External reviews
371 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Drata makes staying in compliance fairly easy (at least on the HR side)
What do you like best about the product?
It's been fairly easy to keep up with policy additions and changes, and we have made most use of personnel compliance in our HR / IT departments, to make sure onboarding and offboarding of employees is done in compliance.
What do you dislike about the product?
We had some initial hiccups getting our HRIS to successfully "talk" to Drata but we were able to get that resolved with help from our HRIS programmers who worked with Drata's API. Their customer support has been ok but not amazing.
What problems is the product solving and how is that benefiting you?
For my department, Drata helps make sure that onboarding and offboarding of employees is both smooth and completely compliant.
Implementing Drata over the last 12 months
What do you like best about the product?
- Craig Macaraeg was our CSM who was a great help over the last 12 months helping us integrate Drata and get upto 100% compliance. He was very helpful, emphatetic and a pleasure to work with
- reduces manual work during an audit
- reduces manual work during an audit
What do you dislike about the product?
- Drata should focus on building more integrations with security tools (which are in their roadmap)
- Takes time to port over an existing compliance program into Drata (much easier if you are starting from scratch)
- Takes time to port over an existing compliance program into Drata (much easier if you are starting from scratch)
What problems is the product solving and how is that benefiting you?
automating audit evidence collection
Super easy compliance tooling - highly recommended!
What do you like best about the product?
I've had nothing but good experiences with Drata - the support is top notch, and very responsive. As a small security and compliance team, its great to be able to lean on Drata's compliance experts. The onboarding and customer success experience has been seamless as well - we have felt very well supported as we transitioned from another ISMS tool.
The difference from our prior, manual, hard to navigate tooling has been incredible, and the user access review feature has shaved weeks off our access review requirements. Keep up the good work!
The difference from our prior, manual, hard to navigate tooling has been incredible, and the user access review feature has shaved weeks off our access review requirements. Keep up the good work!
What do you dislike about the product?
The integrations are still being fleshed out, and there might not be as much as other products out there, but its coming along nicely. The issues I have had have been sorted out quite quickly.
What problems is the product solving and how is that benefiting you?
Automates a lot of the manual work for compliance, and moves us towards a continuous compliance model which works very well for us.
Great experience for SOC2
What do you like best about the product?
Our experience with Drata for SOC2 compliance has been really good. Jordan, our customer rep, guided us through the process step-wise and has always checked on things as we progressed. The platform is easy to set up (with automatic connections & sync with our cloud/SaaS software), easy to use (once you train a little), and the maintenance is pretty straightforward. We use them almost daily to check on things and ensure compliance is tight.
What do you dislike about the product?
The stage between onboarding and getting to full speed needs some serious ramp-up and learning.
What problems is the product solving and how is that benefiting you?
Security compliance
A lighthouse in the fog of security certifications
What do you like best about the product?
It gives me a clear and comprehensive list of things I need to put in place to achieve any certification. It is easy to use, easy to put in place. I use it every day.
What do you dislike about the product?
The product is still young and there are some bugs on the platform. The customer support seems sometimes overwhelmed.
What problems is the product solving and how is that benefiting you?
Saves time to gather evidences
Gives me a clear of requirements I can tick one by one
Gives me a clear of requirements I can tick one by one
Detailed and Organized
What do you like best about the product?
I like the way drata is organized. Seperation of Controls, Policies and personal is perfect.
What do you dislike about the product?
Notifications were not always sent out when policies where updates
What problems is the product solving and how is that benefiting you?
Getting us to SOC2 compliance and then moving to HIPAA
Great GRC for companies of any size
What do you like best about the product?
I love the most DRATAs approach to security controls, their monitoring and evidence mapping.
It is simple to use and saves lot of time during yearly audits. Thanks to multiple usecases - Policy Center, Vendor management, etc. - it covers most of the areas required by many security standards.
Integrations to multiple systems - HR, Communication, Vulnerability management and others - makes the DRATA super useful in gathering the data at one place and using them efficiently.
It is simple to use and saves lot of time during yearly audits. Thanks to multiple usecases - Policy Center, Vendor management, etc. - it covers most of the areas required by many security standards.
Integrations to multiple systems - HR, Communication, Vulnerability management and others - makes the DRATA super useful in gathering the data at one place and using them efficiently.
What do you dislike about the product?
