and how is that benefiting you?

CMMC Certification and support for other frameworks. Also, the new Vendor Trust Center helps interrelate specific questionnaires or requirements from third parties.

What do you like best about the product?

Simple, intuitive interface. Ability to easily edit evidence and controls. Cost-effective.

What do you dislike about the product?

A little clicky. Sometimes you could reduce the amount you need to click by applying forms of bulk updates or allowing easier editing workflows.

What problems is the product solving and how is that benefiting you?

StrikeGraph not only comes with the application itself, but a dedicated and knowledgeable team that are responsive to our needs. This was our first time going through the SOC-2 process and they have worked to help us understand how to work through the documentation hurdles every step of the way.

What do you like best about the product?

Its intuitive interface and automation make compliance tracking much simpler and less manual.

What do you dislike about the product?

Evidence collection and some workflow details can feel a bit manual and less intuitive than expected.

What problems is the product solving and how is that benefiting you?

It reduces the manual work of compliance and audit prep, which saves us time and makes ongoing compliance much easier to manage.

What do you like best about the product?

It’s easy to use and provides helpful feedback on materials and proof. The AI agent documents items very well and reviews the materials quickly. Team was availalble to answer questions and provide availbility for meetings with others to discuss findings.

What do you dislike about the product?

Sometimes answers for what was missing from proof was ambiguous or was forced to make it correct manually after AI scans.

What problems is the product solving and how is that benefiting you?

Strikegraph helps us document and find out status of CMMC Compliance and prepare for an audit. It allow us to give access to the data needed quickly without giving extra access.