External reviews
External reviews are not included in the AWS star rating for the product.
Great product with great people
What do you like best about the product?
their willingness to help a promptness..
What do you dislike about the product?
Too early to tell have them for little time
What problems is the product solving and how is that benefiting you?
They are helping us to achieve SOC2 compliance but automating most of the checks
- Leave a Comment |
- Mark review as helpful
Allowed our startup to get a huge head start on SOC2 and PCI compliance.
What do you like best about the product?
It was effortless to set up and integrate with our infrastructure and services. It provided daily control tests while we were doing the build-out that helped us catch configuration issues immediately. The control suite and monitoring reduced the cognitive load required for compliance, allowing us to spend more energy building our product. With only having minimal experience with SOC2 and PCI when starting, Drata saved us months of reinventing the wheel of what they provide out of the box.
What do you dislike about the product?
We haven't hit any major bumps with Drata, and nearly all the small things we've brought up with our CSM have been resolved. The integration depth they provide is reasonable for being a platform intended to be used by a wide variety of companies, and they continue to release changes that further add value to the platform. We look forward to future enhancements that will allow us to further tailor and integrate compliance monitoring of our company.
What problems is the product solving and how is that benefiting you?
When we started as a company, we only had a limited number of resources and very specific compliance requirements. Drata allowed us to make massive progress on our compliance journey quickly and easily.
Compliance at your fingertips
What do you like best about the product?
Drata's integrations make compliance effortless and simple. Drata integrates well with commonly-utilized tools in HR, development, training, and various other functions. With the integrations, you're able to monitor compliance on a daily basis from one single tool. It takes away the strain of manually auditing and ensuring compliance to the specific controls, and it's continuously monitoring so you're always aware if the landscape changes.
Aside from the tool itself, Drata's support team goes over and beyond to ensure integration and use of the tool. Ali has been our customer success/account manager and she has done a spectacular job in assisting us through implementation, troubleshooting issues, planning integrations, and everything in between. We had several failing controls when we first started, but Ali took the stress out of using the tool.
Aside from the tool itself, Drata's support team goes over and beyond to ensure integration and use of the tool. Ali has been our customer success/account manager and she has done a spectacular job in assisting us through implementation, troubleshooting issues, planning integrations, and everything in between. We had several failing controls when we first started, but Ali took the stress out of using the tool.
What do you dislike about the product?
Drata continues to integrate with industry standard tools, offering more each quarter so I don't really have anything I dislike.
What problems is the product solving and how is that benefiting you?
Continuous monitoring for compliance controls. Drata provides a single platform solution to monitor various different areas of the company that would typically be a manual review.
Drata is streamlining our SOC2 adoptation
What do you like best about the product?
I like that Drata comes with a workstation agent, giving autonomy and responsibility to every employee, cementing security into the organization because people are confronted with the matter every week. It helps me in raising security awareness without impeding anyone. Working with Gabe has been great so far; responsive, fast and has adequate follow-ups, cutting straight to the point.
What do you dislike about the product?
After the onboarding, we encountered a couple of issues requiring additional integration access. In and by itself, that's fine, but some fine-tuning in the onboarding would be desired for future customers. The Risk Assessment was not that; it was more like a control assessment, and the former has since been introduced as s a paid-for add-on.
What problems is the product solving and how is that benefiting you?
We are going for a SOC2 Type 2 audit for our SaaS platform and software development. We are using Drata to understand what we need to get done before kicking off the audit process. Our software product allows our customers to connect systems and transport data that they may consider sensitive. In addition, many customers have asked us for our security procedures and certifications. Although already having a certified ISO27001 ISMS, SOC2 seemed required to continue growing our business. On top of that, it is a great setup to centralize our (chain of) evidence instead of having this spread out all over our "document storage method", even more so because Drata takes away much of the redundancy between ISO27001 and SOC2 (one piece of evidence can be used for both frameworks).
Strong Customer support from Drata
What do you like best about the product?
