External reviews
External reviews are not included in the AWS star rating for the product.
Drata: Streamlining Compliance with Exceptional Support
What do you like best about the product?
I absolutely love Drata's ISMS Dashboard view. It seamlessly connects our entire IT stack, providing real-time insights into areas or team members that might need attention. The latest Risk Management Module, aligned with ISO/IEC controls, is a game-changer—it has significantly streamlined our compliance processes. Additionally, the team at Drata is incredibly innovative, making security and compliance not just manageable but actually enjoyable.
What do you dislike about the product?
Nothing to disklike about Drata, even the pricing is very competitive!
What problems is the product solving and how is that benefiting you?
When we onboarded to Drata three years ago, we faced a tight five-month deadline to achieve ISO/IEC 27001 and 27701 certification. Thanks to Drata, we were able to meet this goal in just three months. Since then, we've smoothly navigated our annual audits, and both our security and privacy posture have significantly matured alongside Drata’s product. The platform’s continuous innovation and alignment with regulatory requirements have made compliance management much more efficient and effective for our organization.
- Leave a Comment |
- Mark review as helpful
Drata is a great GRC product!
What do you like best about the product?
Ease of adoption, configuration, use, and most importantly its overall effectiveness of monitoring and testing your complaince.
What do you dislike about the product?
No real downsides. One critique, would be perhaps slow your role on new feature development a tiny bit and make sure you spend sprint time on quality of life development for your every day users.
What problems is the product solving and how is that benefiting you?
Build, maintain, and monitor our compliance posture.
Excellent for startups
What do you like best about the product?
Drata acts as your virtual compliance officer. I'm really the last one to naturally be handling compliance- but as a startup we all have to branch out. Drata steps in to have my back and help me to be as conscientious as the product deserves.
Customer success management has been exemplary from Drata- in particular, working with Elizabeth John, whose patience, diligence, and industry knowledge have been mission-critical to our process. Drata is a great tool, don't get me wrong, but I still think my team and I would be coming up short without her.
When Drata was recommended to me, I was skeptical. I'd come from heavily regulated industries and just couldn't believe a tool could make compliance and certification very easy. It's a hard job, and it requires hard-headed persistent effort and rigor. While all that is still true, Drata made it so that a "cowboy" like me could get the job done.
I am in Drata almost every day. It integrated with our stack almost seamlesssly (we use Vercel, so that is still TBD for integration). Implementation was honestly a breeze once we got our IDP straightened out.
Customer success management has been exemplary from Drata- in particular, working with Elizabeth John, whose patience, diligence, and industry knowledge have been mission-critical to our process. Drata is a great tool, don't get me wrong, but I still think my team and I would be coming up short without her.
When Drata was recommended to me, I was skeptical. I'd come from heavily regulated industries and just couldn't believe a tool could make compliance and certification very easy. It's a hard job, and it requires hard-headed persistent effort and rigor. While all that is still true, Drata made it so that a "cowboy" like me could get the job done.
I am in Drata almost every day. It integrated with our stack almost seamlesssly (we use Vercel, so that is still TBD for integration). Implementation was honestly a breeze once we got our IDP straightened out.
What do you dislike about the product?
Their onboarding partner system wasn't great- but my understanding is that they've done away with that pipeline and brought onboarding in-house. This was a brilliant move. Communication and accountability are so through the roof now that I am the the one letting THEM down more often than not.
What problems is the product solving and how is that benefiting you?
The entire certification process is being handled in Drata.
Drata at Intelcom
What do you like best about the product?
From the initial discovery call, throughout onboarding and continuing to biweekly calls with the different Drata representatives who've been assigned to the Intelcom account (all of whom are experienced and supportive) my experience has been excellent.
What do you dislike about the product?
I have nothing negative to say about Drata.
What problems is the product solving and how is that benefiting you?
Although my company has not fully onboarded all facets, the tool helped me to prepare for the company's SOC 2 Type 1 audit.
Simplifying our ISO27001 Journey with Drata
What do you like best about the product?
