External reviews
External reviews are not included in the AWS star rating for the product.
Best SOC 2 readiness platform we investigated
What do you like best about the product?
- Best in class UI for compliance readiness
- Live customer support in-app
- Straightforward to use
- Agentless monitoring (I don't want 3rd party agents monitoring cloud infrastructure as that's very deep access)
- Live customer support in-app
- Straightforward to use
- Agentless monitoring (I don't want 3rd party agents monitoring cloud infrastructure as that's very deep access)
What do you dislike about the product?
- Overly prescriptive SOC 2 controls and evidence; there are workarounds for custom controls and evidence, but they require much more manual work
What problems is the product solving and how is that benefiting you?
- Manages policies, controls, and evidence for SOC 2 compliance
- Automated monitoring (quality varies) for continuous control compliance - e.g. checking that all users' endpoint devices match our security policies and recording for the auditor
- Formalized method for sharing compliance documents with customers and organizing readiness with auditors
- Automated monitoring (quality varies) for continuous control compliance - e.g. checking that all users' endpoint devices match our security policies and recording for the auditor
- Formalized method for sharing compliance documents with customers and organizing readiness with auditors
- Leave a Comment |
- Mark review as helpful
Drata: Making Compliance Easy and Effective
What do you like best about the product?
Drata is a big win for anyone dealing with compliance. It's super easy to set up, which is a huge relief. What's really cool is the number of integrations it offers, letting you automate pretty much all your compliance tasks and keep an eye on them all year round.
If something goes wrong, Drata doesn't just leave you hanging. They have really helpful guides that show you how to fix issues, which is great for peace of mind. The team behind Drata really listens to what users need and keeps adding new stuff to make it even better. We've been using it for three years now, and it just keeps getting better. We're big fans of everything Drata does!
If something goes wrong, Drata doesn't just leave you hanging. They have really helpful guides that show you how to fix issues, which is great for peace of mind. The team behind Drata really listens to what users need and keeps adding new stuff to make it even better. We've been using it for three years now, and it just keeps getting better. We're big fans of everything Drata does!
What do you dislike about the product?
We haven't found anything to dislike about Drata. It's been an excellent tool for us, especially since we're using multiple frameworks like SOC2, HIPAA, and GDPR. Drata handles them all brilliantly.
What problems is the product solving and how is that benefiting you?
Drata's integration capabilities are a game-changer for us. They make our life so much simpler. We don't need to stress about constant monitoring because Drata does it for us. This saves us a lot of time and effort every year, ensuring that our compliance is always in check without the extra hassle.
Drata - Easy to use and very helpful
What do you like best about the product?
All of the continous monitoring of controls and details of what is necessary. Along with the Live chat feature for questions.
What do you dislike about the product?
Sometimes uploading new policies from Confluence can cause weird formatting.
What problems is the product solving and how is that benefiting you?
Drata is working to help us acheive SOC 2 compliance and Drata listing out all the necessary evidence is extremely helpful.
A Worthwhile Option
What do you like best about the product?
Drata made management of our SOC 2 process easy. We had no idea how deficient we were until we spun of Drata and saw all of the things we still needed to do. Also, the Customer Support system and team are hands down the best I have worked with in my 30 years in hospitality and tech.
What do you dislike about the product?
Not much to dislike. For SOC 2 it's very clear what needs to be done. I can't speak for other frameworks.
What problems is the product solving and how is that benefiting you?
As a SaaS company, having our SOC 2 is vital and Drata has allowed us to do that after years of trying without a tool.
Wonderful People
What do you like best about the product?
I love working with my customer success manager, Craig Macaraeg, and all the wonderful support team like Tony, Aiden, and Rick. These guys made working within Drata so much easier. Craig literally met with me every two weeks and was genuinely concerned about my work. Tony and the gang were always happy to help me when I had questions. Even dumb ones. I was in Drata nearly every day working on something. So I spoke to the teams quite a bit. The platform itself was very easy to use. Things got set up and you didn't really have to worry about them.
What do you dislike about the product?
Sometimes I got lost in all the features. It was hard to keep up with all the new features coming out. This isn't necessarily a bad thing from a normal users perspective. I am just very new to compliance work so it was easy to get lost. But the support and customer success people were always there to help. Another minor gripe I have was with the policy editor. It was hard to edit directly in the browser so I often took the text and pasted it into Word. But since I did that, pasting it back into the editor would wreck the formatting. I wanted to use the editor for after I got the policy mostly set. It makes it easier to perform small changes. Rather than having to constantly upload new files. Which got confusing.
What problems is the product solving and how is that benefiting you?
My company had no clue how nor any groundwork done to get started in the complex world of compliance. Drata took us from completely ignorant to participating in our first SOC 2 Type 1 audit in about a year. (The length of time is mostly my company's doing. Change is slow when you go from nothing to something.)
DRATA Review
What do you like best about the product?
DRATA allows you to manage your entire GRC program from one tool out the box. Great policy templates, solid risk register and the ability to run audits from one tool. Easy to use and understand.
What do you dislike about the product?
Drata needs to add more EDR options and change the follow of Risk Assessment module.
What problems is the product solving and how is that benefiting you?
Automated work flow and visibility
Drata is the best compliance tool.
What do you like best about the product?
The ease of the platform to handle all of our compliance needs. Simple walkthroughs and more importantly prescription for what you need. Support and on boarding are incredible! The number of features included in the license is great! All in one platform that was easy to set up and get my employees enrolled in.
What do you dislike about the product?
Nothing really to note as of now. Everything in the platform is working as advertised.
What problems is the product solving and how is that benefiting you?
Drata is solving our manual approach to compliance frameworks.
Great platform, Amazing CSM
What do you like best about the product?
It's an easy and powerful platform to use. Our CSM was Elizabeth, and she has been absolutely amazing to work with. She's proactive, supportive, and has single handedly helped make my life easier as a security practitioner.
What do you dislike about the product?
Haven't experienced any issues in the last 12 months of working with them.
What problems is the product solving and how is that benefiting you?
Automated SOC 2
Audit prep
Using security as a marketing tool
Audit prep
Using security as a marketing tool
Great Product, Great Support
What do you like best about the product?
Its hard to say which part I liked best:
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
What do you dislike about the product?
At the time we tried it, their free trust center was not super configurable. So we ended up having to build our own trust center for our customers to find the current state of our security program and request security evidence.
What problems is the product solving and how is that benefiting you?
Drata brings in all of the evidence and data required to understand our security posture, provide evidence to auditors, and design controls that keep our employees, customers, and data safe with ample privacy protections for all.
Compliance, planning, monitoring, all in one
What do you like best about the product?
It's hard to pick just one feature, here are my favorites:
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
What do you dislike about the product?
If you already have ISO management software for something Drata doesn't support, you can make a Custom Framework (which is great) but it takes a lot of effort to implement (which makes perfect sense). That said, all the security compliance needs are well thought out and super easy to use.
What problems is the product solving and how is that benefiting you?
We need to plan and consider a lot of things before launching a new Service to customers. Drata does a great job making a roadmap to follow to consider all the things we might not think about, but are really important.
showing 111 - 120