I have been deploying all the services to Australia and USA. These are for customer compliance on HIPAA, ISO 27001, SOC 2, and similar standards.
External reviews
1,085 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Experience with drata
What do you like best about the product?
Drata gets the job done when it comes to compliance monitoring and audits. It was easy to implement and we use it daily. Support has always been top tier.
What do you dislike about the product?
It is a growing piece of software. Their software is still maturing.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance was our primary use.
Great Product
What do you like best about the product?
Integrations and everything is in one place
Makes it easier to map frameworks
Makes it easier to map frameworks
What do you dislike about the product?
More flexibilty in connecting different sources for same things, e.g. policies can be stored in Google Drive, BambooHR, and another place.
What problems is the product solving and how is that benefiting you?
Helps us to prepare for the SOC2 audit and make it an easier & smoother process
Great GRC-automation platform
What do you like best about the product?
Drata's automation simplifies the lives of startup founders. We're using their platform to get certified by 3 different frameworks. It's very convenient that evidence uploaded to the platform is automatically mapped to controls across different frameworks. Their integrations are great and this is a huge time saver.
What do you dislike about the product?
Their onboarding could have been better. We were assigned a third-party firm to work with for 30 days and it didn't feel like their program was very basic and catered to companies that weren't already familiar with compliance.
What problems is the product solving and how is that benefiting you?
Helping us become SOC2 Type2, ISO27001, and GDPR compliant. We use their automated-GRC process to become compliant instead of working directly with auditors and going through a manual evidence collection process.
Straightforward tool - organize everything needed
What do you like best about the product?
Drata successfully automates internal control verification for audit initially and ongoing. It nearly does the job of a full time junior level GRC focused employee. Certainly makes my life easier - I use it at least every week. Also, you can re-scan on demand after you fix something, which is more than other tools I've used in the past can say. It's simple to implement on your cloud resources. Customer support is responsive and helpful from the initial engagement onward.
What do you dislike about the product?
Sometimes the error messages on why a given control is failing could be more explanatory. The platform takes about a week to learn to navigate but works well once you know how. It doesn't integrate with the most common ADP implementation but hopefully that will change soon.
What problems is the product solving and how is that benefiting you?
Gain initial SOC 2 compliance. We wouldn't be able to even come close this year were it not for Drata.
Great Platform for Enabling Constant Compliance
What do you like best about the product?
Drata enables "continuous compliance." This has shown itself to be very helpful in practice. When working on SOC2 at prior companies we would often find issues and gaps during the Audit or as we generated populations for the audit. Drata's constant checks for compliance allows us to show auditors a track record of continual work on our compliance journey and allows us to find and fix gaps and deviations without being already in the room in front of an auditor.
I also have had great experience with their customer support and their AI chatbot. The chatbot is able to understand our internal policies and procedures and generate adhoc answers to audit questions that pull from our actual policies. Customer support has also been able to go the extra mile to diagnose indepth issues with how their platform was interpreting our cloud setup and provide pointers on how to adjust our Azure settings to make them more secure.
I also have had great experience with their customer support and their AI chatbot. The chatbot is able to understand our internal policies and procedures and generate adhoc answers to audit questions that pull from our actual policies. Customer support has also been able to go the extra mile to diagnose indepth issues with how their platform was interpreting our cloud setup and provide pointers on how to adjust our Azure settings to make them more secure.
What do you dislike about the product?
Drata sometimes can feel like a game of "whack-a-mole." The graphs show a track record overtime per control and as a company grows it will get harder and harder to show "constant" compliance. Invariably some user is always going to be late on their training or an engineer will create an improper resource in the cloud and cause a permanant blemish on the record over time. I'm not sure how to make it work but being able to show constant forward progress would be more advantatageous versus showing all the red marks where we failed for a day.
What problems is the product solving and how is that benefiting you?