Drata has streamlined our ISO27001 compliance process with its user-friendly automation and integrations. It is a great intuitive platform that greatly reduces the manual workload involved in compliance. Its automation capabilities for policy drafting, evidence collection, and monitoring make the entire process much more efficient! Plus, their customer support is truly one of the best we've ever experienced – they're always there to answer any question, no matter how small, and go above and beyond to help.
What do you dislike about the product?
While Drata is an amazing tool overall, the readiness score can sometimes be a bit misleading. It can signal that we are fully prepared when certain controls still require manual evidence to be uploaded. It would be great if there was a clearer way to indicate where manual evidence is still needed, even after the platform shows those controls as “ready.” A more transparent alert system for this would make the process even smoother!
What problems is the product solving and how is that benefiting you?
ISO27001 Compliance
Makes compliance more understandable
What do you like best about the product?
Pre-built policies are a great starting point and have extensive notes about what could change and which parts are critical and should not be removed. For someone who is not familiar with compliance there's a lot of guidance and features that help understand where you are and what still has to be done.
What do you dislike about the product?
Integrations help make the whole process easier, and they have built many for the tools with the most market share. If you use less common tools you'll have to do more manual work. I'm sure that they will continue to build more integrations over time.
What problems is the product solving and how is that benefiting you?
Our customers are asking about SOC 2 compliance more and more frequently. Without any personnel specifically to address this, we need a platform to help make it feasible.
The most responsive support team I've met
What do you like best about the product?
Drata automates and handles most of our ISO and SOC needs across the entire governance and compliance space for our company. It's multiple features and ease of use have been instrumental in completing our certification audits for the past 2 years. Their support team is very responsive and I've even talked with their CISO regarding one issue we had which was almost immediately resolved.
What do you dislike about the product?
In the initial setup for identity it asked for a global admin credentials to be used to set things up. This is a massive risk for any company. However, through working through their team we found a solution that exercised the practice of least privileged access and met my business needs. Needless to say, we've been very successful since that implementation.
What problems is the product solving and how is that benefiting you?
We use Drata to cover all our basis. We've implemented utilities and policies that enable our business to maintain governance and compliance across the infrastructure.
Overall simple tool and user friendly but a larger amount of bugs
What do you like best about the product?
Drata does a really great job in being user friendly. I really like how the control mapping is done. The help center is also a helpful tool.
What do you dislike about the product?
Drata has been experiencing a lot of bugs such as having multiple policies. Integration and formatting is not the best for the policy center. Less customization.
What problems is the product solving and how is that benefiting you?
Drata is helping with maintaining audits centralized with features such as evidence library and control ownership.
The Drata team was an essential part of our SOC2 certification.
What do you like best about the product?
We have recently completed our first SOC2 Audit, and I honestly do not think we could have done this successfully without the Drata framework and support from Elizabeth John and Courtney Barton. The Drata system is user friendly and comprehensive. The Live chat feature is exceptionally helpful to navigate questions about the platform itself and compliance. We had a series of meetings set up with Elizabeth who helped guide us through the initial set-up process, and adding evidence to our controls. Each meeting was an effective working session. Elizabeth was always prepared, kept us on task and an essential part of our SOC2 journey! I would also like to highlight our account manager, Courtney, for consistently checking in to make sure our current needs were met, where we may be heading in the future and how we might be able solve pain points for future audits. I would highly recommend Drata to other companies working to build a robust security platform.
What do you dislike about the product?
Sometimes new policy templates were released, causing monitored controls to fail. It would be helpful to have a heads up on this so we would know what the failure was related to and act quickly.
What problems is the product solving and how is that benefiting you?
Helping us maintain the required evidence, policies and processes to obtain and maintain SOC2 compliance.
GRC engineering
What do you like best about the product?
Easy to use. Their on-demand support for platform questions is a great model. It is interactive and real-time.
What do you dislike about the product?
User Interface and Risk Management. The user interface isn't very friendly. Risk Register is pretty basic.
What problems is the product solving and how is that benefiting you?
Its monitoring your compliance controls in real time.
showing 41 - 50