External reviews
External reviews are not included in the AWS star rating for the product.
Extremely useful compliance tool
What do you like best about the product?
Automation of audit tasks.
Easy high overview of status of tasks and event tracking, status of functions.
Easy high overview of status of tasks and event tracking, status of functions.
What do you dislike about the product?
Would like more customisation on security quiz.
What problems is the product solving and how is that benefiting you?
Compliance
- Leave a Comment |
- Mark review as helpful
Integration with IT systems for automated checks
What do you like best about the product?
Drata made it pretty easy to integrate with our major systems for IdP (Google) and MDM (Hexnode), even without installing any extra agent. We would then be notified if anything went out of compliance automatically. We could also exclude service accounts for any negative notification. Pretty neat!
What do you dislike about the product?
The Policy Center is a bit confusing to use, especially the options to "see current version" or edit the policy. Other than that, pretty clean platform!
What problems is the product solving and how is that benefiting you?
We used Drata heavily for our SOC 2 Type 2 auditing, it was a vital piece of the whole process and we successfully passed it!
Has helped our team stay compliant
What do you like best about the product?
Drata helps us maintain all our security compliance activities in one place. The application for the most part is easy to use. And has a short learning curve.
We also like their support team. They have been helpful when we needed help.
Additionally, Drata continues to add new features to the platform. We are able to manage more of our compliance activities in Drata rather than outside Drata.
We also like their support team. They have been helpful when we needed help.
Additionally, Drata continues to add new features to the platform. We are able to manage more of our compliance activities in Drata rather than outside Drata.
What do you dislike about the product?
There is nothing to dislike. There were some obvious feature gaps when we started using it but they have filling those gaps at a rapid pace.
What problems is the product solving and how is that benefiting you?
Helps us achieve SOC 2 compliance and stay compliant.
Fantastic Compliance and Security Platform
What do you like best about the product?
Drata centralizes and helps to automate your compliance needs under one solution; audits, vendor mgt, risk mgt, policy mgt, assets, reporting, and a trust portal.
What do you dislike about the product?
I honestly cannot think of one thing. Drata continues to bring feature after feature to improve the product.
What problems is the product solving and how is that benefiting you?
Allows a small team to work more effciently by automating various tasks that typically would take weeks to complete.
Seamless Communication and Solid Work Ethics but Room for Improvement in User Education
What do you like best about the product?
Efficient Communication: Despite the time zone difference, the communication with Drata's compliance team has been exceptionally smooth. I can easily reach out during my working hours and receive a prompt reply by the next morning.
Flexible Tools: Not only do they offer a built-in chat tool, but they're also flexible enough to let me use third-party tools like Google Docs for commenting.
Outstanding Work Ethics: Being the sole point of contact for compliance in my small company, I've worked with the Drata team more closely than with some of my colleagues. Their professionalism, punctuality, and respectful manner exceeded my expectations.
Flexible Tools: Not only do they offer a built-in chat tool, but they're also flexible enough to let me use third-party tools like Google Docs for commenting.
Outstanding Work Ethics: Being the sole point of contact for compliance in my small company, I've worked with the Drata team more closely than with some of my colleagues. Their professionalism, punctuality, and respectful manner exceeded my expectations.
What do you dislike about the product?
Lack of Deep Understanding: While Drata's tool excels at guiding users through compliance tasks and significantly aiding in increasing the readiness percentage, there's room for improvement when it comes to instilling a deep understanding of the 'why' behind the compliance requirements. Although the compliance team is very helpful in answering many of these 'why' questions, it would be advantageous if such knowledge were incorporated directly into the tool. This would eliminate the need for users to remember all the intricate details and could serve as an ongoing resource for understanding compliance deeply.
Gap in Audit Preparedness: The tool is designed to make you compliant but not necessarily audit-ready. Users are left to themselves to make the connections between policy requirements, company statements, and actual practices.
Gap in Audit Preparedness: The tool is designed to make you compliant but not necessarily audit-ready. Users are left to themselves to make the connections between policy requirements, company statements, and actual practices.
What problems is the product solving and how is that benefiting you?
Gaining trust in our security practice internationally, beyond local market.
Best SOC 2 compliance management tool we found
What do you like best about the product?
Fast moving team that develops features quickly; by far the best UI compared to Tugboat and Vanta; agentless evidence checking (unlike Vanta) which is a much more secure architecture.
What do you dislike about the product?
Still a young and maturing product. Overly prescriptive in how to implement and evidence certain controls. For example, we handle network access management through security groups, but their automated evidence collection checked for NACL rules instead. There's not always enough flexibility to handle different controls, let along custom controls. So, you'll still end up uploading a fair share of manually collected evidence.
What problems is the product solving and how is that benefiting you?
All of our compliance readiness is handled well in one place. They are also very good at automating all the tasks needed to maintain readiness: it would be like herding cats to do that by hand.
Great platform and incredible support!
What do you like best about the product?
The platform is very easy to use, easy to set up, and the support is one of the best I've seen of any platform I've used.
What do you dislike about the product?
Nothing - great service! I have gone through SOC2 Type 1 and currently doing SOC2 Type 2 and everything is moving smoothly.
What problems is the product solving and how is that benefiting you?
Helping me achieve SOC2 Type 1 for my customers to be more confident in signing with me.
Great platform with excellent customer support
What do you like best about the product?
Super easy to set up, use and maintain, plus they have excellent customer support. The speed and frequency that Drata are releasing new & very good features is impressive and have really added to our experience.
What do you dislike about the product?
No downsides so far, we have loved the Drata product.
What problems is the product solving and how is that benefiting you?
Helping our small team maintain compliance on an ongoing basis
SOC2 made easy(ier)!
What do you like best about the product?
The setup of Drata was quite straight forward. The documentation and customer support was really helpful. The intergration was simple. Onboarding team was easy.
What do you dislike about the product?
The amount of policies can be overwhelming at first but this was where customer support came in handy!
What problems is the product solving and how is that benefiting you?
Getting a birdseye view of our current state and what needed to be done to achieve SOC2
Getting devices registered
Getting devices registered
Drata is excellent for compliance
What do you like best about the product?
This was the first time anyone had gone through SOC 2 compliance and Drata helped us achieve it without issue. Support was there from day 1 to help walk us through everything and answer any of our questions. I would not hesitate to use them again at another company.
What do you dislike about the product?
The drata agent could be better in regards to auto updating and covering all the main operating systems better. Some of the workflows and processes are a little clunky.
What problems is the product solving and how is that benefiting you?
Drata is helping us achieve our SOC 2 Type report. They helped us collect all the evidence and provided us with all of the boilerplate documented policies to help us get there. They also helped us find our SOC 2 Auditor as well.
showing 241 - 250