External reviews
1,144 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Comprehensive Compliance Templates for Nearly Every Audit Type
What do you like best about the product?
Drata let's us control all of our compliance/audit related requirements in one system–simple as that. The UX is great–it's easy to understand, easy to navigate, easy to add evidence, etc. The automation workflows are great–being able to automatically import all of our employees, devices, 2FA rules, etc. directly from our SaaS/PaaS products (e.g., Azure) is fantastic. The TrustCenter is quite helpful as well as a way of sharing sensitive documents (e.g. audit reports) with third parties in a tracked manner. It's a great tool tbh.
What do you dislike about the product?
It's a big system so it can be quite confusing at first. It's hard to know what's actually required for your various audit types–Drata gives you a template for nearly everything, but do you actually need everything in the template? Probably not. That's not Drata's fault, it's just the nature of being a generalized compliance tool that works across every industry.
What problems is the product solving and how is that benefiting you?
What are our SOC 2 requirements? We can't go through a SOC 2 audit without knowing all of our requirements. Drata tells you your requirements and lets you manage them all in one place.
Effortless Compliance Gap Detection and Audit Readiness
What do you like best about the product?
The platform makes it very easy to identify compliance gaps and ensure you are audit-ready.
What do you dislike about the product?
The onboarding process can be quite involved depending on the existing compliance program.
What problems is the product solving and how is that benefiting you?
Drata makes audit readiness and control validation simple and centralized.
Exceptional Security and Customer Service
What do you like best about the product?
I like that Drata is easy to use, and I feel confident that everything is safe and secure when I store my information. I appreciate that I can just click into it whenever I need to. The support I receive is fast and efficient. It's very fast and efficient overall. Installing Drata was extremely easy; the instructions were simple, and it was ready to go right after downloading. The customer service is exceptional.
What do you dislike about the product?
I can't think of anything that I dislike about Drata. I found it so simple to install based on the instructions that were sent to me from my IT team.
What problems is the product solving and how is that benefiting you?
Drata helps us avoid any kind of security breaches, ensuring everything is safe so we don't have to worry about our computers.
Robust Security with User-Centric Support
What do you like best about the product?
What I like most about Drata is its user-centric format, and when we need help, tech support is fast and reliable. The initial setup of Drata for our team was very easy. We had a resource from Drata available if we needed it, but it was very self-explanatory and user-centric.
What do you dislike about the product?
Sometimes logging on can be a challenge. Recently, a few of us had issues with our logins, but we did get that resolved.
What problems is the product solving and how is that benefiting you?
I use Drata for data security, ensuring everything is safe and there's no data leaks.
Effortless Setup and Promising Governance Features
What do you like best about the product?
I am enjoying the experience working on transitioning from my prior GRC tool to Drata. Although I have not fully explored all the functionality of Drata, it looks like it will be extremely useful. I'm working with the compliance frameworks, building them out for my environments, setting up vendor risk management surveys, and risk management.
What do you dislike about the product?
I wish Drata had the ability for policies to be visible to any user, not just to those who have acknowledged them. I also wish Drata supported PCI DSS targeted risk assessment.
What problems is the product solving and how is that benefiting you?
Drata replaced my previous GRC tool, which was not sufficient for my needs.
Comprehensive Compliance Tools with Real-Time Monitoring
What do you like best about the product?
Drata has so many tools to help with policy creation and real-time compliance monitoring. It's more that just a GRC tool, it provides live data when policy, process, and assets fall out of compliance so you can quickly reign them back in.
What do you dislike about the product?
There have been issues with rolling out new features. Support responsiveness has slowed lately, especially after the introduction of the chatbot.
What problems is the product solving and how is that benefiting you?
We are able to monitor all aspects of our internal and cloud infrastructure to ensure our employees are applying what we state in our internal policy. They also keep us up to date on any new changes to the frameworks we implement.
Streamlined PCI Management with Intuitive Ease
What do you like best about the product?
Drata has been incredibly easy to use—simple, intuitive, and very well designed. Their support has been outstanding. We were paired with an onboarding specialist who stayed with us for nine months during our first year and guided us all the way through completing our audit. Setting up Drata was straightforward, and the automated monitoring features worked well with just a bit of tuning for our environment. The workflows make it easy to manage controls, maneuver through the platform, and upload evidence. Overall, Drata has helped us stay extremely organized and efficient with our PCI compliance program.
What do you dislike about the product?
One area that could be improved is the level of detail provided within the control environment. Drata goes one or two layers deep, but for more complex compliance programs, it would be helpful if the platform went further into the nitty-gritty details. Another area is around certain automated monitoring features that rely on specific applications. Expanding support to a broader range of third-party tools would make the monitoring even more flexible and effective.
What problems is the product solving and how is that benefiting you?
