External reviews
External reviews are not included in the AWS star rating for the product.
Excellent service
What do you like best about the product?
Drata has made our SOC2 compliance journey very manageable for us, and they have been incredibly helpful every step of the way. They listen to their customers and ensure our audits run smoothly.
What do you dislike about the product?
There's not a whole lot to dislike about Drata-- if I had one recommendation, I would ask that their UI team explore a dark mode for us that have to stare at screens all day.
What problems is the product solving and how is that benefiting you?
Continuous, automated compliance monitoring makes my life so much easier. Instead of manually uploading evidence all the time, their intuitive software does all the heavy lifting for me-- saving me a lot of time. The built-in policies and monitoring features give me much greater insight into our daily operations as well.
- Leave a Comment |
- Mark review as helpful
Solid compliance software, excellent compliance guidance
What do you like best about the product?
The best thing about Drata is their people. Our account manager has been fantastic, and the sales process was comfortable and much easier to deal with than Vanta's. The "compliance experts" in the Drata dashboard are also very easy to work with and fast at solving problems or answering questions. Drata also referred us to a competent and affordable SOC 2 auditor.
In addition, the Drata dashboard is very well laid out, and makes it clear what needs to be done to achieve your desired compliance certification. Drata also offers much more comprehensive support of compliance frameworks than other players in the space. We chose Drata over other automated SOC 2 monitoring solutions because they also offer FEDRAMP and HIPAA monitoring as well.
In addition, the Drata dashboard is very well laid out, and makes it clear what needs to be done to achieve your desired compliance certification. Drata also offers much more comprehensive support of compliance frameworks than other players in the space. We chose Drata over other automated SOC 2 monitoring solutions because they also offer FEDRAMP and HIPAA monitoring as well.
What do you dislike about the product?
Drata sells their automation quite heavily. While much of the solution is automated, the Drata console does not monitor as many of the SOC 2 controls as I had hoped, and we have ended up having to upload a significant amount of manually-collected evidence. As one example, Drata does not automatically monitor for the existence of a log collection system (like Datadog or New Relic) so we have to supply screenshots of the solution to prove we are using it. I am hopeful that, as Drata evolves, these other controls will be monitored better, but for now be aware that a lot of the process is still manual.
What problems is the product solving and how is that benefiting you?
For us, Drata is solving our SOC 2 certification headache. SOC 2 is a heavy lift, and we failed at our first attempt after going in blind. Drata is sort of like night vision for compliance.
A great compliance solution!
What do you like best about the product?
Easy channels to ask questions and receive quick responses, preconfigured frameworks that allow us to easily identify gaps in our processes.
What do you dislike about the product?
Duplicative evidence uploads for systems that we use that are not currently integrated with Drata. Having to upload evidence in Drata that is additional work for my team.
What problems is the product solving and how is that benefiting you?
Giving us a website that allows us to easily share our security documents. This allowed us to move off of another platform which saves my team time and money.
Simplified infosec GRC management that lives up to its promise.
What do you like best about the product?
Ease of connectivity; simplicity in getting things implemented; fantastic customer success team.
What do you dislike about the product?
Connections with external systems sometimes create false positives.
What problems is the product solving and how is that benefiting you?
Simplifying the implementation of ISMS makes it easy for a consultant to help their client. Saves me time and effort and also keeps the customer engaged.
Drata - Continuous monitoring Tool for GRC
What do you like best about the product?
Drata has vision and best features in continuous monitoring of a compliance environment. Drata looks to build different functionality that complements compliance and tracking requirements. Every Quarter they are releasing new frameworks which will help us in the future as we adopt addtional frameworks.
What do you dislike about the product?
Continuous monitoring is a fairly new concept and is not completely there yet. But they have been working very closely with my team in improving their tool to get there.
What problems is the product solving and how is that benefiting you?
Drata is our master control listing that incorporates automation in control testing. In the future when looking to adopt new frameworks, Drata will help map the controls we already have in place to determine any gaps.
Drata is a luxury limousine for your compliance journey
What do you like best about the product?
There are a number of things that I love about Drata.
First and most important, the onboarding experience was phenomenal. Sometimes with vendors, the sales process is all "red carpet," but you feel as though the carpet is pulled up a bit once move from prospect to paying customer. With Drata, the sales process was great, but once we became a paying customer it felt like we moved to VIP status. Great onboarding, great support, totally responsive to every question we have asked. I literally could not be more satisfied.
Second, the platform itself is terrific. Great UX, intuitive, great visual design.
Third, the access to compliance experts within the Drata platform is an absolute game-changer. We have asked dozens of questions about different controls and evidence and in every case we've gotten a thorough and helpful response within a matter of minutes (at most, hours).
Fourth, Drata worked to understand our audit needs and match us with an auditor who has been terrific.
