External reviews
1,094 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Drata is streamlining our SOC2 adoptation
What do you like best about the product?
I like that Drata comes with a workstation agent, giving autonomy and responsibility to every employee, cementing security into the organization because people are confronted with the matter every week. It helps me in raising security awareness without impeding anyone. Working with Gabe has been great so far; responsive, fast and has adequate follow-ups, cutting straight to the point.
What do you dislike about the product?
After the onboarding, we encountered a couple of issues requiring additional integration access. In and by itself, that's fine, but some fine-tuning in the onboarding would be desired for future customers. The Risk Assessment was not that; it was more like a control assessment, and the former has since been introduced as s a paid-for add-on.
What problems is the product solving and how is that benefiting you?
We are going for a SOC2 Type 2 audit for our SaaS platform and software development. We are using Drata to understand what we need to get done before kicking off the audit process. Our software product allows our customers to connect systems and transport data that they may consider sensitive. In addition, many customers have asked us for our security procedures and certifications. Although already having a certified ISO27001 ISMS, SOC2 seemed required to continue growing our business. On top of that, it is a great setup to centralize our (chain of) evidence instead of having this spread out all over our "document storage method", even more so because Drata takes away much of the redundancy between ISO27001 and SOC2 (one piece of evidence can be used for both frameworks).
Strong Customer support from Drata
What do you like best about the product?
The support team is always there to help, provide training and make sure integration with your systems and cloud tech is synced for SOC2 compliance.
What do you dislike about the product?
The policy updating structure could be more flexible.
What problems is the product solving and how is that benefiting you?
To prepare our organization to be SOC2 compliance and get approved with integration with our cloud and auditors.
Drat's always on compliance monitoring a great help
What do you like best about the product?
Drata is a great real time tool to monitor controls for compliance, providing a great snapshot at any point in time.
It is also useful when looking at new frameworks to understand where gaps may exist.
It is also useful when looking at new frameworks to understand where gaps may exist.
What do you dislike about the product?
Some connections to some tools are still being finalized and added, however many major SaaS applications are already built out,
What problems is the product solving and how is that benefiting you?
Monitoring compliance with various frameworks, notifying us of areas in need of remediation.
Drata does the Hard Work for You
What do you like best about the product?
Puts the controls in one place and breaks them out in an easy to understand way. The various frameworks are selectable and you can ascertain where the overlap is.
What do you dislike about the product?
A work in progress. Some things are not quite in the right place and some of the automated cloud control tests need refinedment. The Drata agent does make asset management of endpoints simple.
What problems is the product solving and how is that benefiting you?
Staying in compliance when an attestation needs to be attained quickly. It makes the controls very concrete as to how they would apply in a modern IT environment.
Very good experience, controlling my compliance needs
What do you like best about the product?
Policy center
Personnel
Security training
DRATA agent for work stations compliance.
Personnel
Security training
DRATA agent for work stations compliance.
What do you dislike about the product?
The asset list isn't so organized.
.
.
.
.
.
.
.
.
.
.
What problems is the product solving and how is that benefiting you?
A way for managing & controlling your compliance needs.
A powerful automation tool that can facilitates compliance
What do you like best about the product?
The rationalized frameworks provide a simplified view and way of managing regulatory requirements that apply to the organization. This takes an immense burden off organizations!
What do you dislike about the product?
At this time, it is not possible to utilize the Drata policy template when creating new / recreating existing policies for Drata to hold.
What problems is the product solving and how is that benefiting you?
Drata is reducing the manual overhead associated with compliance tasks, thereby saving time and increasing accuracy.
Drata Go Live at Carrot
What do you like best about the product?
Framework coverage and test automation..
What do you dislike about the product?
currently haven't experienced any dislikes
What problems is the product solving and how is that benefiting you?
Our security team is harnessing the power of 10. Drata is enabling a migration from push pull report email confirm to "its in there"
Drata - App is Solid, Support is wonderful. SOC2 ASAP
What do you like best about the product?
Customer Service is great. Onboarding painless.
What do you dislike about the product?
Sometimes has strange error states that refresh as different points. Support is great supporting us but not always intuitive to self-help.
What problems is the product solving and how is that benefiting you?
SOC2 Compliance. Data Hygiene.
Solid compliance software, excellent compliance guidance
What do you like best about the product?
The best thing about Drata is their people. Our account manager has been fantastic, and the sales process was comfortable and much easier to deal with than Vanta's. The "compliance experts" in the Drata dashboard are also very easy to work with and fast at solving problems or answering questions. Drata also referred us to a competent and affordable SOC 2 auditor.
In addition, the Drata dashboard is very well laid out, and makes it clear what needs to be done to achieve your desired compliance certification. Drata also offers much more comprehensive support of compliance frameworks than other players in the space. We chose Drata over other automated SOC 2 monitoring solutions because they also offer FEDRAMP and HIPAA monitoring as well.
In addition, the Drata dashboard is very well laid out, and makes it clear what needs to be done to achieve your desired compliance certification. Drata also offers much more comprehensive support of compliance frameworks than other players in the space. We chose Drata over other automated SOC 2 monitoring solutions because they also offer FEDRAMP and HIPAA monitoring as well.
What do you dislike about the product?
Drata sells their automation quite heavily. While much of the solution is automated, the Drata console does not monitor as many of the SOC 2 controls as I had hoped, and we have ended up having to upload a significant amount of manually-collected evidence. As one example, Drata does not automatically monitor for the existence of a log collection system (like Datadog or New Relic) so we have to supply screenshots of the solution to prove we are using it. I am hopeful that, as Drata evolves, these other controls will be monitored better, but for now be aware that a lot of the process is still manual.
What problems is the product solving and how is that benefiting you?
For us, Drata is solving our SOC 2 certification headache. SOC 2 is a heavy lift, and we failed at our first attempt after going in blind. Drata is sort of like night vision for compliance.
A great compliance solution!
What do you like best about the product?
Easy channels to ask questions and receive quick responses, preconfigured frameworks that allow us to easily identify gaps in our processes.
What do you dislike about the product?
Duplicative evidence uploads for systems that we use that are not currently integrated with Drata. Having to upload evidence in Drata that is additional work for my team.
What problems is the product solving and how is that benefiting you?
Giving us a website that allows us to easily share our security documents. This allowed us to move off of another platform which saves my team time and money.
showing 261 - 270