The support team is always there to help, provide training and make sure integration with your systems and cloud tech is synced for SOC2 compliance.
What do you dislike about the product?
The policy updating structure could be more flexible.
What problems is the product solving and how is that benefiting you?
To prepare our organization to be SOC2 compliance and get approved with integration with our cloud and auditors.
Drat's always on compliance monitoring a great help
What do you like best about the product?
Drata is a great real time tool to monitor controls for compliance, providing a great snapshot at any point in time.
It is also useful when looking at new frameworks to understand where gaps may exist.
It is also useful when looking at new frameworks to understand where gaps may exist.
What do you dislike about the product?
Some connections to some tools are still being finalized and added, however many major SaaS applications are already built out,
What problems is the product solving and how is that benefiting you?
Monitoring compliance with various frameworks, notifying us of areas in need of remediation.
Great experiences so far
What do you like best about the product?
The platform is very user-friendly in helping us achieve our security posture goals. Also, the Help and Customer Success teams have been fantastic with attentiveness and resolutions.
What do you dislike about the product?
Customized notification times in Slack would be great, but that is a minor item. We would also love more IAM type features - viewing user lists and roles in Drata vs the applications, for example. But we know so many new features are coming as well, so that's another minor item.
What problems is the product solving and how is that benefiting you?
Drata is helping minimize the time manual monitoring tasks take by automating them. Now I have a checklist of items to review every morning instead of digging for them.
Easy-to-use product, great customer success management, the security cockpit of our company
What do you like best about the product?
* Easy-to-use product - clear guidance of what security and compliance controls are necessary
* Great customer success management - from the first onboarding call with Ali throughout our SOC2 audit, we always felt we had a reliable consultant on our side. Our audit and product questions were answered the same day.
* The system is the security cockpit and the security brain of our company - the right alerts, the right integration with our internal comms tools (Slack)
* Great customer success management - from the first onboarding call with Ali throughout our SOC2 audit, we always felt we had a reliable consultant on our side. Our audit and product questions were answered the same day.
* The system is the security cockpit and the security brain of our company - the right alerts, the right integration with our internal comms tools (Slack)
What do you dislike about the product?
Great to see more integrations are added on an ongoing basis.
What problems is the product solving and how is that benefiting you?
* The system is the security cockpit and the security brain of our company - the right alerts, the right integration with our internal comms tools (Slack)
* Helps us manage our audits with auditors
* Helps us manage our audits with auditors
Galactic level customer service
What do you like best about the product?
Drata encompasses a compliance audit, governance, and risk management solution that provides an easy-to-use setup. It's most helpful in reducing time inefficiencies. In the first month alone, we saved 50% of our time as it consolidated all our controls and monitoring into one place. Their CSM, Laci, is 2000% of amazing and I wish all other CSM contacts are like her. She is attentive, listens and takes our feedback into actionable items. Their customer service is amazing.
What do you dislike about the product?
Drata is still a new product in the market that is great for smaller companies. I believe, within a few months, they can service, enterprise customers in a mature manner, when they faithfully release their latest product updates related to (1) proper/deeper evidence classification, (2) access segregation and real-time viewing for auditors, (3) and allowing editing of compliance monitoring tools. It lacks deep customization into compliance audits. They are ahead of other GRC competitors, but some updates still need to be released. However, the shining light is their amazing customer success team who takes customer pain points and accomplishes fixes in accomplishable iterations. This is a key differentiator when purchasing a compliance GRC tool. The product in effect requires updates. Other GRCs....may fail by not innovating to continue servicing the customer.
What problems is the product solving and how is that benefiting you?
Tim inefficiencies, controls consolidation, governance and privacy.
Once you get started they make the process a cakewalk
What do you like best about the product?
The software is intuitive and the support is outstanding
What do you dislike about the product?
It's a an extremely powerful tool with a great responsive team. I still have to find what I dislike
What problems is the product solving and how is that benefiting you?
Soc 2 compliance and making the process smooth. Ensures we are compliant and gives us relevant notifications to take action
showing 491 - 500