Strac detects and protects sensitive data across SaaS, cloud, and endpoint infrastructure using a Python/Node.js stack hosted on AWS. The company is actively building third-party integrations and a machine learning pipeline for false-positive reduction—core to their remediation platform—while scaling sales operations. Founded in 2021 and backed by Y Combinator, they're moving from product-market fit toward larger enterprise deployments.
Strac provides automated sensitive data discovery, data loss prevention (DLP), and data security posture management (DSPM) for enterprises. The platform scans SaaS applications (Office 365, Gmail, Slack, Google Drive, Zendesk, Intercom), cloud services (AWS, Azure), and endpoint devices to classify and remediate sensitive customer data through redaction, masking, labeling, alerting, deletion, encryption, and blocking. The company operates as an early-stage, engineering-led organization headquartered in Bellevue, Washington, with 11–50 employees and active hiring in the United States and India.
Strac builds on Python, Node.js, and JavaScript with AWS services including Lambda, DynamoDB, RDS, ECS, SQS, and VPC. They integrate Claude, OpenAI, and Hugging Face for ML capabilities, plus React for frontend and LangChain for RAG pipelines.
Core initiatives include expanding third-party integrations (connectors for new SaaS and cloud platforms), building a machine learning pipeline for false-positive reduction, scaling the sales organization, and developing next-generation data-protection tools.
Other companies in the same industry, closest in size