Problem

Sensitive customer and proprietary data increasingly flows through support tickets, email, chat, SaaS applications, cloud storage, endpoints, and generative-AI tools. This creates a costly combination of breach, fraud, regulatory, legal, and reputational risk: a customer may paste an SSN, payment-card number, medical record, or identity document into a support conversation, where it can be accessed by too many people or exposed through a compromised system. Strac cites $1.76 million in average savings for organizations using security AI and automation, while its core thesis is that traditional DLP often alerts after exposure and that the better economic outcome is to prevent the exposure in the first place.

The clearest killer use case is customer support. Strac redacts PII, PHI, and PCI data from Intercom, Zendesk, email, and similar channels while preserving the conversation for authorized staff. This lets businesses safely resolve issues involving sensitive information through chat rather than forcing customers onto slower phone-based workflows, while reducing fraud, compliance exposure, and the operational cost of manually reviewing or cleaning up data.

Product / Service

Strac is a SaaS, agentless data-security platform that combines data discovery, classification, Data Security Posture Management, and Data Loss Prevention. It connects through APIs and integrations to SaaS applications, cloud environments, endpoints, browsers, and GenAI tools; uses machine learning, context-aware detection, and OCR to identify sensitive data in text and files; and then applies policy-driven actions such as redaction, masking, tokenization, blocking, deletion, labeling, quarantine, alerting, or access revocation.

The product is sold as a unified security and compliance layer rather than as a collection of point tools. Strac claims deployment in under ten minutes across more than 50 integrations, without endpoint agents or code changes, and provides audit trails and compliance reporting. The benefit is a shift from alert-only monitoring to automated remediation: organizations can continue using SaaS and AI tools while reducing the amount of sensitive information those systems and models can actually see.

Market

Strac competes in the overlapping markets for Data Loss Prevention, Data Security Posture Management, SaaS security, data discovery and classification, and AI-data governance. Its competitive set includes BigID, Cyera, Varonis, Securiti, Sentra, Dig Security, Wiz Data Security, Microsoft Purview, Netskope, and Forcepoint. Strac positions itself around the combination of agentless DSPM and real-time DLP across SaaS, cloud, endpoints, browsers, GenAI, and AI-agent workflows, with faster deployment and more inline remediation than discovery-heavy or legacy DLP alternatives.

Strac is an active, privately held company founded in 2021 and part of Y Combinator’s Winter 2022 batch. Public traction includes a $3.5 million seed round led by FUSE, a 2022 claim of dozens of customers and 22% month-over-month revenue growth, and named enterprise users including UiPath, Databricks, thredUP, B Capital, and Crypto.com. Its current G2 profile shows 28 reviews and continued customer usage, but the available evidence does not disclose current ARR, total revenue, or market share; the company therefore has clear commercial traction and should not be characterized as pre-revenue, while its current financial scale remains undisclosed.