Drata Security & Compliance Automation Platform (D)

What do you like best about the product?

The automation and integration of software that tracks frameworks. I also like the updates and notifications I receive via email regarding monitoring and controls.

What do you dislike about the product?

I am not a fan of the new UI. I prefer the previous UI as it was more user friendly and simpler to understand.

What problems is the product solving and how is that benefiting you?

Drata is helping our organization achieve compliance and certification of different frameworks which is allowing us the opportunity to close more deals with clients.

What do you like best about the product?

I like Drata because it saves me a lot of time, especially in managing the SOC 2 process. The ease of use is great; everything is intuitive and makes for a simple process. I also appreciate having a coach or representative who walks through the process with me, which was very helpful since this was my first experience. With our small team, having two coaches throughout the year ensured I knew my assignments, needed policies, and what data to submit. This guidance made it really easy to walk through the process. The initial setup was surprisingly easy, which was important given our small organization's time constraints.

What do you dislike about the product?

N/A

What problems is the product solving and how is that benefiting you?

I use Drata to save time and manage the SOC 2 process. It's intuitive, which simplifies everything for me. The ease of use and support from a coach make the process straightforward, especially as a small organization.

What do you like best about the product?

It helps me compile and track compliance-related information in one place. Using the API to connect to other services also takes some of the legwork out of the process and makes the overall workflow easier.

What do you dislike about the product?

The interface isn’t as intuitive as I’d like, so it can take a little time to find what I need—especially if I don’t use the system regularly.

What problems is the product solving and how is that benefiting you?

It helps us keep track of our compliance process.

What do you like best about the product?

I have found Drata to be really helpful in my day-to-day experience. It sends me reminders when I need them and keeps me on top of all my tasks. The interface is very intuitive and it helps to ensure we maintain our SOC 2 compliance effectively. I really like how it keeps everything organized and makes sure SOC 2 compliance remains a priority. The reminders are particularly useful as they allow me to find the task assigned to me and complete it, knowing our SOC 2 compliance is in good shape. The organizational capabilities are great too; I can see the tasks, who they're assigned to, and if anyone is behind, which is very useful. Drata's integration with our Gmail and Slack makes it easier to use. Initial setup was very easy, which was a definite plus for our team.

What do you dislike about the product?

Really nothing. It works as intended.

What problems is the product solving and how is that benefiting you?

Drata keeps us organized and ensures SOC 2 compliance is a priority. It provides reminders, keeps me on top of tasks, and the intuitive interface helps in task management and compliance upkeep.

What do you like best about the product?

I find Drata extremely easy to use. It offers a ton of integrations that are beneficial for linking all our systems. The platform provides very easy auditability and a history of changes with automation and alerts. I also appreciate the great support for both audit and technical issues. Drata's ability to facilitate SOC 2 audit readiness by allowing our auditors and vCISO to work in the same place is invaluable. The singular platform for evidence tracking and coordination across multiple teams for SOC 2 audit preparation is a big plus. Additionally, Drata's pricing and the help in finding companies to support our audit efforts were crucial factors in choosing it.

What do you dislike about the product?

I find the clarity on what I need to do and steps to proceed with Drata could be improved. There should be clearer tutorials and onboarding support. I'm not sure if I could use Drata on my own without support from VCISO, and if you don't have a VCISO, you likely need to spend a lot more time or have a dedicated role for it (which we don't have).

What problems is the product solving and how is that benefiting you?

I use Drata for SOC 2 audit readiness, linking integrations for evidence and team coordination. It's an easy platform with tons of integrations, allowing easy auditability, automation, and great support.

What do you like best about the product?

I like how Drata provides clear visibility into our compliance posture, simplifies auditor interactions, and keeps ISO 27001, SOC 2, and other compliance initiatives organized and audit-ready year-round, not just at audit time.

What do you dislike about the product?

One area that could be improved is navigation and workflow continuity. When working through auditor requests, it's easy to lose your place if you need to create or update related items such as controls or evidence. For example, if I open an auditor request, add a control, and then add evidence, there isn't always a clear path back to the original request. I often use multiple browser tabs to maintain context and avoid losing my place. This is a relatively minor issue, but improving navigation between related records would make audit workflows more efficient.

What problems is the product solving and how is that benefiting you?

Drata has significantly streamlined our audit process. It gives us a single platform to manage auditor requests, share evidence, track control ownership, and communicate with auditors, eliminating much of the spreadsheet and email-based coordination that typically comes with audits. The result is a more organized process, less manual effort, and better visibility into audit progress and outstanding requests.

What do you like best about the product?

Drata is very easy to use, and offers clear insight into where our employees are compliance or non-compliant with our required security measures.

What do you dislike about the product?

Sometimes the admin login view can be overwhelming, but once you get used to it, I find it easy to remember where things are and what I want to navigate to most.

What problems is the product solving and how is that benefiting you?

Drata is helping us maintain SOC 2 compliance, maintain employee files relevant to IT security, helping us share IT/Security policies with employees and device management.

What do you like best about the product?

Very user-friendly and self-explanatory. The customer service is really good, and they’re very helpful whenever I need support. The site is set up so you can easily work through compliance standards and controls, with plenty of evidence already checked by Drata. Thanks to these integrations with the Drata Agent, maintaining computers secure and in check is centralized.

What do you dislike about the product?

The Drata Agent sometimes gets stuck and doesn’t sync quickly enough, so users have to go in and manually trigger a sync.

What problems is the product solving and how is that benefiting you?

Drata helps manage compliance audits as well as security training and the ongoing maintenance of user systems and policies

What do you like best about the product?

It’s basically a self-service option, so you can handle the process yourself without having to hire super-expensive firms to do it for you.

What do you dislike about the product?

I can’t connect certain software or systems to it, even though they’re working on it.

What problems is the product solving and how is that benefiting you?

It’s helping us get closer to achieving ISO 27001 and SOC 2 certification, thanks to the auditor-approved policy templates and related materials.

What do you like best about the product?

Just the ease of use with the UI and integratinos with our tech stack.

What do you dislike about the product?

Ran into some bugs while uploading policies that took a while for support to fix.

What problems is the product solving and how is that benefiting you?

Helping with our SOC2 compliance and potentially ISO compliance