Drata helps us manage the entire PCI process end to end. It keeps us organized operationally, from daily compliance tasks all the way through the audit cycle. The platform centralizes everything we need, streamlines evidence collection, and makes the audit process significantly more efficient. Overall, Drata removes a lot of manual effort and gives us structure and visibility, which saves time and reduces audit stress.
From Manual Work to Automation: Why We Love Drata
What do you like best about the product?
The most valuable feature for us is the continuous monitoring and real-time alerts, which provide reassurance that our controls are consistently effective. Drata also simplifies evidence collection and audit preparation, helping us save time and reduce the risk of errors. As a result, we are able to maintain compliance proactively and dedicate more attention to strategic security improvements instead of getting bogged down by administrative work.
In terms of usability, the platform is highly intuitive and user-friendly, making it easy for even new team members to navigate and complete tasks. The implementation process was smooth and quick, thanks to clear instructions and minimal disruption to our existing workflows. Drata’s integration with our current tools and systems is seamless, which cuts down on manual work and keeps our data consistent across platforms. The customer support team is always responsive, knowledgeable, and eager to help, which greatly enhances our overall experience. We rely on Drata daily for monitoring and compliance activities, and it has become an essential part of our security operations.
In terms of usability, the platform is highly intuitive and user-friendly, making it easy for even new team members to navigate and complete tasks. The implementation process was smooth and quick, thanks to clear instructions and minimal disruption to our existing workflows. Drata’s integration with our current tools and systems is seamless, which cuts down on manual work and keeps our data consistent across platforms. The customer support team is always responsive, knowledgeable, and eager to help, which greatly enhances our overall experience. We rely on Drata daily for monitoring and compliance activities, and it has become an essential part of our security operations.
What do you dislike about the product?
It would be great to have more available integrations, for example with popular observability tools such as Grafana.
What problems is the product solving and how is that benefiting you?
Drata has been instrumental in removing the complexity and manual work typically associated with maintaining compliance. By automating evidence collection, continuous monitoring, and control verification, it greatly reduces the time needed for audit preparation and helps minimize the risk of human error. This shift enables our team to dedicate more attention to strategic security initiatives rather than getting bogged down by repetitive administrative duties. Furthermore, Drata offers real-time insight into our compliance status, allowing us to proactively identify and address any gaps, which helps us maintain trust with both customers and partners.
Effortless Compliance Automation with Seamless Integrations
What do you like best about the product?
Drata has taken what used to be a complex, manual process and turned it into a seamless, automated workflow. The integrations with HR systems, cloud providers, and security tools (like Google Workspace, AWS, and Jira) make evidence collection nearly effortless. I particularly love the continuous monitoring feature — it gives real-time visibility into control status and alerts when something falls out of compliance.
The user interface is clean and intuitive, making it easy for both technical and non-technical stakeholders to navigate. The risk assessment and policy management modules are also well-structured, helping us align with auditors’ expectations without juggling multiple spreadsheets.
The user interface is clean and intuitive, making it easy for both technical and non-technical stakeholders to navigate. The risk assessment and policy management modules are also well-structured, helping us align with auditors’ expectations without juggling multiple spreadsheets.
What do you dislike about the product?
While the platform covers most use cases perfectly, some integrations (like HR background checks and certain people-data syncs) occasionally require reauthentication or manual validation. Their support team, however, is responsive and proactive in resolving such issues.
What problems is the product solving and how is that benefiting you?
Drata has significantly reduced the burden of manual compliance work. Previously, tracking evidence, managing policies, and keeping controls up to date was a tedious process, often spread across multiple tools. With Drata, all of these tasks are now centralized and automated, from monitoring controls to collecting evidence.
The reminders and real-time alerts make it much easier to keep up with compliance responsibilities, and the automation helps minimize errors and overlooked items. Overall, Drata keeps us organized, boosts our confidence, and ensures we are always prepared for audits without the usual stress.
The reminders and real-time alerts make it much easier to keep up with compliance responsibilities, and the automation helps minimize errors and overlooked items. Overall, Drata keeps us organized, boosts our confidence, and ensures we are always prepared for audits without the usual stress.
Outstanding Support and Partnership Make Compliance a Breeze
What do you like best about the product?
The partnership and support we've received from our Drata team have been exceptional. Sierra Alvarez, our Customer Success Manager, and Christina from support have both consistently gone above and beyond to help me organize our SOC 2 controls and prepare for the audit. Their prompt responses and expertise made what could have been a complicated process much more manageable, and Sierra's collaborative approach has truly helped me stay on track and sane throughout.
What do you dislike about the product?
The SOC 2 control mapping and evidence alignment process seems tedious and time consuming, the platform is powerful, but it could benefit from more streamlned control mapping and control reassignments.
What problems is the product solving and how is that benefiting you?
Drata is streamlining and automating many aspects of our SOC 2 framework, which helps minimize the risk of human error and provides QuikQ with greater confidence that our controls stay compliant and ready for audits. This will also save us a significant amount of time.
showing 11 - 20