# Strike Graph vs Thoropass

**Leader by Vioscale score:** Thoropass

| Attribute | Strike Graph | Thoropass |
|---|---|---|
| **Vioscale score** | 36.9 (71% (medium)) | 56.3 (71% (medium)) |
| deployment.options | `{"cloud":true}` | `{"cloud":true}` |
| description.long | A cloud-based compliance management platform that automates the process of achieving and maintaining security certifications like SOC 2 and HIPAA. It includes control templates, evidence collection automation, and integrations with existing business tools. | A centralized audit management system that combines artificial intelligence with embedded expert auditors to help organizations prepare for and manage compliance assessments across multiple frameworks, automating evidence collection and streamlining the audit process. |
| features.capabilities | `{"policy_template_library":true,"custom_framework_authoring":true,"public_trust_center_hosting":true,"direct_auditor_portal_access":true,"automated_api_evidence_collection":true}` | `{"iso_27001":false,"soc2_type_ii":true,"pricing_model":"quote","policy_template_library":false,"custom_framework_authoring":false,"public_trust_center_hosting":false,"direct_auditor_portal_access":true,"endpoint_mdm_agent_monitoring":false,"automated_api_evidence_collection":true,"bundled_vendor_risk_questionnaires":false,"bundled_security_awareness_training":false,"continuous_cloud_control_monitoring":false}` |
| integrations.count | 3 | 10 |
| integrations.list | `[{"name":"Google Drive"},{"name":"SharePoint"},{"name":"Confluence"}]` | `[{"name":"AWS"},{"name":"Google Cloud"},{"name":"Microsoft Azure"},{"name":"GitHub"},{"name":"Atlassian Bitbucket"},{"name":"Azure DevOps"},{"name":"Jira"},{"name":"Asana"},{"name":"Clickup"},{"name":"Linear"}]` |
| platform.support | `{"web":true}` | `{"web":true}` |
| pricing | `{"type":"subscription","freeTier":false,"sourceUrl":"https://www.strikegraph.com/pricing","retrievedAt":"2026-08-25T08:26:27.115Z","billingPeriods":["year"]}` | - |
| pricing.free_tier | no | - |
| pricing.model | commercial | commercial |
| pricing.price_level | unknown | - |
| security.gdpr | - | yes |
| security.iso27001 | yes | yes |
| security.soc2 | yes | yes |

## Capabilities (Compliance Automation)

| Capability | Strike Graph | Thoropass |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Automated API evidence collection | ✓ | ✓ |
| Continuous cloud control monitoring | - | ✗ |
| Endpoint MDM agent monitoring | - | ✗ |
| Bundled security awareness training | - | ✗ |
| Bundled vendor risk questionnaires | - | ✗ |
| Public trust center hosting | ✓ | ✗ |
| Custom framework authoring | ✓ | ✗ |
| Direct auditor portal access | ✓ | ✓ |
| Policy template library | ✓ | ✗ |
| SOC2 type ii | - | ✓ |
| ISO 27001 | - | ✗ |
| Pricing model | - | Quote |

*Source: Vioscale. Generated 2026-09-01T14:44:36.302Z. "-" = undocumented, not absent.*