External reviews
External reviews are not included in the AWS star rating for the product.
Drata to the rescue
What do you like best about the product?
Very helpful in getting your SOC2 in place and maintaining everything in compliance. I also liked the handholding they provided us with both SOC2 and the Drata platform itself. Kudos to Jordan, who has been instrumental in quickly getting us up and running.
What do you dislike about the product?
I wish they had a feature to automatically produce your SOC2 system description document. I've been told this feature is in the works, so I'm really looking forward to that!
What problems is the product solving and how is that benefiting you?
Getting SOC2 in place quickly and automating our compliance against all of the requirements that come with SOC2.
- Leave a Comment |
- Mark review as helpful
Drata for Continuous Monitoring and Compliance Audits
What do you like best about the product?
Drata's ability to connect with multiple sources for continuous monitoring is great. They are expanding their reach to other applications on a regular basis. The templates provided for policy writing have been beneficial.
Our Customer Success Manager, Laci White, has been fantastic. She has been valuable by answering every question and providing resources while we build and prepare for our audits.
Our Customer Success Manager, Laci White, has been fantastic. She has been valuable by answering every question and providing resources while we build and prepare for our audits.
What do you dislike about the product?
Some limitations have created some growing pains. We utilize multiple instances of HRS systems, and while Drata is compatible with various systems, it can only integrate with one instance of one vendor. This leaves out numerous workforce users, making tracking them a manual process at the time being.
there are also some vendors that we use that are not yet available for connection, but I am hopeful for the future.
there are also some vendors that we use that are not yet available for connection, but I am hopeful for the future.
What problems is the product solving and how is that benefiting you?
the biggest benefit so far has been the policy templates. We have yet to utilize Drata for an actual audit. Luckily, our auditor works well with Drata, so I am very excited that evidence collection will be much easier.
Drata has helped us centralize our audit experience
What do you like best about the product?
Drata has helped my team centralize and organize our audit materials and artifact collection. Previously, we relied heavily on spreadsheets, shared Google Drive folders, and a lot of screenshots. Working with Laci, we've built out a lot of integrations that automatically pull evidence from the various systems in the scope of our audits, saving us a ton of time and manual work.
What do you dislike about the product?
There are still a few integrations that are not currently supported by Drata that would be helpful to further automate our compliance program. Specifically, background check evidence through HireRight and/or through the Workday API. Our org no longer uses a background check provider with a Drata integration, so for now we are manually linking evidence of background checks.
What problems is the product solving and how is that benefiting you?
Drata is reducing our reliance on spreadsheets and endless Google Drive folders, bringing our audit program into a single location that is but for the purpose.
Compliance Controls Simplified
What do you like best about the product?
Drata is very perscriptive on what you need to t do to be compliant. It has very easy out of the box automation and integrations with key parts of our tech stack that make compliance a breeze. The CSM team is also great (Special shoutout to Laci).
What do you dislike about the product?
Long term we hope the risk library improves along with better slack notifications.
What problems is the product solving and how is that benefiting you?
Compliance for Security - ISO27001, PCI, SOC2, and HIPAA.
Great Software for SOC2
What do you like best about the product?
Their technical teams and attention to product feature introduction and development. Our CSM is one of the best, that I've worked with in a long while. Shoutout to Laci!
What do you dislike about the product?
The product can be overwhelming, based on the organization and the security principles you are trying to tackle. The artifact and policy linking can be a little clumsy.
What problems is the product solving and how is that benefiting you?
SOC2 compliance automation for new digital properties.
Used to achieve SOC 2 compliance and enable visibility on controls
What do you like best about the product?
Three things stand out for us. 1) Drata is a product that is aligned with our compliance needs. 2) It is still delivering a strong ROI for us, saving time and making life easier with automation. 3) We used Drata to collect and demonstate evidence for the SOC 2 Type 1 and 2 audit. This contributed to a smooth process with our auditor.
Three key product highlights: integrations are compatible with our tech stack, visibility of controls for continous monitoring, mapping controls to frameworks (SOC 2 Type 1 and 2 + GDPR).
Our experience with Customer Success is excellent. We have been supported by Sara M and Victoria C who has seen our journey with SOC 2 as a start up without any security expertise in the early days. Throughout the past year, I have learned a lot more about maximising Drata's features. They have done this by proactively sharing help center guides, answering questions specific to our challenges and escalating to their Product/Engineering teams (when required). It is evident that they evaluate their processes with intent and are serious about what great looks like for us and themselves.
