External reviews
External reviews are not included in the AWS star rating for the product.
Smooth experience with Drata
What do you like best about the product?
Drata has great customer support - I have reached out to them for help a lot of times and they have always been responsive and extremely helpful. The platform is straightforward and easy to use.
What do you dislike about the product?
I wish they had more integrations. Some of the things we use they don't have automatic integrations yet so I have to manually upload evidence.
What problems is the product solving and how is that benefiting you?
Drata is helping me organize everything we need to get our SOC2 and ISO 27001 compliance certifications done.
- Leave a Comment |
- Mark review as helpful
SOC 2 Type 2 experience
What do you like best about the product?
Continous monitoring throughout the period that allows you to fix issues as you go and you don't have stress out just before the audit starts.
What do you dislike about the product?
Sometimes the behaviour is not intuitive or consistent accross the product e.g. task view - adds task for expiring evidences that are monitored but that is not always true for resources in settings page e.g. org chart.
I would like to nore distribute the work accross the team but Drata permission model doesn't allow that though that was improved recently.
There was few shakes of trust that happend to us and we were loosing a trust to product little bit:
1. Drata agent - provide false sense of being on checked when we discovered that some HW haven't reported checks for more than 9 months which equals to situation that we hands over the PC and than have no checks
2. During the audit the auditor was claiming that he don't see evidences that were uploaded on quarterly basis which was scary given the fact that we are not backing up evidences uploaded to Drata. Thankfully it was restored with support and provided extra to auditor. But finally we don't know what was a problem as acting via middleman is clumsy. We were instructed with support to raise it that additional training will be provided with auditor. But what I think would be more appropriate and well appriciated would be auditor communicating with drata folks directly either resulting in either additional training or restoring data. The result we got are ok we survived the audit, but I have no clarity whether it was problem with the auditor or with platform and I am afraid it will be repeated next audit.
The features that would be really appriciated and are missing is measuring SLAs for offboarding where a lot of focus is during the audit.
I would like to nore distribute the work accross the team but Drata permission model doesn't allow that though that was improved recently.
There was few shakes of trust that happend to us and we were loosing a trust to product little bit:
1. Drata agent - provide false sense of being on checked when we discovered that some HW haven't reported checks for more than 9 months which equals to situation that we hands over the PC and than have no checks
2. During the audit the auditor was claiming that he don't see evidences that were uploaded on quarterly basis which was scary given the fact that we are not backing up evidences uploaded to Drata. Thankfully it was restored with support and provided extra to auditor. But finally we don't know what was a problem as acting via middleman is clumsy. We were instructed with support to raise it that additional training will be provided with auditor. But what I think would be more appropriate and well appriciated would be auditor communicating with drata folks directly either resulting in either additional training or restoring data. The result we got are ok we survived the audit, but I have no clarity whether it was problem with the auditor or with platform and I am afraid it will be repeated next audit.
The features that would be really appriciated and are missing is measuring SLAs for offboarding where a lot of focus is during the audit.
What problems is the product solving and how is that benefiting you?
Continous monitoring and automatic evidence collection. Providing a sense of security in some aspects.
Solid product, helpful support
What do you like best about the product?
- Most important integrations are available and easy to setup
- Drata Agent as lightweight MDM solution
- Simple UI which gets the job done
- REST API to build custom workflows
- OOTB policy templates with guidance
- Customer support is friendly, helpful and usually quick to respond
- Drata Agent as lightweight MDM solution
- Simple UI which gets the job done
- REST API to build custom workflows
- OOTB policy templates with guidance
- Customer support is friendly, helpful and usually quick to respond
What do you dislike about the product?
- While SOC 2 is well documented in the help center, ISO 27001 is not always mentioned as well.
- In a few (non-breaking) aspects it feels like Drata is a somewhat stitched together product (e.g. forms using Typeform). But it usually does not affect the usage, especially considering that Drata is still a relatively young company.
- More integrations that could be helpful
- In a few (non-breaking) aspects it feels like Drata is a somewhat stitched together product (e.g. forms using Typeform). But it usually does not affect the usage, especially considering that Drata is still a relatively young company.
- More integrations that could be helpful
What problems is the product solving and how is that benefiting you?
Drata is helping us building and improving processes around compliance and security, preparing us for ISO 27001 and SOC 2.
Security monitoring platorm
What do you like best about the product?
I like the effectiveness of Drata in identifying security vulnerabilities and promptly notifying users about pending tasks. Additionally, I find the numerous connectors available to integrate with other applications impressive. The seamless and user-friendly process, coupled with the responsive and helpful customer support, enhances the overall experience with Drata.
What do you dislike about the product?
