What do you like best about the product?

Drata is a true time saver. We have a small team, so becoming compliant with any framework seemed a daunting task, but Drata's automated tests, policy templates, and system integrations made it incredibly fast and easy to not only organize evidence for an audit but ramp up the maturity of our security program. You can't review the platform without mentioning the exceptional customer support that comes with it. The support we've received from their team (especially Craig) has been nothing but professional and attentive. They not only want us to use the platform at its full potential, but they are a close partner in helping us plan for and achieve compliance with our desired frameworks.

What do you dislike about the product?

While Drata has satisfied all of our needs for reaching compliance, I believe some of their features (like risk assessment) should be more widely accessible perhaps in an open-source format since compliance and security is something that is important for all organizations, not just the ones who can pay for it.

What problems is the product solving and how is that benefiting you?

We have a lot of resources but not an easy way to map their configurations to frameworks. We solved this by integrating our AWS environment so Drata's automated tests tell us immediately if something is not compliant.

We don't have an easy way to do vendor inventory or risk management. We solved this by using these features in Drata and now have a central place to not only track vendors/risk, but assign tasks to executives/employees who need to review them.

We needed a central repository to draft and update policies and have employees acknowledge them. We used Drata's templates to create policies and use it to push them out to employees for acknowledgement.