I dislike the DRATA simplified approach to Risk assessmnt (don´t misread with Enterprise Risk Management). It is too generic and doesn´t help our organisation to evaluate the current risks.
We would love to see imprvements in this area so that it would be more useful.
We would love to see imprvements in this area so that it would be more useful.
What problems is the product solving and how is that benefiting you?
Drata solves:
- continuous security frameworks monitoring (controls, monitoring, evidence etc.)
- vendor management
- governance (policy management)
- internal audit (audit hub)
- sharing security posture (trust center)
- employee compliance and HR processes
- device controls / protectin (drata agent)
- integrations (Slack, AWS, GitHub, Jira)
Whole company can be more efficient while using DRATA since it keeps our security posture well maintained. It reminds us about missing security evidence, upcoming audits and tasks which keeps the information up to date.
I consider drata reasonably cheap for the ammount of service / efficiency it provides to our company.
- continuous security frameworks monitoring (controls, monitoring, evidence etc.)
- vendor management
- governance (policy management)
- internal audit (audit hub)
- sharing security posture (trust center)
- employee compliance and HR processes
- device controls / protectin (drata agent)
- integrations (Slack, AWS, GitHub, Jira)
Whole company can be more efficient while using DRATA since it keeps our security posture well maintained. It reminds us about missing security evidence, upcoming audits and tasks which keeps the information up to date.
I consider drata reasonably cheap for the ammount of service / efficiency it provides to our company.
Good organizational tool for managing IT audits
What do you like best about the product?
I like the built-in tools to help manage the various audit processes we must comply with. It has helped our various team members go to one tool to manage the disparate and various needs of our audit process.
The default integrations matched 90% of the platforms we use today. Enabling Drata to scan our various tools regularly to ensure compliance.
The default integrations matched 90% of the platforms we use today. Enabling Drata to scan our various tools regularly to ensure compliance.
What do you dislike about the product?
The interface can be confusing at times.
What problems is the product solving and how is that benefiting you?
Drata is responsible for our Compliance Management, this has aided us keep our systems secure and transcat with enterprise level customers.
The most automated compliance platform we could find!
What do you like best about the product?
Many automated tests, reminders. Once we familiarized ourselves with the UI, it's really simple to use and it provides everything we need.
What do you dislike about the product?
It took me a while to get familiar with the UI. Also setting up connections was sometimes a bit tricky and we needed to contact Drata support to reset it and try again.
What problems is the product solving and how is that benefiting you?
Drata checks our identity provider, cloud accounts, ticketing system etc. and it all clicks together.
Taking much of the effort and guesswork out of compliance.
What do you like best about the product?
Drata is much easier to use than other compliance platforms that we have used and was easy to get up and running. When we do have questions or issues, their support team can be contacted directly via chat within the platform and are friendly, responsive, and knowledgeable. We feel like Drata will be an excellent partner for years to come and we appreciate the straightforward pricing per framework. That will make it easy to grow in the future as we add additional frameworks.
What do you dislike about the product?
We wish that there were additional automations or improvements on some of the existing integrations. For example, many of the monitors/tests are geared towards Jira being used for tracking things such as onboarding/offboarding. We use Freshservice for that and even though there is a Freshservice integration, we cannot currently tell Drata to look at Freshservice for those types of tickets. This is frustrating as it means we then have to submit that evidence manually.
Additionally, we wish that there was more clarity or guidance around when a test is failing. For example, a test may fail for a variety of reasons such as reliance on a policy being approved or evidence being provided. It's not always clear why a monitor or control is failing. Is it due to the policy? Is it a lack of evidence? Should that evidence have been pulled automatically or is it something we need to provide manually? This could be streamlined and provide more detailed guidance as to what exactly is needed to fix it.
Additionally, we wish that there was more clarity or guidance around when a test is failing. For example, a test may fail for a variety of reasons such as reliance on a policy being approved or evidence being provided. It's not always clear why a monitor or control is failing. Is it due to the policy? Is it a lack of evidence? Should that evidence have been pulled automatically or is it something we need to provide manually? This could be streamlined and provide more detailed guidance as to what exactly is needed to fix it.
What problems is the product solving and how is that benefiting you?
We needed a product to help us manage our SOC2 compliance while providing the ability to easily add additional frameworks in the future. When doing so, we wanted to try and maximize the work already completed towards those additional frameworks.
showing 51 - 60