Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Issue Resolved Quickly
What do you like best about the product?
What I love most about Drata is its ease of use, effortless automation of compliance tasks, and user-friendly platform.
What do you dislike about the product?
While the platform is user-friendly, it could provide more guidance to help new users get started more easily
What problems is the product solving and how is that benefiting you?
Drata tackles key compliance and security challenges by automating security control tracking, offering real-time compliance updates, and reducing manual audit prep work.
- Leave a Comment |
- Mark review as helpful
Still feels newish, but works
What do you like best about the product?
I like being able to review which users have access to which apps. I like the concept behind being able to match controls for different frameworks based on the tests and connections they provide. Being able to match policy acknowledgements to users is also a plus.
What do you dislike about the product?
Their text editor for Policies is awful. Makes me feel like I have to write my own webpage. I was instructed to copy/paste policies in for easy version control, but the editor doesn't recognize table of contents blocks. It also doesn't have a tab system, so if you have to create things in columns, none of the data lines up.
They don't have Active Directory support beyond an agent that you would have to install to all systems. So if your company uses GPOs, it's difficult to get compliance data out of AD without using a third party tool.
It is difficult to see where some data is coming from once a connection is made. Most tests just say "Autopilot", which does not refer to Intune Autopilot. So if there's an issue with a connection or specific test, it's hard to fix.
Lastly, in order to get help with Drata you have to use their Chatbot system. The chatbot isn't bad per se, but the window/drawer that pops out for it, obscures half of the controls/buttons you need to use to allow access to your tenant for help and other actions for fixing issues. You have to actually close out of the window to get what an agent or the bot asks for, and then find a way to navigate back to that specific chat. A minimize button would be all it takes to fix this!
They don't have Active Directory support beyond an agent that you would have to install to all systems. So if your company uses GPOs, it's difficult to get compliance data out of AD without using a third party tool.
It is difficult to see where some data is coming from once a connection is made. Most tests just say "Autopilot", which does not refer to Intune Autopilot. So if there's an issue with a connection or specific test, it's hard to fix.
Lastly, in order to get help with Drata you have to use their Chatbot system. The chatbot isn't bad per se, but the window/drawer that pops out for it, obscures half of the controls/buttons you need to use to allow access to your tenant for help and other actions for fixing issues. You have to actually close out of the window to get what an agent or the bot asks for, and then find a way to navigate back to that specific chat. A minimize button would be all it takes to fix this!
What problems is the product solving and how is that benefiting you?
Having a single pane of glass to identify compliance issues and evidence requests makes auditing much easier.
Easy to use, powerful functionality
What do you like best about the product?
Rollout was relatively easy compared to other platforms I've used over time. Support is always responsive when issues have come up. Integrations continue to expand to include more IdPs, vulnerability management tools, etc.
What do you dislike about the product?
Policy center can be clunky to navigate especially during policy renewal time. The baked-in awareness training is a little rudimentary by modern standards but it checks the box at least which is good.
What problems is the product solving and how is that benefiting you?
Managing multiple framework controls across similar systems on a small team.
A Game-Changer for SOC 2, CCPA, and Third-Party Risk Management
What do you like best about the product?
As the Information Security & IT Director at YCharts, I'm responsible for our SOC 2 and CCPA compliance, along with managing our third-party risk. Drata has been a fantastic partner in automating and streamlining these efforts.
Drata's real-time monitoring, seamless integrations, and intuitive dashboard has made our SOC 2 compliance effortless. Drata continuously tracks our security posture, evidence, and policies.
While the Drata platform and technology is greater, the real differentiator has been our Customer Success Manager, Elizebeth. Her wealth of knowledge and expertise in SOC 2 compliance has been invaluable, wheather we need guidance on compliance updates, or details on current controls.
Drata's real-time monitoring, seamless integrations, and intuitive dashboard has made our SOC 2 compliance effortless. Drata continuously tracks our security posture, evidence, and policies.
While the Drata platform and technology is greater, the real differentiator has been our Customer Success Manager, Elizebeth. Her wealth of knowledge and expertise in SOC 2 compliance has been invaluable, wheather we need guidance on compliance updates, or details on current controls.
What do you dislike about the product?
One area I think Drata could improve is by improving and increasing it's integrations with other Security and IT tools.
What problems is the product solving and how is that benefiting you?
As YCharts grew we knew that becoming SOC 2 and or ISO 27001 compliance was essential for building our customer trust. When we started compliance journey and was in search for a solution that could provide expert guidance to help us navigate compliance, Drata was the answer.