Drata gives us a single pane of glass view of our security posture across all the tooling that we use accross the enterprise. Without Drata it would be impossible to go through the dozen pieces of our environment and ensure that our teams are following the policies and procedures that the company requires. Drata removes the embarrassment of having to find those defecits with the auditors in the room.
Drata Recommendation As Our Risk and Compliance Tool
What do you like best about the product?
It just makes our Risk and Complaince journey smooth and seamless. Ease of integration also with the staff. Lastly, the customer support is top notch.
What do you dislike about the product?
Honestly, nothing, just few observations around how some features can be added to it, but overall, it does what I expect it to do.
What problems is the product solving and how is that benefiting you?
Helping with the burden of compliance.
Solid compliance platform
What do you like best about the product?
The support is responsive and very helpful.
What do you dislike about the product?
The UI can be a little overwhelming and there's a bit of a learning curve.
What problems is the product solving and how is that benefiting you?
Before Drata, our evidence collection was manual and time-consuming. Drata integrates directly with many of our key systems and offers a centralized place to upload and update evidence. They also provide a network of inexpensive but good auditors.
One stop shop for compliance
What do you like best about the product?
I think the most useful things about drata are its intergrations and its structure, you can link so many systems and use it as not just a one time thing during audit season, but you can use it to continously track and monitor compliance and allow your company to maintain a strong security posture. Its also incredibly easy to use especially if you are a company without concrete policies set or you need to sharpen up existing ones.
What do you dislike about the product?
The drata agent which helps monitor device compliance for your users sometimes struggles to pick up certain types of software, but that can be solved with a couple of screenshots and a few button presses
What problems is the product solving and how is that benefiting you?
Drata is helping us solve our issue of not having a full picture of our security, it allows us to see and monitor employees and make sure they have acknowledged everything they need to, it lets us perform vendor reviews, it lets us handle risk management without being split between 5 different products. It makes audits easier because all the evidence is in one place and you can organise yourself accordingly, you're no longer hunting for that one random document for 10 minutes. It also provides the framework and structure needed to pursure other standards and frameworks, it gives confidence of being able to successfully pass an audit.
best experience
What do you like best about the product?
web platform and Ease of Use, Ease of Implementation and Customer Support is all ready up
What do you dislike about the product?
Could you improve the Drata agent so that it can detect disk encryption using different tools
What problems is the product solving and how is that benefiting you?
Drata help us to implement ISO 27001.
Offers APIs for every clause so that it can integrate into various platforms
What is our primary use case?
How has it helped my organization?
Drata provides compliance management, including customer compliance on HIPAA, ISO 27001, and other standards. The platform allows for documentation and uploads of records, which can be reviewed by qualified security assessors. This helps in seamless audit preparations.
What is most valuable?
Drata offers APIs for every clause so that it can integrate into various platforms. It has real-time features and dashboards and allows for automation. The support is excellent, with rapid response within an hour. The platform is described as very rich, offering a comprehensive array of features.
What needs improvement?
The existing features of Drata are already extensive and costly to integrate. It requires a certain level of development understanding from companies. Improvements could be in the area of reducing costs and making integrations more accessible.
For how long have I used the solution?
Drata services have been deployed to Australia and the USA.
What do I think about the stability of the solution?
Drata has a good speed and is described as a fast solution.
How are customer service and support?
Customer service is excellent, with responses typically received within an hour. The support system, including TalkShare, is available and highly efficient.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have used several solutions before. Every company uses different software; not everyone goes for the highest qualified security systems available.
What was our ROI?
It doesn't provide monitoring benefits or savings directly as it's an assessment platform, yet it offers comprehensive compliance features.
What's my experience with pricing, setup cost, and licensing?
Drata is very expensive with each API incurring a cost. It is described as a costly tool. Rarely do people choose the most qualified security assessment tools due to cost considerations.
Which other solutions did I evaluate?
ServiceNow is cheaper, around $25,000 per company compared to Drata. Other tools evaluated include Avaya and various VMware products.
What other advice do I have?
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
showing 91 - 100