Sold by: Strike Graph
Strike Graph's AI-powered compliance management software empowers organizations with world-class AI technology to reduce manual work, stay continuously compliant with real-time validation, and scale effortlessly to meet enterprise standards.
4.6
Overview
Helping teams confidently navigate complex compliance programs, Strike Graph was built for mid-size to large enterprise companies looking to reduce manual effort, audit risk, and time to certification without compromising security and speed.
Uniquely positioned for the manufacturing industry from automative, medical devices, and Department of Defense contractors, Strike Graph's native AI and purpose built features like System Security Plans (SSP), Plan of Action & Milestones (POA&Ms), Self-Assessments, and SBOMs make achieving CMMC a breeze.
Intelligent cross-framework mappings of risks, controls and evidence streamline achieving compliance for ISO 27001, NIST 800-171, TISAX, PCI DSS, and US and EU Pre & Post Market Requirements. Easily manage and share compliance across your entire organization with enterprise content management.
At the core is Verify AI, your intelligent internal auditor. It continuously tests controls, validates evidence, and flags issues in real time-tailored to your unique compliance needs, not just standard templates. Verify AI ensures ongoing audit readiness by monitoring your program between assessments and offering instant, actionable insights.
Supporting this is the Security Assistant, your AI compliance advisor. It recommends improvements, auto-fills security questionnaires, and implements fixes with a single click. Combined, these features eliminate guesswork and streamline your entire compliance lifecycle.
Strike Graph integrates seamlessly with over 5,000 data sources to securely automate workflows and make recommendations based on your unique environment minimizing friction and accelerating compliance. Security is a priority. Your data remains encrypted, siloed, and never used to train third-party models. You control visibility with granular access settings to ensure only authorized users and view or edit data.
Our vision is simple: AI that empowers your compliance. Get audit-ready, stay audit-ready, and move your business forward with confidence.
Highlights
- Manage compliance across your enterprise: With enterprise content management, you can easily share controls, assign tasks, and track progress across multiple locations, frameworks, or products-all from one centralized platform.
- Powerful AI tools: Verify AI ensures ongoing audit readiness by continuously testing controls, validating evidence, and flagging any issues in real time. AI Security Assistant offers instant, actionable insights, recommends improvements to your security posture, and auto-fills security questionnaires.
- Seamless Integrations-Securely connect data sources to initiate real-time evidence collection. Our AI understands your environment and suggests relevant controls, minimizing friction and accelerating compliance across all frameworks.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Scale | Includes: Everything from Certify plan, Pre-seeded Tier 1 or Tier 2 framework (ISO 27001, PCI DSS, TISAX), Verify AI, Multi-domain users, 20 security questionnaires, Reduced audit, framework, and evidence attachment pricing, Additional cross-mapped framework, Annual audits (additional cost) | $18,000.00 |
CMMC Bundle | Includes: NIST 800-171 (CMMC Framework), SSP, POAM, SBOM, and Self Evaluation | $14,000.00 |
MedDev | Includes: MedDev, HITRUST, and SBOM | $12,000.00 |
Tier 1 Framework | Includes one Framework: CIS, CCPA/CPRA, GDPR, HIPAA, ISO 27701, NIST CSF (FINRA/GLBA), SOC 1, SOC 2 | $3,000.00 |
Tier 2 Framework | Includes one Framework: Essential Eight, ISO 27001, ISO 27799, ISO 42001, ISO 9001, PCI DDS, TISAX | $5,000.00 |
Tier 3 Framework | Includes one Framework: AZ DIFI, CMS, DORA, HITRUST, ISO 13485, MedDev, NIST 800-53 (FedRAMP), NIS2, NIST 800-171 (CMMC) | $8,000.00 |
Dimension | Description | Cost/unit |
|---|---|---|
Overages | Additional Usage | $1.00 |
Dimensions summary
You buy this platform on a contract basis, combining a base plan with framework and add-on selections. The Scale plan builds on the Certify plan and adds features like Verify AI and multi-domain users. You then add frameworks priced by complexity: Tier 1, Tier 2, and Tier 3 each cover one framework, with Tier 3 handling the most specialized standards. Bundles like CMMC and MedDev group related frameworks and documents together. Overages cover usage beyond your plan's included limits. This lets you scale coverage by adding frameworks and capacity as your compliance needs grow.
Top-of-mind questions for buyers
Each framework unit adds one standard to your program. Tier 1 covers standards like SOC 2, HIPAA, and GDPR. Tier 2 covers standards like ISO 27001, PCI DSS, and TISAX. Tier 3 covers specialized standards like NIST 800-53, HITRUST, and NIST 800-171. You buy one unit per framework you need.
