External reviews
External reviews are not included in the AWS star rating for the product.
A comprehensive product and team that streamlines the journey of becoming SOC2 compliant
What do you like best about the product?
Intuitive and well designed product focused on exactly what you need it to do, thorough documentation, seamless ability to export reports that outline compliance standing along with a helpful and friendly support team that guides you along the way to best shape your policies and procedures.
What do you dislike about the product?
At the time we started using Drata, they provided support for SOC2 only. Right now, they are also offering ISO27001. Although specializing and being experts in one type of compliance is an asset, it would be helpful to leverage the same monitoring setup for other types of certifications as well. So, I'm glad to see they are actively expanding into other frameworks.
What problems is the product solving and how is that benefiting you?
Drata guided us through our journey of becoming SOC2 compliant
- Leave a Comment |
- Mark review as helpful
The easiest compliance tool I’ve ever used
What do you like best about the product?
To sum it up - Drata took us from not even knowing Soc2 was a thing, to being completely audit ready in a matter of weeks. Everything with Drata has been nothing but simple. Basically You just connect your integrations your using, wait for the data to be synced then literally just go through all the things that need fixing until it's all done. It's literally so simple and so clearly laid out with explanations for each controls as well as any additional steps you need. If I did get stuck somewhere then I'd just shoot a message to Ashley and the CS team and someone would have a detailed answer for me (usually) within the hour. More importantly, since they've released the auditor side, our auditor seems pretty happy with Drata and how easy it makes evidence gathering from their side.
What do you dislike about the product?
Sometimes if you're knew to Soc2 it can be unclear exactly how to solve a particular monitor, so a bit more in depth documentation/explanations for certain co trols would be great. However in saying that - I have seen it greatly improve since we've started using Drata.
What problems is the product solving and how is that benefiting you?
Literally what it says on the tin - Helping us get soc2 ready. Will definitely use them for iso27001 as wel.
Recommendations to others considering the product:
Honestly just pull the trigger - you won't regret it.
Complete experience with lot of support
What do you like best about the product?
Support and ability to talk with an auditor
What do you dislike about the product?
The security training provided can be a little light
What problems is the product solving and how is that benefiting you?
When starting a certification you don't know, Drata provides you with a framework to work on to go with the flow. It is easy to start, stop and then follow after some time.
Employee integration is also efficient.
Employee integration is also efficient.
Best bang for your compliance $$
What do you like best about the product?
I love how easy and efficient the risk assessments are. The platform is about 100x easier to use than other compliance platforms and the price point is perfect.
What do you dislike about the product?
The only issue are other frameworks other than SOC2, but those are coming online soon. I'm looking forward to these new frameworks.
What problems is the product solving and how is that benefiting you?
The problem I am solving is starting a compliance program from scratch. Drama has made that infinitely easier
Recommendations to others considering the product:
If you need all framework compliance right away, I would wait; however, if you have some time to put together a complete compliance program, this is for you!
SOC in a box - It really helps!
What do you like best about the product?
Out of the box, it comes with almost every policy your IT and InfoSec department needs. It comes with approved pre-written policies! Policies are labeled with each of the SOC controls it is tied to, which is invaluable. You go in, make a few edits, assign a policy owner, and you're done. I likely would have bought Drata if this was the only thing it did. For me, the integrations are where Drata shines. It is a one-stop-shop to monitor for non-compliance and prevent 'oops' moments. From someone forgetting to turn on MFA or an employee accidentally turning on a firewall rule that is too permissive. Drata will catch it.
Did I mention it has a risk assessment tool too?
Did I mention it has a risk assessment tool too?
What do you dislike about the product?
Policy acceptance. When you edit a policy, you are presented with a full-screen so you can easily read the policy you are working on. When employees are accepting policies, the default screen only uses about half of your available screen. Not ideal for reviewing policies. You can manipulate the screen and zoom in, but it's a few extra steps that feel unnecessary.
The security awareness training seems to be a little bit thin, but it does touch on the key things you want your employees to know.
The security awareness training seems to be a little bit thin, but it does touch on the key things you want your employees to know.
