External reviews
External reviews are not included in the AWS star rating for the product.
Has helped our team stay compliant
What do you like best about the product?
Drata helps us maintain all our security compliance activities in one place. The application for the most part is easy to use. And has a short learning curve.
We also like their support team. They have been helpful when we needed help.
Additionally, Drata continues to add new features to the platform. We are able to manage more of our compliance activities in Drata rather than outside Drata.
We also like their support team. They have been helpful when we needed help.
Additionally, Drata continues to add new features to the platform. We are able to manage more of our compliance activities in Drata rather than outside Drata.
What do you dislike about the product?
There is nothing to dislike. There were some obvious feature gaps when we started using it but they have filling those gaps at a rapid pace.
What problems is the product solving and how is that benefiting you?
Helps us achieve SOC 2 compliance and stay compliant.
- Leave a Comment |
- Mark review as helpful
Fantastic Compliance and Security Platform
What do you like best about the product?
Drata centralizes and helps to automate your compliance needs under one solution; audits, vendor mgt, risk mgt, policy mgt, assets, reporting, and a trust portal.
What do you dislike about the product?
I honestly cannot think of one thing. Drata continues to bring feature after feature to improve the product.
What problems is the product solving and how is that benefiting you?
Allows a small team to work more effciently by automating various tasks that typically would take weeks to complete.
Seamless Communication and Solid Work Ethics but Room for Improvement in User Education
What do you like best about the product?
Efficient Communication: Despite the time zone difference, the communication with Drata's compliance team has been exceptionally smooth. I can easily reach out during my working hours and receive a prompt reply by the next morning.
Flexible Tools: Not only do they offer a built-in chat tool, but they're also flexible enough to let me use third-party tools like Google Docs for commenting.
Outstanding Work Ethics: Being the sole point of contact for compliance in my small company, I've worked with the Drata team more closely than with some of my colleagues. Their professionalism, punctuality, and respectful manner exceeded my expectations.
Flexible Tools: Not only do they offer a built-in chat tool, but they're also flexible enough to let me use third-party tools like Google Docs for commenting.
Outstanding Work Ethics: Being the sole point of contact for compliance in my small company, I've worked with the Drata team more closely than with some of my colleagues. Their professionalism, punctuality, and respectful manner exceeded my expectations.
What do you dislike about the product?
Lack of Deep Understanding: While Drata's tool excels at guiding users through compliance tasks and significantly aiding in increasing the readiness percentage, there's room for improvement when it comes to instilling a deep understanding of the 'why' behind the compliance requirements. Although the compliance team is very helpful in answering many of these 'why' questions, it would be advantageous if such knowledge were incorporated directly into the tool. This would eliminate the need for users to remember all the intricate details and could serve as an ongoing resource for understanding compliance deeply.
Gap in Audit Preparedness: The tool is designed to make you compliant but not necessarily audit-ready. Users are left to themselves to make the connections between policy requirements, company statements, and actual practices.
Gap in Audit Preparedness: The tool is designed to make you compliant but not necessarily audit-ready. Users are left to themselves to make the connections between policy requirements, company statements, and actual practices.
What problems is the product solving and how is that benefiting you?
Gaining trust in our security practice internationally, beyond local market.
Best SOC 2 compliance management tool we found
What do you like best about the product?
Fast moving team that develops features quickly; by far the best UI compared to Tugboat and Vanta; agentless evidence checking (unlike Vanta) which is a much more secure architecture.
What do you dislike about the product?
Still a young and maturing product. Overly prescriptive in how to implement and evidence certain controls. For example, we handle network access management through security groups, but their automated evidence collection checked for NACL rules instead. There's not always enough flexibility to handle different controls, let along custom controls. So, you'll still end up uploading a fair share of manually collected evidence.
What problems is the product solving and how is that benefiting you?
All of our compliance readiness is handled well in one place. They are also very good at automating all the tasks needed to maintain readiness: it would be like herding cats to do that by hand.
Great platform and incredible support!
What do you like best about the product?
The platform is very easy to use, easy to set up, and the support is one of the best I've seen of any platform I've used.
What do you dislike about the product?
If you are new to SOC2 this platform probably will be your best bet, however, the connection with the auditor is a bit of a difficult concept to grok. Drata's platform does a pretty good job of holding your hand as to what you need to do to pass your audit but the challenge is that your auditing firm outside of Drata also has their own view of how it should be done and it can differ slightly from Drata. So you tend to find yourself in this gray area of not quite being certain you are ready or not. My advice is to not look to have Drata drive your SOC2 but rather your auditor with Drata as the tool. Full disclosure: I'm still in the middle of my SOC2 so can't say yet how I've done with "passing".
What problems is the product solving and how is that benefiting you?
Helping me achieve SOC2 Type 1 for my customers to be more confident in signing with me.
Great platform with excellent customer support
What do you like best about the product?
Super easy to set up, use and maintain, plus they have excellent customer support. The speed and frequency that Drata are releasing new & very good features is impressive and have really added to our experience.
What do you dislike about the product?
No downsides so far, we have loved the Drata product.
What problems is the product solving and how is that benefiting you?
Helping our small team maintain compliance on an ongoing basis
SOC2 made easy(ier)!
What do you like best about the product?
The setup of Drata was quite straight forward. The documentation and customer support was really helpful. The intergration was simple. Onboarding team was easy.
What do you dislike about the product?
The amount of policies can be overwhelming at first but this was where customer support came in handy!
What problems is the product solving and how is that benefiting you?
Getting a birdseye view of our current state and what needed to be done to achieve SOC2
Getting devices registered
Getting devices registered
Drata is excellent for compliance
What do you like best about the product?
This was the first time anyone had gone through SOC 2 compliance and Drata helped us achieve it without issue. Support was there from day 1 to help walk us through everything and answer any of our questions. I would not hesitate to use them again at another company.
What do you dislike about the product?
The drata agent could be better in regards to auto updating and covering all the main operating systems better. Some of the workflows and processes are a little clunky.
What problems is the product solving and how is that benefiting you?
Drata is helping us achieve our SOC 2 Type report. They helped us collect all the evidence and provided us with all of the boilerplate documented policies to help us get there. They also helped us find our SOC 2 Auditor as well.
Immediate value from both the software and the team
What do you like best about the product?
Drata allows us to focus on what we do best -- while also ensuring we establish, manage, and continue our high trust and compliance activities.
The software and services are easy, they have a broad partner ecosystem for us to leverage, we got major savings with these partners, and the Drata team is incredibly responsive.
The software and services are easy, they have a broad partner ecosystem for us to leverage, we got major savings with these partners, and the Drata team is incredibly responsive.
What do you dislike about the product?
Nothing to dislike. Their services are solid and always expanding.
What problems is the product solving and how is that benefiting you?
Focused, effective SOC2 activities and ongoing compliance. They help small-but-might companies like Zingly remain agile, do what we do best, and stay true in delivering trusted services
The Online Application for GRC Has Eased the Process
What do you like best about the product?
The ease of accessing and administering the policies and personnel menus has given the team some freedom to carry out other tasks. The Drata team keep adding up to the feature requests as we require.
What do you dislike about the product?
The fact that it may take a while before the updates are completed for what we require hurriedly.
What problems is the product solving and how is that benefiting you?
Drata is helping us meet the compliance requirements for our Data Privacy and Security, Vendor Security, and improving our knowledge of what to watch out for when working with customers' data. The new additions and updates are interesting, and the latest features provided are aligned with what we require. I believe Drata will keep meeting customers' needs.
showing 131 - 140