External reviews
External reviews are not included in the AWS star rating for the product.
DRATA Review
What do you like best about the product?
DRATA allows you to manage your entire GRC program from one tool out the box. Great policy templates, solid risk register and the ability to run audits from one tool. Easy to use and understand.
What do you dislike about the product?
Drata needs to add more EDR options and change the follow of Risk Assessment module.
What problems is the product solving and how is that benefiting you?
Automated work flow and visibility
- Leave a Comment |
- Mark review as helpful
Drata is the best compliance tool.
What do you like best about the product?
The ease of the platform to handle all of our compliance needs. Simple walkthroughs and more importantly prescription for what you need. Support and on boarding are incredible! The number of features included in the license is great! All in one platform that was easy to set up and get my employees enrolled in.
What do you dislike about the product?
Nothing really to note as of now. Everything in the platform is working as advertised.
What problems is the product solving and how is that benefiting you?
Drata is solving our manual approach to compliance frameworks.
Great platform, Amazing CSM
What do you like best about the product?
It's an easy and powerful platform to use. Our CSM was Elizabeth, and she has been absolutely amazing to work with. She's proactive, supportive, and has single handedly helped make my life easier as a security practitioner.
What do you dislike about the product?
Haven't experienced any issues in the last 12 months of working with them.
What problems is the product solving and how is that benefiting you?
Automated SOC 2
Audit prep
Using security as a marketing tool
Audit prep
Using security as a marketing tool
Great Product, Great Support
What do you like best about the product?
Its hard to say which part I liked best:
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
What do you dislike about the product?
At the time we tried it, their free trust center was not super configurable. So we ended up having to build our own trust center for our customers to find the current state of our security program and request security evidence.
What problems is the product solving and how is that benefiting you?
Drata brings in all of the evidence and data required to understand our security posture, provide evidence to auditors, and design controls that keep our employees, customers, and data safe with ample privacy protections for all.
Compliance, planning, monitoring, all in one
What do you like best about the product?
It's hard to pick just one feature, here are my favorites:
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
What do you dislike about the product?
If you already have ISO management software for something Drata doesn't support, you can make a Custom Framework (which is great) but it takes a lot of effort to implement (which makes perfect sense). That said, all the security compliance needs are well thought out and super easy to use.
What problems is the product solving and how is that benefiting you?
We need to plan and consider a lot of things before launching a new Service to customers. Drata does a great job making a roadmap to follow to consider all the things we might not think about, but are really important.
How Drata saved me from going crazy.
What do you like best about the product?
Platform is easy to understand with great insight from their help sections, but the best thing was the consistent communication and insight from Elizabeth. She was terrific.
What do you dislike about the product?
I have not found a downside yet. We will keep looking.
What problems is the product solving and how is that benefiting you?
Drata is assisting us in our SOCII Certification. We are a relatively new start-up with no security compliance background. If a novice team can navigate the solution and get a SOCII report done, all the credit goes to Drata and their team.
Great tool for automating security compliance
What do you like best about the product?
The automation of evidence gathering and tight integration into our existing tech stack.
What do you dislike about the product?
When automated tests against specific pieces of infrstructure fail it can be hard to tell what drata is looking for in the testing.
What problems is the product solving and how is that benefiting you?
Drata helps us ensure that we can continually compliant against all the security and privacy frameworks we target and enables us to provide accurate, live updates to our customers on our security posture.
World Class Support
What do you like best about the product?
From my first conversation with Dylan, the sales development manager in the UK, to my ongoing success journey with Morgan, our CSM, who has been nothing less than fantastic, Drata has been and continues to be a company I love more and more. From an ease-of-use product to having passionate people behind the product who genuinely care for your success in whatever certifications you are attempting to achieve. The ease of implementation and integration enables me to use the platform frequently daily, knowing the number of features that contribute more and more before future audits. After a bad experience using a previous piece of software, Drata does everything and more to give me confidence that the company I work for will achieve our three main goals of ISO 27001, GDPR and SOC2.
You could have the most incredible piece of software in the world; however, without Morgan, who I am lucky to have as my Customer Success Manager, the software falls without its people. Drata has the people behind the product, and the passion shows with each interaction I have with them.
You could have the most incredible piece of software in the world; however, without Morgan, who I am lucky to have as my Customer Success Manager, the software falls without its people. Drata has the people behind the product, and the passion shows with each interaction I have with them.
What do you dislike about the product?
Dislike and Drata are not used in the same sentence. I am confident this will be the case today and the future.
What problems is the product solving and how is that benefiting you?
Drata is identifying where we are not compliant. Advising how to correct using it's fantastic automated software which is backed up by it's impressive people behind the product who understand but also take the time to educate the issue and solution.
Great Seamless Product
What do you like best about the product?
It covers all parts of an audit and not just pieces.
What do you dislike about the product?
Drata can be an expensive product but I think it is worth it.
What problems is the product solving and how is that benefiting you?
Drata is helping us achieve SOC2 certification without needing a dedicated hire for managing the certification.
World class product supported by a top-notch team
What do you like best about the product?
A holistic view of controls from multiple frameworks is very helpful. I also enjoy the benfits of automating the colelction of evidence. Even the Drata preffered auditor community has made preparing for upcoming audits easy and painless. Crazy easy to implement. Intergrations with other existing tooks minutes. Fantastic, real-time customer support. This is a tool I actually find myself using every day.
What do you dislike about the product?
The only item that was not "obvious" to me was how each control tied back to a control family. Guess what - they have a solution for that, too. In 2 hours i recevied a matrix from support identifying which controls are addressed within each policy.
What problems is the product solving and how is that benefiting you?
Cross-functional control ownership. Address controls from multiple frameworks. Automate evidence collections through integrations with existing tools. Also, its so easy to use that people across the organization are actually leveraging the tool - no shelfware here.
showing 81 - 90