External reviews
1,085 reviews
from
and
External reviews are not included in the AWS star rating for the product.
An all-in-one solution for audit evidence collection and sharing
What do you like best about the product?
Drata has the most mature and robust offering in the compliance/evidence repository space. They have managed to navigate the line between the customer's needs and the auditor's requirements successfully, resulting in a friendly and easy to use UI that significantly reduces overhead.
The support from our CSM, Laci, has been exceptional. We're an active customer who constantly provides product feedback, and Laci ensures this is communicated to the product team and Drata leadership.
The support from our CSM, Laci, has been exceptional. We're an active customer who constantly provides product feedback, and Laci ensures this is communicated to the product team and Drata leadership.
What do you dislike about the product?
Currently, making changes to policies in Drata does not trigger an approval flow. Therefore, we edit our policies outside of Drata and then upload them. This isn't ideal and creates double-work. It also increases the risk of the wrong version being stored/updated. Please note that policies CAN be updated directly in Drata; our issue is the lack of an automated approval flow when changes are made.
What problems is the product solving and how is that benefiting you?
A single source of truth repository for evidence required by a third-party auditor.
Drata for Continuous Monitoring and Compliance Audits
What do you like best about the product?
Drata's ability to connect with multiple sources for continuous monitoring is great. They are expanding their reach to other applications on a regular basis. The templates provided for policy writing have been beneficial.
Our Customer Success Manager, Laci White, has been fantastic. She has been valuable by answering every question and providing resources while we build and prepare for our audits.
Our Customer Success Manager, Laci White, has been fantastic. She has been valuable by answering every question and providing resources while we build and prepare for our audits.
What do you dislike about the product?
Some limitations have created some growing pains. We utilize multiple instances of HRS systems, and while Drata is compatible with various systems, it can only integrate with one instance of one vendor. This leaves out numerous workforce users, making tracking them a manual process at the time being.
there are also some vendors that we use that are not yet available for connection, but I am hopeful for the future.
there are also some vendors that we use that are not yet available for connection, but I am hopeful for the future.
What problems is the product solving and how is that benefiting you?
the biggest benefit so far has been the policy templates. We have yet to utilize Drata for an actual audit. Luckily, our auditor works well with Drata, so I am very excited that evidence collection will be much easier.
Taking the fear out of certifications
What do you like best about the product?
We are new to the Drata platform, The prospect of working towards a certification for a small company such as ours with limited personell resources is daunting. Drata so far has taken the fear out of this project for us. The dashboard shows you in a very intuative way what you need to do and when. It has just overall improved our security posture as a company too by highlighting areas we'd not considered could be issues. Drata also fast tracks the documentation process when it comes to policies by having very detailed default policies for you to be able to get started. we are still early in our Drata Journey but having a dedicated customer sucess manager for a product such as this is a must, This is something Drata put a big emphasis on. Victoria our CSM is always avalible for questions and our bi-weekly calls keep us accountable. Drata care that you make the most from your investment.
What do you dislike about the product?
Not found anything so far that I dislike but im still in the setup phase.
What problems is the product solving and how is that benefiting you?
Holding our hands in the ISO and SOC certification path. We have a small team and we are wear many hats, Drata logically guides us to the path of certification
Drata Advocate
What do you like best about the product?
Risk Management modules are very useful. We're also excited about the potential of expanding our compliance management within drata to additional standards frameworks. Having LinnF as our advocate and CSM has been massive. You won't find anyone who combines customer focus with an instinct for deliverability & sustainability quite like Linn does.
What do you dislike about the product?
I was disappointed ISO 9001 wasn't a supported framework. Everything revolves around our ISO 9001 Quality Management System. Having that fully integrated would've been huge.
What problems is the product solving and how is that benefiting you?
Supporting SOC 2 Type 1 and Type 2 reports. Possibly FedRamp next?
Great service and product for SOC 2 compliance
What do you like best about the product?
Our customer success manager, Tony, went above and beyond to meet with us regularly, answer all questions thoroughly and patiently, and ensure we were (and felt) prepared to our SOC 2 audit.
What do you dislike about the product?
There are some instances when the automated controls in Drata are insufficient for what an auditor will request. For this reason, we had to upload some evidence manually. However, there is a method to create custom controls, to make delivery to the auditor easier.
What problems is the product solving and how is that benefiting you?
There are so many moving parts in a SOC 2 audit/report, and Drata helped us prepare and maintain our security posture. The automated controls take out the guesswork.
The Drata platform has made compliance management a breeze!
What do you like best about the product?
