External reviews
External reviews are not included in the AWS star rating for the product.
Implementing Drata over the last 12 months
What do you like best about the product?
- Craig Macaraeg was our CSM who was a great help over the last 12 months helping us integrate Drata and get upto 100% compliance. He was very helpful, emphatetic and a pleasure to work with
- reduces manual work during an audit
- reduces manual work during an audit
What do you dislike about the product?
- Drata should focus on building more integrations with security tools (which are in their roadmap)
- Takes time to port over an existing compliance program into Drata (much easier if you are starting from scratch)
- Takes time to port over an existing compliance program into Drata (much easier if you are starting from scratch)
What problems is the product solving and how is that benefiting you?
automating audit evidence collection
- Leave a Comment |
- Mark review as helpful
Fast to onboard and integrate for company wide compliance needs
What do you like best about the product?
Range of tools and services that can be integrated from day 1 help the integration and initial compliance control checks show a quick return on investment.
The platform is quite intuitive compared to others in the market and with the in-console support with quick human response was one of the main plus points.
The platform is quite intuitive compared to others in the market and with the in-console support with quick human response was one of the main plus points.
What do you dislike about the product?
While the platform does bring a lot of benefits, the cost for each additional compliance framework is still fairly high.
What problems is the product solving and how is that benefiting you?
In the finance/payments space, there are various regulatory and compliance requirements to address. Consolidating those in to a tool that can map the frameworks together, reducing time in audits and ensuring that we maintain a compliant state across disparate teams is a game changer.
In addition, the additional possibility to add and map requirements from customers and partners to ensure we maintain contractual promises helps to alert us to any degradation in our service quality and alignment with responsibilities.
In addition, the additional possibility to add and map requirements from customers and partners to ensure we maintain contractual promises helps to alert us to any degradation in our service quality and alignment with responsibilities.
Great product for managing compliance
What do you like best about the product?
Easy to use, great customer service. I like that I can see when items are due in a dashboard so I can get to work on them before they expire.
What do you dislike about the product?
The support articles don't always work (aren't accessible) and some areas could be more customizable
What problems is the product solving and how is that benefiting you?
It helped us in several ways:
- when we started the program it acted as a guide into what we needed to do
- now it's useful for centralizing our compliance efforts and for easily keeping track of when documents or tasks should be reviewed and updated. This is very useful because Drata does it automatically without the need for us to setup calendars and reminders.
- it helps us with security training for our staff
- when we started the program it acted as a guide into what we needed to do
- now it's useful for centralizing our compliance efforts and for easily keeping track of when documents or tasks should be reviewed and updated. This is very useful because Drata does it automatically without the need for us to setup calendars and reminders.
- it helps us with security training for our staff
SOC 2 Audit like Butter!
What do you like best about the product?
The audit portal was extremely helpful in preparing for the SOC2 audit. Prepping for an audit can be very timeconsuming because of the large number of artificats you have to collect and log into the auditor's portal. Drata made this process much easier because much of the evidence is collected, curated (sorted and categorized) and presented to the auditor directly. For many of the items in the audit portal I simply responded "See Drata Portal" and didn't have to collect evidence on my own. Sometimes there are excpetions to the controls (eg., service accounts that aren't assigned mfa,...). I can explain these excpetions in a succinct way on Drata and the exceptions/explanations make it into the audit portal. I don't have to re-explain why things are to the auditors! Saves time during the audit.
What do you dislike about the product?
This isn't an issue with Drata so much. I found that auditors tend to accept the findings in Drata without asking too many questions. They sometimes should still dig into an item to make sure what I said in Drata is actually true.
What problems is the product solving and how is that benefiting you?
Preparation for audits, automated risk assessment, vendor management, continuous monitoring.
Super easy compliance tooling - highly recommended!
What do you like best about the product?
I've had nothing but good experiences with Drata - the support is top notch, and very responsive. As a small security and compliance team, its great to be able to lean on Drata's compliance experts. The onboarding and customer success experience has been seamless as well - we have felt very well supported as we transitioned from another ISMS tool.
