External reviews
External reviews are not included in the AWS star rating for the product.
Drata helps automate our Compliance Program
What do you like best about the product?
It is easy to use, and makes things like Policy Management simple. It's quick to get started, and when I've had questions Support has been very helpful and responsive.
What do you dislike about the product?
I love that there are always new features available, and I do have some wish list items, like task reminders and some expanded reporting.
What problems is the product solving and how is that benefiting you?
Drata is helping us automate tasks and take as much manual work out of our Compliance Program as possible.
- Leave a Comment |
- Mark review as helpful
Drata at its best.
What do you like best about the product?
I had never used a tool like Drata before in my 40 years of experience. It is so easy to use and navigate. It contains all the features required for Compliance. The Risk Management, Controls, personnel & the main feature Monitoring is its best.
What do you dislike about the product?
I have still not come across any downside as I have been using it for the last two months.
What problems is the product solving and how is that benefiting you?
The tests being done by Drata is helping me in a way that I don't have to do all the tests simultaneously. Monitoring is so easy. All policies are in one place. All security controls are in one place. The risks once assessed and the risk register & risk treatment plan are all in one place. I can monitor all the employees about what they have complied with and where they are not compliant.
Drata has made my life SO much easier when it comes time for Audits, and continuous compliance.
What do you like best about the product?
Drata consolidates evidence in one handy place, which means extracting needed info for auditors simple.
What do you dislike about the product?
I don't love that auditors can see historical test data - this can make it look like we aren't managing some systems well, when in reality we just don't have integrations that are compatible (ie, vulnerability scanning).
What problems is the product solving and how is that benefiting you?
Solve the time problem very effectively, and makes it easy to manage multiple areas of compliance in one dashboard.
Game-changer for compliance automation
What do you like best about the product?
Drata breaks down the compliance process, even making it easier to work towards multiple frameworks at once by helping to consolidate controls and deliverables into a neat and comprehensible format. Additionally, the automation tools available to help achieve compliance, such as various device and account monitoring, is invualuable to actually achieving the work required to meet controls. They offer clean integrations with a wide swath of common SaaS tools. One key benefit here for us has been their integration with Jira, which we use to both create tickets related to compliance, as well as read tickets in order to automate compliance into processes such as employee offboarding. Their team is very helpful as well, ensuring we're setup for success.
What do you dislike about the product?
Downsides are minimal. Custom fields could be useful though for assets such as personnel and hardware.
What problems is the product solving and how is that benefiting you?
Drata is solving compliance for us. Reaching our compliance goals as an SMB would be monumentally more difficult without the Drata platform and team to help us work towards our goals in a way in which they are clearly presented to us, and in a platform where we can document progress and evidence neatly.
Drata review
What do you like best about the product?
The product is very good and helps in the management of certifications.
Also, the Customer Success people are very hard working and close to the customer along with their fast and efficient support.
Also, the Customer Success people are very hard working and close to the customer along with their fast and efficient support.
What do you dislike about the product?
Probably its weak point is the management of roles within the platform as they are predefined and not very granular.
What problems is the product solving and how is that benefiting you?
Drata is helping us a lot in the management of certifications, internal policies and forensic testing of equipment.
Zero Regrets
What do you like best about the product?
I love that they have taken something hard, expensive, and abstract and made it attainable for small SaaS companies like ours. The ROI is outrageous and it has quite literally made us a far better company as a result.
What do you dislike about the product?
It takes a good bit of time to get up to speed with how it works and how you will work with it to drive toward your audit. That said, it is time well spent.
What problems is the product solving and how is that benefiting you?
We needed to get a SOC 2 Type 2 in an affordable, practical, and authentic way. Drata has lived up to what we hoped it would be and, once our audit is done, we believe it will help us progress from green light to signed contract much faster.
Great service
What do you like best about the product?
Our service representative has been so patient and informative during the process of setup.
What do you dislike about the product?
The process is complicated, but I don't believe that's a Drata issue. It's just the world of cybersecurity and compliance. I feel like Drata has the tools required.
What problems is the product solving and how is that benefiting you?
Organizing our policies and controls.
great support
What do you like best about the product?
Drata is highly regarded for its compliance automation, seamless integrations, and user-friendly interface. It streamlines processes by automating evidence collection, monitoring controls continuously, and integrating with popular tools, making compliance management more efficient and transparent.
What do you dislike about the product?
too many controls without careful configuration.
What problems is the product solving and how is that benefiting you?
accompanying us through the certification process
A great product and exceptional support to boot
What do you like best about the product?
Drata is a true time saver. We have a small team, so becoming compliant with any framework seemed a daunting task, but Drata's automated tests, policy templates, and system integrations made it incredibly fast and easy to not only organize evidence for an audit but ramp up the maturity of our security program. You can't review the platform without mentioning the exceptional customer support that comes with it. The support we've received from their team (especially Craig) has been nothing but professional and attentive. They not only want us to use the platform at its full potential, but they are a close partner in helping us plan for and achieve compliance with our desired frameworks.
What do you dislike about the product?
While Drata has satisfied all of our needs for reaching compliance, I believe some of their features (like risk assessment) should be more widely accessible perhaps in an open-source format since compliance and security is something that is important for all organizations, not just the ones who can pay for it.
What problems is the product solving and how is that benefiting you?
We have a lot of resources but not an easy way to map their configurations to frameworks. We solved this by integrating our AWS environment so Drata's automated tests tell us immediately if something is not compliant.
We don't have an easy way to do vendor inventory or risk management. We solved this by using these features in Drata and now have a central place to not only track vendors/risk, but assign tasks to executives/employees who need to review them.
We needed a central repository to draft and update policies and have employees acknowledge them. We used Drata's templates to create policies and use it to push them out to employees for acknowledgement.
We don't have an easy way to do vendor inventory or risk management. We solved this by using these features in Drata and now have a central place to not only track vendors/risk, but assign tasks to executives/employees who need to review them.
We needed a central repository to draft and update policies and have employees acknowledge them. We used Drata's templates to create policies and use it to push them out to employees for acknowledgement.
Great for companies negotiating the hazards of SOC 2
What do you like best about the product?
Their tooling is very good and easy to understand. It's also very flexible for not just SOC 2 but also to be able to set a specific set of SOC 2 policies desired, so it's not just one size fits all.
What I really like is the trust portal one can create -- this has been a game changer for me as the defacto CISO having to answer and endless stream of security questionairres. I now point them to our trust portal and viola!
We also had great customer support throughout our experience with knowledgable people helping when needed.
We also liked how easy it is to integrate some of our 3rd party evidence providers right into the platform! Easy!
What I really like is the trust portal one can create -- this has been a game changer for me as the defacto CISO having to answer and endless stream of security questionairres. I now point them to our trust portal and viola!
We also had great customer support throughout our experience with knowledgable people helping when needed.
We also liked how easy it is to integrate some of our 3rd party evidence providers right into the platform! Easy!
What do you dislike about the product?
If one isn't used to SOC 2 (or other types of similar certifications / requirements) its a bit of a learning curve finding which area in the software to navigate to to perform a task, but its not too bad once you get the hang of it.
What problems is the product solving and how is that benefiting you?
It maintains one location for all our SOC 2 complince information and an easy place to update / maintain policies and evidence so that the auditors have an easy time at audit time.
showing 1 - 10