External reviews
External reviews are not included in the AWS star rating for the product.
Intuitive Solution - Best in Class Account Support
What do you like best about the product?
To be brief and direct, I had no experience in tech. compliance when I first engaged with Drata. My team members had experience, and Drata came from their network as a strong, economical recommendation to get us going on compliance certifications. From that perspective, I found Drata's UI incredibly intuitive. The structure and attention to simplifying the complexity of compliance accelerated my learning curve and allowed me to quickly and effectively contribute to our company's goals.
What do you dislike about the product?
There isn't something that jumps to mind. We are still in the early stages and for my needs, Drata met those.
What problems is the product solving and how is that benefiting you?
Integrations and risk reporting is a value add for greater team visibility. Centralizing a majority of the needs of an auditor helps our team prioritize and assess gaps around the same information/data. Policy support is the most significant benefit. Pre-populated policies that reference relevant section(s) within compliance requirements allowed me to align subject matter experts quickly, focus resources on standing up the processes and procedures to support the policy, and they are easy to edit/upload in place of/adjust.
- Leave a Comment |
- Mark review as helpful
Excellent cloud compliance platform with amazing customer support!
What do you like best about the product?
The customer service is excellent, and Drata always enhances the product with value add features. Ali McCormick, our customer service rep, is very knowledgeable, always responsive, and knows how to stay in touch and be helpful without it being too much.
What do you dislike about the product?
A couple of the integrations could be a bit more seamless, but the breadth of integrations is impressive.
What problems is the product solving and how is that benefiting you?
Evidence gathering for SOC2 compliance. Very helpful in getting organized and gathering the majority of information needed for SOC2 audit reviews.
Amazing Compliance Automation
What do you like best about the product?
We couldn't be happier with Drata. The tool and the team (including our CSM Craig!) have been amazingly helpful as we begin our SOC2 & HIPAA compliance process. Drata has jumpstarted all our policy creation and acceptance with their templates, including references to relevant controls and distinctions between nice and need-to-haves. The Drata endpoint agent has been a live saver to ensure device compliance for a remote distributed team. The automated monitoring helps us keep an active eye on anything that falls out of compliance with constructive tips and direct-how-to correction instructions on how to get back into compliance. The team has also been incredibly responsive and generous with their time, providing insight into getting the most out of Drata and providing more strategic compliance program guidance.
What do you dislike about the product?
Overall we have no complaints. We encounter minor lag issues when in the product, and sometimes the automated integrations will time out or not refresh on demand, but every time we get a minor bug, the Drata support team is quick to respond and correct it.
What problems is the product solving and how is that benefiting you?
Drata is helping us achieve SOC2 (Type I and Type II) and HIPAA compliance. This is critical for us to shorten deal cycles and win customers who need to see our security posture.
SOC 2 Compliance Readiness Made Easy(ish)
What do you like best about the product?
Incredibly easy to see your compliance readiness from 10,000 feet. And when things aren't quite right, the included resolution steps get you back on track quickly.
What do you dislike about the product?
So far, the only downside I've encountered is the inability to have contractors who aren't in your IDP set to in-scope for compliance. We had to set up internal emails for our contractors, which is more annoyance than a serious issue.
What problems is the product solving and how is that benefiting you?
We're a small company and we absolutely would not be able to keep track of all the facets of SOC 2 compliance without the tools that Drata provides.
Drata has made SOC II easy.
What do you like best about the product?
Madison Gazette in Sales and Mike Mechling were very responsive to all our questions. Made the decision to choose Drata an easy one. Clear UI / UX helped as well.
What do you dislike about the product?
CERTN has not been syncing recently. But Drata is working on it.
What problems is the product solving and how is that benefiting you?
Makes gathering all the necessary docs for SOC II easy.
Security audits simplified with Drata
What do you like best about the product?
- Control readiness is simplified and easy to manage
- provide auditor views which simplifies interaction with auditor
- continuous monitoring keeps ISMS up to date
- provide auditor views which simplifies interaction with auditor
- continuous monitoring keeps ISMS up to date
What do you dislike about the product?
- new multi-product feature could use some enhancements
- helpful to tag certain controls as global to avoid repetitive management of controls across products
- helpful to tag certain controls as global to avoid repetitive management of controls across products
What problems is the product solving and how is that benefiting you?