Three key product highlights: integrations are compatible with our tech stack, visibility of controls for continous monitoring, mapping controls to frameworks (SOC 2 Type 1 and 2 + GDPR).
Our experience with Customer Success is excellent. We have been supported by Sara M and Victoria C who has seen our journey with SOC 2 as a start up without any security expertise in the early days. Throughout the past year, I have learned a lot more about maximising Drata's features. They have done this by proactively sharing help center guides, answering questions specific to our challenges and escalating to their Product/Engineering teams (when required). It is evident that they evaluate their processes with intent and are serious about what great looks like for us and themselves.
What do you dislike about the product?
From my experience, there is no dislike because it has been doing what we need it to do. To nitpick, for us the GDPR framework has require more manual evidence uploads compared to SOC 2. We try to maximise the control mapping feature by ensuring any security controls are also mapped to GDPR (particularly useful for demonstarting compliance with Article 5 and 32).
What problems is the product solving and how is that benefiting you?
Problems: huge task of organising SOC 2 tasks and evidence collection, ongoing monitoring of control effectiveness, poor visibility of controls across the teck stack. Drata is benefiting us by: providing a meaningful view of controls that is mapped against industry frameworks (SOC 2 and GDPR), flagging issues that need our attention, visibility that facilitates conversations with key stakeholders in the company. Time saved and stress reduced.
Taking the fear out of certifications
What do you like best about the product?
We are new to the Drata platform, The prospect of working towards a certification for a small company such as ours with limited personell resources is daunting. Drata so far has taken the fear out of this project for us. The dashboard shows you in a very intuative way what you need to do and when. It has just overall improved our security posture as a company too by highlighting areas we'd not considered could be issues. Drata also fast tracks the documentation process when it comes to policies by having very detailed default policies for you to be able to get started. we are still early in our Drata Journey but having a dedicated customer sucess manager for a product such as this is a must, This is something Drata put a big emphasis on. Victoria our CSM is always avalible for questions and our bi-weekly calls keep us accountable. Drata care that you make the most from your investment.
What do you dislike about the product?
Not found anything so far that I dislike but im still in the setup phase.
What problems is the product solving and how is that benefiting you?
Holding our hands in the ISO and SOC certification path. We have a small team and we are wear many hats, Drata logically guides us to the path of certification
Powerful Automation and Clean Design
What do you like best about the product?
I like how the software provides continuous automation monitoring and helps you build policies. I also like how it helps you onboard and off-board employees. Their real-time customer support gives me quick access to answers, and my dedicated Account Manager is always there when I need her. Finally, I love how they continue adding and updating existing frameworks.
What do you dislike about the product?
Completing compliance can take a long time. I don't think this is a Drata thing, but more to do with the amount of work required for completing an audit-ready compliance.
What problems is the product solving and how is that benefiting you?
It is helping us become HIPAA, GDPR and NIST compliant. It guides us along the steps needed and prevents us from missing anything important along the way. The monitoring of our AWS services has helped us find unused infrastructure and also tighten down IAM polices.
Drata Advocate
What do you like best about the product?
Risk Management modules are very useful. We're also excited about the potential of expanding our compliance management within drata to additional standards frameworks. Having LinnF as our advocate and CSM has been massive. You won't find anyone who combines customer focus with an instinct for deliverability & sustainability quite like Linn does.
What do you dislike about the product?
I was disappointed ISO 9001 wasn't a supported framework. Everything revolves around our ISO 9001 Quality Management System. Having that fully integrated would've been huge.
What problems is the product solving and how is that benefiting you?
Supporting SOC 2 Type 1 and Type 2 reports. Possibly FedRamp next?
Exceptional Customer Service and Highly Innovative Features
What do you like best about the product?
Drata has provided our company with invaluable support that has led to improving our security posture. They have consistently proved that are very reliable. Specifically, our customer success manager, Sam, is exceptionally responsive and has deep knowledge of the platform. Their customer service should be an example for all companies to mirror.
What do you dislike about the product?
So far, we have not experienced any issues with Drata. We are looking forward to continuing our partnership with them!
What problems is the product solving and how is that benefiting you?
Based on our experience with Drata so far, I am confident that we have vastly improved our privacy and security practices. They provide a variety of easy-to-use features to improve our security posture. For example, security training for our team, policy templates mapped to controls, integration with AWS, and frequent updates to add new frameworks and features to meet regulations. Overall, it provides a one-stop solution for managing all the pieces for compliance, with new frameworks being added frequently.
showing 391 - 400