Your bill combines several parts. You start with a Scale plan, which includes one framework. You then add separate framework units for each extra standard you need. Bundles like CMMC or MedDev group related frameworks and documents into one line. Overages add charges for usage beyond your plan's included limits.
The CMMC Bundle includes the NIST 800-171 (CMMC) framework plus a System Security Plan, POA&M, SBOM, and Self Evaluation. The MedDev bundle includes the MedDev framework, HITRUST, and SBOM. Each bundle groups related frameworks and supporting documents so you buy them together rather than as separate framework units.
www.strikegraph.com
Helpful?
Vendor refund policy
All fees are non-refundable and non-cancellable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Email support services are available from Monday to Friday.
support@strikegraph.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
The AI-native CrowdStrike Falcon Platform provides comprehensive protection across all areas of enterprise risk - devices, identities, data, endpoints and cloud. Powered by a single agent, crowdsourced data, expert threat intelligence, and advanced AI, the Falcon Platform simplifies security operations and stops breaches.
CrowdStrike Services helps organizations train for, react to and remediate a breach quickly and effectively — getting you back to business faster.
Automate CrowdStrike Falcon sensor installation and configuration in your EC2 Image Builder AMI creation pipeline.
falcon-mcp enables seamless communication between AI agents and the CrowdStrike Falcon platform. Deployable directly onto Amazon Bedrock AgentCore, it provides programmatic access to Falcon data for agentic workflows and accelerating AI-native security automation.
Customer reviews
Computer & Network Security
Easy-to-Navigate Website with Clear Q&A Sections
Reviewed on Jul 23, 2026
Review provided by G2
What do you like best about the product?
The website is easy to navigate with clearly defined question and answer sections.
What do you dislike about the product?
Nothing to really dislike as the forms are created by the company.
What problems is the product solving and how is that benefiting you?
Strike Graph enabled my company to submit our information for audit purposes. Upon completion, we were able to continue providing our service.
Information Technology and Services
Great for Linking Controls & Compliance Docs, but Needs Project Status Tracking
Reviewed on Jul 21, 2026
Review provided by G2
What do you like best about the product?
Ability to link controls and compliance documentation, as well as incorporate integrations.
What do you dislike about the product?
I have not worked with the tool long enough to provide this feedback. However, it would be helpful to track project performance through status updates, and currently the tool does not provide this.
What problems is the product solving and how is that benefiting you?
We are currently in implementation and I cannot clearly describe what the real benefits are at this time.
Higher Education
Clean, Audit-Ready Compliance Tool with Phenomenal Support
Reviewed on Jul 21, 2026
Review provided by G2
What do you like best about the product?
I like being able to assign controls to the people responsible for them. I also appreciate the built-in risk assessment. Having support for multiple organizations is helpful too, since I can inherit a large corporate policy into my system security plan.
The interface is clean and easy to navigate, they consistently add updates. The support is phenomenal.
They do have AI tools built in to query the documentation easier.
It's been great to use and have available during an audit
The interface is clean and easy to navigate, they consistently add updates. The support is phenomenal.
They do have AI tools built in to query the documentation easier.
It's been great to use and have available during an audit
What do you dislike about the product?
The evidence for controls can be buried through menu options.
What problems is the product solving and how is that benefiting you?
NIST 800-171 Compliance, HIPAA compliance, other regulatory compliance.
Risk Assessments for systems.
Strike Graph definitely makes it easier to handle all the documentation during an audit.
Risk Assessments for systems.
Strike Graph definitely makes it easier to handle all the documentation during an audit.
Eric S.
Extremely Attentive Support That Always Has Answers
Reviewed on Jul 20, 2026
Review provided by G2
What do you like best about the product?
Great support. They were extermely attentive to all of our questions.
What do you dislike about the product?
I wish they had more flexibility in their automated connectors.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance. We could not accomplish SOC2 without them.
Bibi C.
Outstanding Support — Achieved Multi-Framework Compliance Thanks to Stephanie Lorraine
Reviewed on Jun 30, 2026
Review provided by G2
What do you like best about the product?
Strike Graph hasn't been just a SaaS platform, we've received incredible service from their team to help us reach compliance across multiple frameworks. Working with Stephanie Lorraine in particular has been a highlight of our experience.
What do you dislike about the product?
I don't have any negative feedback about Strike Graph so far!
What problems is the product solving and how is that benefiting you?
Strike Graph makes it easier to understand what we need to do, create, implement and/or prove to reach certification across several different security frameworks. Our customer base expects us to be SOC2 compliant and as we grow, they also expect us to be GDPR, PCI and HIPAA compliant. Being able to use one platform/service to help us achieve this has made everything quicker and more efficient.