- streamlines auditing process
- helps all contributors to the audit process easily understand what the requirements and when they are not being met
- helps all contributors to the audit process easily understand what the requirements and when they are not being met
Great tool for SOC2 compliance
What do you like best about the product?
The simplicity of using the tool, terrific support from knowledgeable and professional staff, connections to automate compliance checking and evidence, continuous improvement to provide additional features and benefits, very open to suggestions for improvement and genuinely engaging in accommodating needs.
What do you dislike about the product?
Their tool is designed to collect information and evidence via their proprietary agent installed on endpoints to assess local controls and obtain end user interaction. The agent is probably quite appreciated by small companies with limited IT resources, but we have IT administrators that utilize endpoint management tools and do not want to burden end users with needing to provide acknowledgments or acceptance using the Drata agent. Since we elected not to use the agent, we must manually update controls regarding endpoints and personnel. However, Drata is helping us overcome this burden by providing a custom mass load function as a temporary measure until they develop an interface connector for our endpoint management solution. Drata is committed to eliminating the single dislike I have!
What problems is the product solving and how is that benefiting you?
Our customer success manager meets with us bi-weekly to discuss process, procedures, provide tips, and offer solutions to help us in our journey to SOC2 compliance. She brings in subject matter experts when needed. Drata is more than a vendor - they are truly a business partner, helping us to achieve our goal of obtaining a SOC2 attestation.
Excellent Continuous Compliance Solution
What do you like best about the product?
Drata is an excellent product to help achieve, maintain, and monitor compliance. The product itself is great and does what it's advertised to do, but the customer experience team that worked with us was exceptional. Specifically, our Customer Success Manager, Gabe Bidot, was with us every step of the way helping with the software and preparing us for audit.
What do you dislike about the product?
There are a few minor features that are not yet implemented, but the team seems to be listening to their customers and diligently releasing new functionality all the time.
What problems is the product solving and how is that benefiting you?
Managing our SOC 2 certification and automating the monitoring of the applicable controls all in one place.
Great software and even better people
What do you like best about the product?
With its intuitive and well-laid-out interface, Drata makes it a pleasure to track compliance controls and policies. It has certainly saved countless hours. Our customer success manager, Gabe, is very knowledgeable and quickly gets us answers to any of our compliance questions. When compared to other similar products, or even tracking compliance manually, Drata is a no-brainer.
What do you dislike about the product?
Drata is missing some features, such as an API, but new features and integrations are being added all the time and now the API is in beta (as of this writing 12-2022).
What problems is the product solving and how is that benefiting you?
Tracking compliance controls and policies, as well as providing proof of compliance to customers.
Drata makes completing compliance objectives much easier!
What do you like best about the product?
We reviewed five or so compliance platforms before ultimately settling on Drata. The user experience is superb. The integrations and automation tools are a real timesaver. The support is always responsive, and it really helps that there is an experienced team behind Drata. Questions that come up about meeting controls in the spirit of the framework often seem like answers could waver one way or the other, and they've been able to help us out. Gabe is one of the best customer success managers I've ever worked with. He's highly positive and knowledgeable. He does an excellent job keeping us on track to meet our compliance objectives. I often feel like our feedback is heard as we get updates on the development roadmap.
What do you dislike about the product?
The Drata Agent doesn't pick up our Windows BitLocker encryption, so we have to manually upload evidence to support that. Drata is aware of this limitation and is working on ways to improve it. We keep a lot of evidence in an external documentation system since most of it already exists there. Sometimes adding this evidence gets repetitive, but Drata is aware of the feedback (internal evidence or policies don't have this issue). The big takeaway here is that there's not much to dislike, and even if we find something, I have no problem mentioning it because I feel like we have a real chance of that feedback becoming an improvement later.
What problems is the product solving and how is that benefiting you?
Drata is helping keep our compliance efforts across multiple subsidiaries and security frameworks all in one spot. We can use automation and integrations to monitor evidence in ways we wouldn't have been able to with a spreadsheet or ticket system. It's a force multiplier for our small team.
I think for our team, the big win is the level of experience the support team has and that this support is available with the cost of the platform. We had so many questions answered that brought things to light for us. The other platforms we evaluated did not offer this.
I think for our team, the big win is the level of experience the support team has and that this support is available with the cost of the platform. We had so many questions answered that brought things to light for us. The other platforms we evaluated did not offer this.
showing 281 - 290