The difference from our prior, manual, hard to navigate tooling has been incredible, and the user access review feature has shaved weeks off our access review requirements. Keep up the good work!
The difference from our prior, manual, hard to navigate tooling has been incredible, and the user access review feature has shaved weeks off our access review requirements. Keep up the good work!
What do you dislike about the product?
The integrations are still being fleshed out, and there might not be as much as other products out there, but its coming along nicely. The issues I have had have been sorted out quite quickly.
What problems is the product solving and how is that benefiting you?
Automates a lot of the manual work for compliance, and moves us towards a continuous compliance model which works very well for us.
Drata 🌟🌟🌟🌟🌟
What do you like best about the product?
Ease of Use 🌟🌟🌟🌟🌟
Ease of Implementation 🌟🌟🌟🌟🌟
Ease of Integration 🌟🌟🌟🌟🌟
Customer Support 🌟🌟🌟🌟🌟
Ease of Implementation 🌟🌟🌟🌟🌟
Ease of Integration 🌟🌟🌟🌟🌟
Customer Support 🌟🌟🌟🌟🌟
What do you dislike about the product?
Some features and automated tests are rough around the edges, and it'll still take a professioal with the know-how to dig into the details to figure out the best workaround in many cases.
What problems is the product solving and how is that benefiting you?
Drata creates a central place to store compliance related information, as a result we're no longer using auditor's GRC tool and having to export every year the audit resources. Instead, auditors come to Drata for audit and as long as we maintain our Drata frameworks/requirements/controls, we're prepared for audits for years to come.
It's a huge time saver after the initial implementation.
It's a huge time saver after the initial implementation.
Drata is supported by the best
What do you like best about the product?
Drata employs a large number of knowledgable professionsals to support you in your security compliance goals
What do you dislike about the product?
I hope that the integrations continue to evolve and grow in numbers
What problems is the product solving and how is that benefiting you?
Drata aides us in reigning in the complex compliance and security alerting requirements for various compliance obligations and security goals
Drata helps inform and support an early stage start up.
What do you like best about the product?
Their account managers and support channels are very helpful and responsive. Connecting to our services was strightforward and their help documentation is very robust.
What do you dislike about the product?
There could be greater integration and automation into customizing the policy documents themselves.
What problems is the product solving and how is that benefiting you?
They are identifying which policies and control measures we need to have in place to comply with different security frameworks. They act as a document and evidence respository for those frameworks as well.
Drata wasn't just good software it was a partner
What do you like best about the product?
Drata's software is pretty straightforward. It's not complex and was easy to onboard into. The thing that sold me on Drata after the fact has been their support and partnership in our success. They corrected us when we started going off-course and pushed us to get across the finish line. Once we had the cert in flight they gave us marketing material so we could have that big splash effect that we wanted.
What do you dislike about the product?
Sometimes the checks will fail randomly but Drata is pretty good about finding the issue and helping us get back on track. It's been rare.
What problems is the product solving and how is that benefiting you?
We needed to get ISO compliant with an eye towards SOC 2.
Amazing User Experience Working with Drata
What do you like best about the product?
Drata provides abundant of useful documentations with step by step guidacne to help users simplify and streamline their work.
Also, Drata's supporting agents are professional, polite, patient, quick to response, and have the capability to answer different questions.
The UI of Drata app is easy to use.
Also, Drata's supporting agents are professional, polite, patient, quick to response, and have the capability to answer different questions.
The UI of Drata app is easy to use.
What do you dislike about the product?
Nothing particular.
Drata is updating itself through days, with increasing new functions available.
Drata is updating itself through days, with increasing new functions available.
What problems is the product solving and how is that benefiting you?
Drata is helping my org to achieve security frameworks. Drata shows the ability to help us organize different frameworks and their controls. Drata also provides help on what kind of evidence we should collect, what kind of technique we should deploy, how to write policies to meet our own context, etc.
showing 21 - 30