What problems is the product solving and how is that benefiting you?
Continuous monitoring for compliance. Drata has given us visibility into some environments that could potentially be overlooked.
Recommendations to others considering the product:
You get policies, asset management, vendor management, monitoring, and an excuse to remind employees to do something ("...well Drata still shows you haven't done it..") all in one. It's a great product, and I'm glad we purchased it.
The best compliance automation platform in existence!
What do you like best about the product?
Drata has been key to obtaining our SOC2 certification. Without their mastery of the domain, willingness to go above and beyond to help us, general friendliness, and best-in-class product, we would be lost in the wilderness. In general, the way they've stepped up to help us has been totally amazing! And not just our account executive; we've had discussions with engineers, compliance experts, and even their executive team. Everyone at Drata has been tripping over themselves to introduce themselves to us, assist us towards compliance, and generally do everything they can to better our experience. They respond to emails during the evenings, provide clear and concise guidance... it's tough to say enough positive about the Drata experience. I wish more of our business partners and vendors shared their ethos.
What do you dislike about the product?
Though Drata has the best compliance platform in the business (and lightyears ahead of their competitors), we still wish it had even more features. That said, they are improving their product every day, including recently unveiling an amazing new framework automation feature that has made our lives (and our auditors' lives) significantly easier.
What problems is the product solving and how is that benefiting you?
Drata is helping us achieve SOC2 compliance. We would be nowhere near as far along with our audit and compliance process were it not for them. And not only are we achieving process goals; we are also becoming a more secure, stronger, and mature organization, thanks to their help.
Very happy with Drata & the support team
What do you like best about the product?
The automation & constant monitoring Drata provides is very impressive. It's all very self-explanatory getting set up. Any questions I have are promptly answered by our contact, Andrew. Andrew is very knowledgeable and willing to help whenever he can.
What do you dislike about the product?
I haven't experienced anything negative with Drata. It's made the SOC2 process much more manageable.
What problems is the product solving and how is that benefiting you?
Drata has helped us figure out what we lack with the necessary security controls needed for SOC2.
Clean, seamless, fast, and technically sophisticated SOC 2 compliance experience
What do you like best about the product?
Drata has a slick enterprise platform experience, a clean design, and a very helpful staff. Drata automated much more of the experience than I was expecting.
What do you dislike about the product?
As of this writing, Drata is still fairly new. Some integrations are still being built, and small (non-critical) hiccups during setup and employee onboarding are happening here and there.
What problems is the product solving and how is that benefiting you?
My company is using Drata to improve our security posture to both bolster the robustness of the company and to enable our sales team to address large enterprise clients.
Helps me stay organized!
What do you like best about the product?
Drata's intent is to make it easy for organizations to get themselves organized in advance of a security review, and the platform delivers. The inclusion of 20 policy templates made much quicker work of policy set-up and implementation, the workforce auditing made it so - with a quick glance - I could see who in my company still needed to complete some security work, and the controls ensured that I 'crossed my t's and dotted my i's' in advance of the audit. Additionally the customer support team is PHENOMENAL.
What do you dislike about the product?
Although there are a very few UX pieces that could use some minor improvements, the Drata customer support team has been *incredibly* responsive to feedback and my multitude of questions about audit preparation.
What problems is the product solving and how is that benefiting you?
Drata helps me increase the security posture of my organization, prepare for audit, and provides a tool that helps our organization demonstrate our commitment to security to potential partners - making it a critical component of our growth strategy.
Drata really helped my company get our SOC2 information consolidated quickly.
What do you like best about the product?
Customer support, pre-built policies, and easy access for our users to set up their accounts on their own.
What do you dislike about the product?
Nothing, everything worked as advertised.
What problems is the product solving and how is that benefiting you?
We needed to update our existing policies. Drata comes with every policy you need to be SOC2 compliant and made it easy to customize them for our specific business. Drata also provided a login and wizard for each of our employees to submit their background check, accept our policies, and complete their security awareness training quickly and simply.
Recommendations to others considering the product:
If I ever needed to help another company become SOC 2 compliant, Drata would be my first call.
showing 551 - 560