What do you like best about the product?

I like being able to review which users have access to which apps. I like the concept behind being able to match controls for different frameworks based on the tests and connections they provide. Being able to match policy acknowledgements to users is also a plus.

What do you dislike about the product?

Their text editor for Policies is awful. Makes me feel like I have to write my own webpage. I was instructed to copy/paste policies in for easy version control, but the editor doesn't recognize table of contents blocks. It also doesn't have a tab system, so if you have to create things in columns, none of the data lines up.

They don't have Active Directory support beyond an agent that you would have to install to all systems. So if your company uses GPOs, it's difficult to get compliance data out of AD without using a third party tool.

It is difficult to see where some data is coming from once a connection is made. Most tests just say "Autopilot", which does not refer to Intune Autopilot. So if there's an issue with a connection or specific test, it's hard to fix.

Lastly, in order to get help with Drata you have to use their Chatbot system. The chatbot isn't bad per se, but the window/drawer that pops out for it, obscures half of the controls/buttons you need to use to allow access to your tenant for help and other actions for fixing issues. You have to actually close out of the window to get what an agent or the bot asks for, and then find a way to navigate back to that specific chat. A minimize button would be all it takes to fix this!

What problems is the product solving and how is that benefiting you?

Having a single pane of glass to identify compliance issues and evidence requests makes auditing much easier.