Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Great Product, