External reviews
External reviews are not included in the AWS star rating for the product.
Comprehensive Product, and a great Services model - loved working with the Drata team!
What do you like best about the product?
The automated tests on the Controls make it very easy to track missing gaps in our implementation
What do you dislike about the product?
Capturing security certification reports of all vendors is a manual task, maybe this can be automated as well!
What problems is the product solving and how is that benefiting you?
Helping keep track of our cloud infrastructure and security policies before heading out for an SOC-2 audit
- Leave a Comment |
- Mark review as helpful
SOC 2 Using Drata
What do you like best about the product?
Drata helps provide clarity to a very ambiguous process that helped us streamline our efforts to improve our security posture and make efficient progress towards SOC 2 certification. It's pretty fun to use as you can see the progress quickly in the application, and you can easily spread out the work amongst the staff so that everyone can take ownership of their tasks. It provides helpful guidance in the application, and our account manager is always responsive to our questions.
What do you dislike about the product?
I don't have any complaints. Drata is frequently releasing updates, and they are responsive to any bumps in the road that we've run into in the process.
What problems is the product solving and how is that benefiting you?
Drata helps provide best practices for business and security processes that we might not have spelled out by providing templates of policies and guidance on controls.
Recommendations to others considering the product:
I would highly recommend using Drata for SOC 2. We committed as an organization to the process as we knew it would be valuable to our clients and potential customers and Drata certainly streamlined that process for us a smaller entrepreneurial organization. Drata guided us efficiently since we did not have dedicated in-house experienced security resources.
Instead of Crawling our Company Launched into SOC 2 Compliance.
What do you like best about the product?
Compliance is an incredibly complex process. Drata automates and simplifies so much of with its tech and people it has become much easier to define and accomplish our SOC 2 Type 1 and Type 2 goals. It's really made the whole process attainable.
What do you dislike about the product?
There isn't much that we dislike. I think there are some UI/UX usability issues I would like to see. Specifically more ability to allow the tool to see what *we* need, not so much what Drata assumes is essential.
What problems is the product solving and how is that benefiting you?
We've been able to attain 90 percent of our SOC 2 Type 1 goals in under two months. Drata gives you clear direction in how to approac SOC 2 and gives you the tools and expertise to get that done. Most of all I love the customer success team. My team has been on the spot with everything I've asked. There's no way this project gets done in the timeframe we need without this amazing product.
Compliance can be fun!
What do you like best about the product?
The road to compliance isn't easy and requires a lot of work. Drata takes away a lot of the pain and dare I say, makes it fun!
- Clean, modern, and intuitive interface that is pleasant to work in
- Sound policy templates you can leverage if you need a jump start on missing policies
- The dashboard overview of passing/failing controls
- Weekly updates that ensure you don't miss any failing controls
- Easy employee/contractor onboarding and tracking
- Responsive Customer Support
- Clean, modern, and intuitive interface that is pleasant to work in
- Sound policy templates you can leverage if you need a jump start on missing policies
- The dashboard overview of passing/failing controls
- Weekly updates that ensure you don't miss any failing controls
- Easy employee/contractor onboarding and tracking
- Responsive Customer Support
What do you dislike about the product?
We had some technical bugs we ran into with onboarding and moving employees and contractors between employment statuses. These were all resolved by the support team which was always reliable, responsive, and helpful.
What problems is the product solving and how is that benefiting you?
SOC 2 certification. Drata provides us with ongoing automated testing which removes a lot of the legwork and human error from the equation.
Excellent SOC-2 Management Software and Support
What do you like best about the product?
Drata made attaining a SOC-2 report extremely easy. The platform is easy to use and their support is phenomenal.
What do you dislike about the product?
Honestly nothing. Their platform and service are both excellent.
What problems is the product solving and how is that benefiting you?
Attaining a SOC-2 Type II Report and managing compliance over time.
The finest SOC 2 automation
What do you like best about the product?
Automated tests and controls make staying in compliance a breeze. Drata has become our one-stop shop concerning SOC 2, from policies to employee onboarding to MDM.
What do you dislike about the product?
There's not much to say here! All the initial quirks with the product have quickly been addressed, such as a more expansive Auditor mode, multiple infra account monitoring, etc.
What problems is the product solving and how is that benefiting you?
Pursuing a SOC 2 certification is a huge undertaking. Drata helps make the process far more digestible, identifying the most critical items to ensure the team is hyper-focused on delivering the highest value first.
Drata is exactly what companies need to be on top of their security game. Easy to use, efficient.
What do you like best about the product?
Very responsive staff, plug and play features. Timely checks. The design is simple and robust. Well made integrations.
What do you dislike about the product?
Not much to write here, the company is still quite young. Stuff just works and if they don't have an integration they find solutions then just build one whenever possible.
What problems is the product solving and how is that benefiting you?
Being compliant with the most rigorous security requirements.
Drata For SOC2 Experience
What do you like best about the product?
On rare occasions, a new company will revolutionize a standard industry process with an intuitive simplicity. Drata has done precisely this with its compliance platform. I found the user experience relatively intuitive, unlike many others I have used in the past. The customer service provided throughout the initial setup was outstanding. With new product features continuously included, I am excited to see additional future features to come. Nonetheless, at its core, this is undoubtedly worth consideration.
What do you dislike about the product?
I have yet to find a "downside" or "dislike" as of yet.
What problems is the product solving and how is that benefiting you?
We are centralizing knowledge, with accuracy & functionality being essential.
Easy to implement, great support during onboarding, logical layout
What do you like best about the product?
With an application like this, without question, the best part is ease of use. We make a change to a policy and it notifies the owner automatically to re-approve, users want choices on how to meet compliance standards we can be flexible with them, we want to manage the policy fully in the app? There's an editor in there to free our policy docs from PDF prison!
What do you dislike about the product?
To answer a "dislike" I have to nit-pick as the app does what it says on the tin, and it is easy to use. I would say it would be nice if there were an easier way to import policies into the app, but again, this is someone looking at a thoughtful, well made dinner for 15 people and then complaining that a butter knife is missing from the table settings.
What problems is the product solving and how is that benefiting you?
Drata gets all our policies out of various Google Drive folders and into one place. It lets us handle compliance with automations and an app instead of a spot check system or something else more manual. It's definitely making visualizing our policies easier as well.
Recommendations to others considering the product:
If you're looking for a lightweight (this is not code for "low features"; it is genuinely an app that does the one thing it does really well without bloat) application to upload policies to in order to manage them, handle yearly policy review for employees, and tie in monitoring for password apps and server security, Drata seems to be trying to be the one-stop-shop for that. So far I have no complaints.
Drata brought calm to chaos
What do you like best about the product?
The integrations to almost our entire tech stack made selecting Drata very easy when needing an automated evidence gathering and maintenance platform.
When you suggest a feature it taken seriously and they follow up with each request as to whether they see it working into their product in the future. Whether it does or not, they will let you know and that is better than 90% of any other company.
When you suggest a feature it taken seriously and they follow up with each request as to whether they see it working into their product in the future. Whether it does or not, they will let you know and that is better than 90% of any other company.
What do you dislike about the product?
Everything I've ever requested has been released or is planned for future implementation. A year ago there would have been a list here, today there is nothing.
What problems is the product solving and how is that benefiting you?
SOC2 is our only use case today. If you're looking for help on the other compliance frameworks, they will make it very simple to give you a very good insight toward your progress.
showing 481 - 490