What really sets Drata apart is its ability to simplify and automate the often complex and time-consuming process of compliance. One of our biggest pain points before using Drata was keeping track of all the different regulations and requirements for our industry. With Drata, all of that information is easily accessible in one place and continually updated. The vast amount of integrations and monitoring available makes it clear what requirements have been met and what is still outstanding.
The customer service team, including our Customer Success Manager (Lizzie), the technical support team, and the compliance specialists have been very impressive. They are always available to answer our questions and provide guidance.
Other features such as the policy templates, integrated training, as well as the user interface and user experience, also make Drata stand out. Frequent updates to the platform based on user feedback are also great.
The customer service team, including our Customer Success Manager (Lizzie), the technical support team, and the compliance specialists have been very impressive. They are always available to answer our questions and provide guidance.
Other features such as the policy templates, integrated training, as well as the user interface and user experience, also make Drata stand out. Frequent updates to the platform based on user feedback are also great.
What do you dislike about the product?
I can't really think of anything to dislike about the platform so far. Perhaps one thing to keep in mind is that some modules or features are not included in the base platform and may require additional investment if needed, but for now, these haven't been mandatory requirements for us.
What problems is the product solving and how is that benefiting you?
One of our biggest pain points before using Drata was keeping track of all the different regulations and requirements for our industry. With Drata, all of that information is easily accessible in one place and continually updated. The vast amount of integrations and monitoring available makes it clear what requirements have been met and what is still outstanding.
Geat product, and even better team!
What do you like best about the product?
Super quick onboarding, incredible team - Morgan is the best!!
Intuitive product, as a first-timer in compliance, I was able to finish SOC2 within a couple of weeks
Intuitive product, as a first-timer in compliance, I was able to finish SOC2 within a couple of weeks
What do you dislike about the product?
Slow to process integration requests or fixes. We are still waiting on a couple of basic functionalities from common vendors
What problems is the product solving and how is that benefiting you?
Security compliance frameworks are an inherently painful yet valuable part of the business. With Drata, it's less painful :)
Drata is easy to use & saves me a ton of time in my day-to-day work related to compliance!
What do you like best about the product?
I love the ease of use in Drata-setting up all of our data integration connections was super easy, and the intuitive design/navigation of the tool is something I enjoy using. Most of all, I love the customer support. Having former auditors on hand to answer framework-related questions and support for the tool itself has been a big time saver and offered peace of mind as we branch into other frameworks.
What do you dislike about the product?
I look forward to future changes around more management of custom policies and procedures in their GUI editor, as well as the addition of scheduling other compliance-related tasks and internal auditing features. Since they are young, I look forward to more updates to the community help articles and seeing what they continue to add to future roadmaps for the product. They seem willing to take feedback on current functionality and are open to suggestions.
What problems is the product solving and how is that benefiting you?
Drata saves me time in automated monitoring of ongoing compliance needs since it integrates with so much of our current technology stack. I had a wish list in my shopping for new compliance tooling and Drata met most of my needs at a competitive price point. The top items for me were things like keeping track of employee training and signoff on policies/procedures, controls related to device management, cloud security, etc. as well as the customer assurance portal. My team used to spend a lot of time manually collecting evidence from various systems, and now we can easily monitor in Drata through the click of a button/report. Also at the top of my list was in-app support from former auditors regarding questions related to controls or frameworks, and I have not been disappointed; they really do offer stellar support! Finally, the ability to add additional frameworks is incredibly easy. In past systems we spent a lot of time and money for consultant advice when we wanted to add on other frameworks, manually comparing controls from various frameworks and trying to figure out what items we needed to add, and Drata does that for you. It helps quickly and easily identify areas where your organization might need improvements with regard to security/compliance and how to start tackling them.
Compliance Made Easy
What do you like best about the product?
The most helpful thing about Drata is the ease of use and the real-time visibility you gain of your security posture. There is very little upkeep once the integrations have been made, and once improvements have been identified, Drata makes it super easy to implement those improvements.
What do you dislike about the product?
The only thing that I think Drata could improve is more integrations/automation. Most of our environment has been connected to Drata, but there are still a couple of services we hope to integrate if made available in the future.
What problems is the product solving and how is that benefiting you?
Drata is helping us solve the problem of security posture visibility and the compliance posture of our security program across multiple different compliance frameworks.
Good control monitoring, great public facing control status, and pretty good audit platform.
What do you like best about the product?
External control status monitoring and customer requests platform.
What do you dislike about the product?
Not downsides with Drata specifically but limitations related to audit substantiation automation/evidence gathering.
What problems is the product solving and how is that benefiting you?
Control status monitoring and audit cycle efficiences.
showing 241 - 250