What do you like best about the product?

Drata has a big range of features and covers a lot of usecases for us. Also, the integrations that exist are relatively easy to integrate.

What do you dislike about the product?

There are two downsides to Drata, in my opinion:

1) User Experience
The UX of the product is okay, but it's not great. There are multiple smaller paper-cuts: The UI is overall a bit slow, frequently presenting loading spinners. Controls/Monitors have individual URLs, but unfortunately when shared they get removed. I.e. even if I send a colleague a link to a specific /control/123 they will get redirected to all controls instead of the specific one.

2) Integration Limitations
The default integrations that come with Drata are a bit limited, e.g. we still haven't been able to connect a vulnerability scanner into Drata, as it comes with 14 different options by default and we use none of them. That's always an issue with these integration platforms, but it's not clear to us yet how we could build a manual API integration for this feature.

What problems is the product solving and how is that benefiting you?

Drata helps us track our compliance against a wide range of controls. We are using Drata's automation features to reduce the burden on our employees.