Great Features but Mediocre UX
What do you like best about the product?
Drata has a big range of features and covers a lot of usecases for us. Also, the integrations that exist are relatively easy to integrate.
What do you dislike about the product?
There are two downsides to Drata, in my opinion:
1) User Experience
The UX of the product is okay, but it's not great. There are multiple smaller paper-cuts: The UI is overall a bit slow, frequently presenting loading spinners. Controls/Monitors have individual URLs, but unfortunately when shared they get removed. I.e. even if I send a colleague a link to a specific /control/123 they will get redirected to all controls instead of the specific one.
2) Integration Limitations
The default integrations that come with Drata are a bit limited, e.g. we still haven't been able to connect a vulnerability scanner into Drata, as it comes with 14 different options by default and we use none of them. That's always an issue with these integration platforms, but it's not clear to us yet how we could build a manual API integration for this feature.
1) User Experience
The UX of the product is okay, but it's not great. There are multiple smaller paper-cuts: The UI is overall a bit slow, frequently presenting loading spinners. Controls/Monitors have individual URLs, but unfortunately when shared they get removed. I.e. even if I send a colleague a link to a specific /control/123 they will get redirected to all controls instead of the specific one.
2) Integration Limitations
The default integrations that come with Drata are a bit limited, e.g. we still haven't been able to connect a vulnerability scanner into Drata, as it comes with 14 different options by default and we use none of them. That's always an issue with these integration platforms, but it's not clear to us yet how we could build a manual API integration for this feature.
What problems is the product solving and how is that benefiting you?
Drata helps us track our compliance against a wide range of controls. We are using Drata's automation features to reduce the burden on our employees.
Drata for SOC2
What do you like best about the product?
Great support team who does a great job answering questions about Drata product and compliance-related controls.
Product is easy to use.
Product is easy to use.
What do you dislike about the product?
Missing the feature to acknowledge company policies annually for every personnel. As an alternative, I have to create new policy versions every year and ask everyone to acknowledge the new versions, even if they just acknowledge the old version recently.
It will also be great to have a compliance owner rotation feature instead of just specifying a single owner for each control. Then every week there could be a separate person to receive notifications of compliance tasks.
It will also be great to have a compliance owner rotation feature instead of just specifying a single owner for each control. Then every week there could be a separate person to receive notifications of compliance tasks.
What problems is the product solving and how is that benefiting you?
SOC2 controls and auditing
HIPPA and GDPR controls
HIPPA and GDPR controls
Takes a little time to have a real person assigned but once they are they're quite responsive
What do you like best about the product?
If all relevant info is linked to a control Drata can easily tell you if you're compliant
What do you dislike about the product?
That controls are split out to Drata's DCF controls - these didn't map well our audit schedule and meant increased work to get through an internal audit
What problems is the product solving and how is that benefiting you?
One place of truth for internal audits
Drata makes evidence management straight-forward in a central management interface
What do you like best about the product?
Drata is the best tool my team and I have found for gathering and managing evidence in a central location. We have to gather and herd tons of information, so having one simple, central place to do it is crucial for us. Customer support is also well-executed at Drata. They're very helpful and responsive.
What do you dislike about the product?
It doesn't support all the connections I would like it to have, but despite that, it's still the best option for us.
What problems is the product solving and how is that benefiting you?
Drata is giving us a place to track and manage our efforts to become compliant, and it's making it easier for us to collaborate and maintain a huge amount of information.
Great platform to manage compliance to multiple framework.
What do you like best about the product?
Consolidation of controls aligned to various frameworks make audit easy and efficient. It really helps in building efficient and accurate process for monitoring controls. Continuous monitoring through integration is very helpful to identify & mitigate vulnerabilities. CSM support was great throughout the onboarding and transition process. @Elizabeth John
What do you dislike about the product?
There is still scope of improvement on Risk Management component.
What problems is the product solving and how is that benefiting you?
It helps in reducing repetitive work for multiple frameworks and various controls are mapped together.
Drata makes compliance easy
What do you like best about the product?
We use Drata for SOC2 and GDPR compliance. It tells you everything you need to do and monitors it continuously. I don't have to think about it on an ongoing basis. They are also very responsive in the chat if you have any questions. It also makes our audits easier, most of the information is available to the auditors so we don't need to produce much documentation.
What do you dislike about the product?
For GDPR, it was a little unclear how to get started, but we chatted with them and that helped a lot. Now that we are set up, it's easy.
What problems is the product solving and how is that benefiting you?
Solves SOC2 and GDPR compliance
showing 31 - 40