I could go on, but the main thing is, Drata has exceeded all expectations, which is saying something, because we vetted compliance vendors HARD and had high expectations going in.
First and most important, the onboarding experience was phenomenal. Sometimes with vendors, the sales process is all "red carpet," but you feel as though the carpet is pulled up a bit once move from prospect to paying customer. With Drata, the sales process was great, but once we became a paying customer it felt like we moved to VIP status. Great onboarding, great support, totally responsive to every question we have asked. I literally could not be more satisfied.
Second, the platform itself is terrific. Great UX, intuitive, great visual design.
Third, the access to compliance experts within the Drata platform is an absolute game-changer. We have asked dozens of questions about different controls and evidence and in every case we've gotten a thorough and helpful response within a matter of minutes (at most, hours).
Fourth, Drata worked to understand our audit needs and match us with an auditor who has been terrific.
I could go on, but the main thing is, Drata has exceeded all expectations, which is saying something, because we vetted compliance vendors HARD and had high expectations going in.
What do you dislike about the product?
Nothing. If I discover something I dislike, I'll update, but so far, I have not a single complaint. Unless it's fair to complain that completing evidence for certain controls is hard work and I wish Drata would magically get ALL my personnel to complete their awareness training modules in a timely fashion...
What problems is the product solving and how is that benefiting you?
We need to achieve multiple compliance objectives in 2022 and wanted a compliance platform to help us organize and manage our compliance efforts. We also need to help many of our customers with their own compliance needs and we wanted a platform that would help us organize and manage those efforts as well. We are using Drata ourselves first to ensure it works as desired and it is meeting all of our requirements and then some. I quite honestly do not know if would be able to meet our compliance objectives with Drata.
Recommendations to others considering the product:
In our evaluations, Drata was not the least expensive compliance solution on the surface, but the value and ROI in terms of reduced time to manage our compliance project, we felt Drata offered the best value and we are delighted in our choice. Drata has been a phenomenal partner, the platform is a pleasure to use and our compliance project is ahead of schedule.
The perfect solution for obtaining your SOC2 hassle-free
What do you like best about the product?
Customer Support is superb at Drata, you have your dedicated CSM with regular check-ins that ensure your making the right process on the platform. Every single question was handled immediately and Drata is always prepared for any question. The platform is very intuitive to use and with all their integrations, getting SOC2 ready is not a big deal any more.
What do you dislike about the product?
Not a lot to complain honestly. The only minor thing is that the invites to the Drata platform have to be manually send to your employees. In such an automated platform, this feels like a step-back. But this is flagged already and potentially be worked on.
What problems is the product solving and how is that benefiting you?
Getting your security controls right with as much automation as possible.
Great experience onboarding with Drata and their team
What do you like best about the product?
The interface is very clear and easy to navigate. Martin, our customer success manager, is extremely helpful, proactive, and knowledgeable. He holds regular time with our leadership team to check in and walk us through questions and next steps, which has been critical to us staying on track. The help center is also very useful and the compliance experts online answer quickly and thoroughly.
What do you dislike about the product?
So far we have not had any frustrations with the platform or the team. It's a cumbersome process that is very time-consuming and takes a lot of team members, but that is part of the process.
What problems is the product solving and how is that benefiting you?
We are an early-stage technology company that is growing quickly and our customers are large enterprise customers with strict security needs. We want to move quickly, efficiently, and effectively, and we have been very happy with the process through Drata.
Incredibly responsive and helpful team
What do you like best about the product?
My CSM, Linn. She is very helpful and enthusiastic. In our recurring meetings she is happy to show me new features and go through existing features again with me.
What do you dislike about the product?
Nothing comes to mind. I have really enjoyed using Drata so far.
What problems is the product solving and how is that benefiting you?
Drata helped us understand the scope of a SOC2 and HIPAA audit and allowed us to have a clear roadmap to a successful audit.
Recommendations to others considering the product:
Set up recurring meetings with your CSM, they are so helpful and make the process really easy.
Great experience and very useful tool
What do you like best about the product?
I like the ease of getting our team onboarded directly. There is no need for the use of several different tools as Drata has integrations with other applications we use that seamlessly connect our Security processes with our basic HR onboarding duties and processes, including the background check service we use.
What do you dislike about the product?
It was a bit challenging to have a stable connection with some of our applications, as we are a company that uses tools that vary in nature and use in different parts of the world. So it took some time for our team to get onboard on using a more limited amount of tools that perform the same functions. After the original set up was properly completed the issues did not reoccur
What problems is the product solving and how is that benefiting you?
The biggest problem drata is addressing is that our onboarding is performed in the same, safe manner. It takes human error almost out of the picture and allows us a more standardized and cohesive onboarding. It also does the same for our other security processes
Recommendations to others considering the product:
If you are looking for a one-stop shop and ease of getting Soc2 or other security compliance accreditation then Drata is a really good place to be
showing 551 - 560