External reviews
External reviews are not included in the AWS star rating for the product.
DRATA Review
What do you like best about the product?
DRATA allows you to manage your entire GRC program from one tool out the box. Great policy templates, solid risk register and the ability to run audits from one tool. Easy to use and understand.
What do you dislike about the product?
Drata needs to add more EDR options and change the follow of Risk Assessment module.
What problems is the product solving and how is that benefiting you?
Automated work flow and visibility
- Leave a Comment |
- Mark review as helpful
Helpful product for approaching SOC 2 Compliance
What do you like best about the product?
User Friendly
Easy to set up and use
Easy and useful integrations
Fantastic and helpful support
Extensive risk library with helpful visuals
Easy to set up and use
Easy and useful integrations
Fantastic and helpful support
Extensive risk library with helpful visuals
What do you dislike about the product?
Drata agent had some issues with some machines, especially during the install
Further integrations, especially with EDR software, would have been helpful
Further integrations, especially with EDR software, would have been helpful
What problems is the product solving and how is that benefiting you?
We are using Drata to persue SOC2 compliance. Drata is the tool we are using to assist us in meeting all the requirements and provide the auditor with the tools needed to check our compliance.
There was a learning curve, but now I find everything very useful.
What do you like best about the product?
Fast customer support. I think all the other parts can be finetuned with engineering efforts, but the fact how the support is acting makes my life happier when in need.
What do you dislike about the product?
Policies/Controls navigation sometimes is tricky and I need to have tons of tabs opened not to loose my initial view.
What problems is the product solving and how is that benefiting you?
Compliance tracking and everything related to these topics.
Drata is the best compliance tool.
What do you like best about the product?
The ease of the platform to handle all of our compliance needs. Simple walkthroughs and more importantly prescription for what you need. Support and on boarding are incredible! The number of features included in the license is great! All in one platform that was easy to set up and get my employees enrolled in.
What do you dislike about the product?
Nothing really to note as of now. Everything in the platform is working as advertised.
What problems is the product solving and how is that benefiting you?
Drata is solving our manual approach to compliance frameworks.
Great platform, Amazing CSM
What do you like best about the product?
It's an easy and powerful platform to use. Our CSM was Elizabeth, and she has been absolutely amazing to work with. She's proactive, supportive, and has single handedly helped make my life easier as a security practitioner.
What do you dislike about the product?
Haven't experienced any issues in the last 12 months of working with them.
What problems is the product solving and how is that benefiting you?
Automated SOC 2
Audit prep
Using security as a marketing tool
Audit prep
Using security as a marketing tool
Great Product, Great Support
What do you like best about the product?
Its hard to say which part I liked best:
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
What do you dislike about the product?
At the time we tried it, their free trust center was not super configurable. So we ended up having to build our own trust center for our customers to find the current state of our security program and request security evidence.
What problems is the product solving and how is that benefiting you?
Drata brings in all of the evidence and data required to understand our security posture, provide evidence to auditors, and design controls that keep our employees, customers, and data safe with ample privacy protections for all.
Compliance, planning, monitoring, all in one
What do you like best about the product?
It's hard to pick just one feature, here are my favorites:
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
What do you dislike about the product?
If you already have ISO management software for something Drata doesn't support, you can make a Custom Framework (which is great) but it takes a lot of effort to implement (which makes perfect sense). That said, all the security compliance needs are well thought out and super easy to use.
What problems is the product solving and how is that benefiting you?
We need to plan and consider a lot of things before launching a new Service to customers. Drata does a great job making a roadmap to follow to consider all the things we might not think about, but are really important.
How Drata saved me from going crazy.
What do you like best about the product?
Platform is easy to understand with great insight from their help sections, but the best thing was the consistent communication and insight from Elizabeth. She was terrific.
What do you dislike about the product?
I have not found a downside yet. We will keep looking.
What problems is the product solving and how is that benefiting you?
Drata is assisting us in our SOCII Certification. We are a relatively new start-up with no security compliance background. If a novice team can navigate the solution and get a SOCII report done, all the credit goes to Drata and their team.
Great platform for getting compliance certifications quickly
What do you like best about the product?
Provides pre-built templates for all required policies and controls for the common certifications. Comes with pre-built controls that helps track the current status of compliance with each requirement.
It's very simple to use and kept us organized when building the policies, implementing them, gathering evidence, and during the audits themselves.
It's very simple to use and kept us organized when building the policies, implementing them, gathering evidence, and during the audits themselves.
What do you dislike about the product?
Missing some features, specifically better customization in monitored tests and the Drata agent which verifies endpoint compliance.
I would like to have a tighter link between the policies and the controls. After setting up the initial policies, adding new frameworks is a bit more complex. It's hard to keep track of your policy changes compared to the standard template.
I would like to have a tighter link between the policies and the controls. After setting up the initial policies, adding new frameworks is a bit more complex. It's hard to keep track of your policy changes compared to the standard template.
What problems is the product solving and how is that benefiting you?
policy creation (templates), policy impementation, evidence collection including ongoing monitoring
Great tool for automating security compliance
What do you like best about the product?
The automation of evidence gathering and tight integration into our existing tech stack.
What do you dislike about the product?
When automated tests against specific pieces of infrstructure fail it can be hard to tell what drata is looking for in the testing.
What problems is the product solving and how is that benefiting you?
Drata helps us ensure that we can continually compliant against all the security and privacy frameworks we target and enables us to provide accurate, live updates to our customers on our security posture.
showing 131 - 140