External reviews
External reviews are not included in the AWS star rating for the product.
An easy way to manage SOC 2 compliance
What do you like best about the product?
Drata streamlines SOC 2 compliance and makes it easy to identify problems in our infrastructure that could delay the process. I'd recommend Drata to anyone looking to improve their security posture.
What do you dislike about the product?
An even easier way to add evidence for controls not automatically monitor by Drata would be great
What problems is the product solving and how is that benefiting you?
When we started the SOC 2 process we didn't know what changes to our technical infrastructure and company we needed to make. Drata makes it easy to track your progress towards compliance and tells you exactly what tasks you need to finish.
- Leave a Comment |
- Mark review as helpful
Absolutely the way to go for SOC2
What do you like best about the product?
Drata not only helps with compliance monitoring but also gives you a todo list of things to address. The breadth and depth of tests keeps evolving to help reduce/eliminate the annual SOC2 audit pressure. Having been through SOC2 without Drata I can't imagine starting the SOC2 journey without a tool like this.
It integrates with so many things so manual efforts are almost eliminated. Individual compliance is often challenging but Drata helps with both conducting the annual training as well as tracking and reminding people.
It integrates with so many things so manual efforts are almost eliminated. Individual compliance is often challenging but Drata helps with both conducting the annual training as well as tracking and reminding people.
What do you dislike about the product?
Most of the compliance testing works right out of the box. However, if you use non-standard tools, there is currently no automated integration. They do allow evidence upload but it isn't automated. This issue is pretty minor since it only impacts 1% of the tests for us.
What problems is the product solving and how is that benefiting you?
Provides fully automated and constant compliance monitoring for SOC2. Provides a solid and clear audit evidence trail for the annual audit.
Happy Drata Customer
What do you like best about the product?
Ease of use, reasonable pricing, and their partnerships make the entire SOC 2 process super simple.
What do you dislike about the product?
I didn't find anything I didn't like. It was all a great experience.
What problems is the product solving and how is that benefiting you?
We're solving a trust and confidence problem with our customers, shareholders, and regulators: confidence customer data is properly secured.
Visionary product and excellent customer service
What do you like best about the product?
We evaluated multiple solutions before picking Drata. Their integrations are super quick and self-serve, and their product is robust and user-friendly. They are adding new features all the time, and our employees love it. Most importantly, their customer success team is amazing. Any time we've had a question, they've answered within minutes, and they go above and beyond to help us understand security and compliance best practices.
What do you dislike about the product?
Nothing comes to mind. Drata is a relatively new company in this space so there are some integrations which are still on the roadmap, but they're adding them really quickly and after they recently launched the Justworks integration, we're fully covered.
What problems is the product solving and how is that benefiting you?
Drata helped us get ready for our SOC II Type 2 audit and also introduced us to a great auditor (who we're now working with).
Drata helps exponentially to get SOC2 chaos under control
What do you like best about the product?
Drata has a very nice, modern interface that is quite easy to use. The developers have well-planned out what is required for evidence uploads to make a strong case for SOC2 compliance and the UI makes it easy to see how to resolve an issue, while constantly displaying a realistic "Passing Score" on your compliance efforts.
What do you dislike about the product?
Nothing to dislike yet. So far the system is working as promised.
What problems is the product solving and how is that benefiting you?
Drata is helping our organization to prepare for SOC2 compliance audit and will help to support on-going compliance efforts in the future.
Recommendations to others considering the product:
There are a few vendors in the SOC2 automated compliance space, and I recommend you take a look at all of them. However, after my investigation I decided upon Drata as our SOC2 compliance tool and have been very satisfied with the decision. They have excellent customer support for when I need help and the tool has been instrumental in getting my organization to SOC2 compliance.
Streamlined SOC2 Compliance with Stellar Customer Support
What do you like best about the product?
Drata made SOC2 compliance and monitoring easy to understand, approach, and implement. Alerts on any changes or failed tests help set our minds at ease. The employee component has a great layout, and customer support has been fast and on point.
What do you dislike about the product?
Product is great, no complaints. In general, SOC2 prep is heavy lifting on development teams, so the more technical help for items outside Drata's SaaS scope, the better.
What problems is the product solving and how is that benefiting you?
Increased security. Monitoring of our security posture on an ongoing basis. Ability to demonstrate security protocols to others.
Drata makes an otherwise daunting task a snap!
What do you like best about the product?
I love the ease of integrating 3rd party tools, the instant feedback on issues and how to fix. Not to mention the amazing customer support from the Drata team!
What do you dislike about the product?
There isn't anything I can say here, I've been loving everything they do and how quickly they are adding additional features.
What problems is the product solving and how is that benefiting you?
Becoming compliant to be able to partner with companies without dedicating a ton of dev time each month to keep up compliancy.
Drata makes SOC2 fun again (was it ever fun before?)
What do you like best about the product?
UI is beautiful and connecting accounts is relatively straight forward to understand
What do you dislike about the product?
Company is building out their products as they go so if you have needs outside of SOC those are not built out at the moment
What problems is the product solving and how is that benefiting you?
We need to be SOC2 compliant and this is helping us along the way :)
Perfect easy way towards SOC 2
What do you like best about the product?
Very intuitive UI, tremendous support from Drata team. Drata is a time saver, SOC 2 reporting has never been so easy. A wide range of technology stack is supported during integration.
Monitoring the controls is easy and complete, Drata covers all aspects connected to SOC 2 reporting
Monitoring the controls is easy and complete, Drata covers all aspects connected to SOC 2 reporting
What do you dislike about the product?
At this moment, there is nothing to dislike,
What problems is the product solving and how is that benefiting you?
Drata is a time saver, SOC 2 reporting has never been so easy. User is able to connect all the systems and evidences easily and automatically collected on behalf of a user.
Headache-free platform with outstanding customer support, demystifing the SOC 2 process
What do you like best about the product?
Easy to use, well designed platform with clear descriptions, documentation and walk-throughts which educate users and facilitate employee engagement in the process. Highly responsive and helpful support team.
Made by a team who have been in the position of needing to achieve SOC 2 before, who understand the experience from my perspective and that of our engineering teams, more so than they would if they were coming from simply an auditing or consulting background.
Made by a team who have been in the position of needing to achieve SOC 2 before, who understand the experience from my perspective and that of our engineering teams, more so than they would if they were coming from simply an auditing or consulting background.
What do you dislike about the product?
We're looking forward to the platform supporting more standards (e.g. ISO 27001 and GDPR).
What problems is the product solving and how is that benefiting you?
We require SOC 2 compliance for partnership agreements, and in addition to giving a clear roadmap and project management for working our way toward SOC 2, the structure which Drata adds also benefits us more broadly as we continue to build and optimize our layered security program, providing visibility and a clear breakdown of people, processes / policies, and technology.
Recommendations to others considering the product:
Their platform will simplify the process, but keep in mind to bring your own critical eye to what you do and don't want to include in scope for the audit. The product will give you visibility into more than you would need to tick off the auditor's boxes.
showing 561 - 570