Cost to operate Drata is very high for Startups.
What problems is the product solving and how is that benefiting you?
Creating and managing policies. Keeping track of Cloud platform security vulnerabilities.
Drata as unique business enabler - compliance is no longer obligation - it's a joy.
What do you like best about the product?
Drata team that designs the product they sell in the way how every single CISO would like it. Simple for users, comprehensive and detailed for auditors, and - visible and transparent for CISOs and other C-level stakeholders. I even made my customers to like Drata via Trust Center, which is truly unexpected result.
What do you dislike about the product?
A lot of dependencies locked in integrations, making me so excited about Integration 2.0 which will allow me integrate my specific tools faster than Drata fastest guy will do it.
What problems is the product solving and how is that benefiting you?
Drata automates my approach to the security way beyond just compliance.
Drata had all the answers
What do you like best about the product?
Elizabeth, our CSM, was an incredible guide throughout our process towards SOC 2 compliance. At every point in the process, we had a clear understanding of what we were missing as well as actionable solutions to solving these issues.
Drata also has a wealth of online resources and Live Chat for any questions we had inbetween check ins. There was never a point in the process where our team didn't feel equipped to tackle the next step. This is all thanks to Drata's meticulous attention to detail, both in their services and in their interface, as well as Elizabeth's wisdom and insight as our CSM.
Drata also has a wealth of online resources and Live Chat for any questions we had inbetween check ins. There was never a point in the process where our team didn't feel equipped to tackle the next step. This is all thanks to Drata's meticulous attention to detail, both in their services and in their interface, as well as Elizabeth's wisdom and insight as our CSM.
What do you dislike about the product?
The Drata app is incredibly well organized and easy to use. That being said, there were times when using the Drata dashboard that my changes were not saved. I had to be mindful when loading files or making disposition changes to make sure they went through successfully.
What problems is the product solving and how is that benefiting you?
Drata makes it incredible easy to monitor controls for security compliance, and understand exactly what needs to get done to mature your security posture. They give clear insight into what improvements need to be made, as well as ample resources to make those improvements a reality.
My experience with Drata has been amazing so far.
What do you like best about the product?
Drata is very intuitive to use, populate with evidence and navigate overall. It has additional capabilities on top of its main functionality that bring a lot of value.
What do you dislike about the product?
Some aspects of the app are not fully automated, but those have been confirmed to be in the works by their team.
What problems is the product solving and how is that benefiting you?
Drata is essential in our audit/certification processes, as well as tracking our evidence packages and monitoring our security controls.
Truly exceptional Customer Success team
What do you like best about the product?
The Customer Success team has been fantastic. Our CS manager, Jordan Penn, has gone above and beyond on multiple occassions, he's knowledgeable, friendly and seems genuinely dedicated to ensuring I am able to use the software in the best way possible - it's the most impressed I've been by a CS manager uing any software.
The platform itself is clear and well organised. It's full of helpful tips on what means what and how we should be inputting information. Very easy to integrate with other tech, which helps ensure it is hassle free and hands off keeping on top of everything compliance related.
The platform itself is clear and well organised. It's full of helpful tips on what means what and how we should be inputting information. Very easy to integrate with other tech, which helps ensure it is hassle free and hands off keeping on top of everything compliance related.
What do you dislike about the product?
Very little to say in terms of dislikes.
What problems is the product solving and how is that benefiting you?
Helping simplify the process of preparing for an audit
Fairly intuitive product
What do you like best about the product?
Really helpful complimentary documentation, especially for the policies. I did need to reach out to ask for help in order to find the right sections of this documentation but now that I know where it is, super helpful (could be useful to link out in the comments at the top of each policy). The UI is simple to use and has easy link outs ot more details.
What do you dislike about the product?
I expected a formal onboarding, which was never setup or suggested. This may be because I was familiar with similar tools and had already started asking questions, indicating I was already using the platform but it felt like I just suddenly had this tool and needed to find my way from day 1.
What problems is the product solving and how is that benefiting you?
Getting our SOC2 and ensuring constant monitoring as we work to get there.
Great Tool and Support!
What do you like best about the product?
Drata helped us to stay organized and aware of deliverables for continuous compliance.
- The platform is easy to use
- Interface is friendly
- Compliance Monitoring
- Ease of Implematation
- Customer Support
- The platform is easy to use
- Interface is friendly
- Compliance Monitoring
- Ease of Implematation
- Customer Support
What do you dislike about the product?
There isn't much to complain about.
Even though there were a minor issues with integrations, the team was still able to provide soultions to help with automated contols.
Even though there were a minor issues with integrations, the team was still able to provide soultions to help with automated contols.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance
showing 151 - 160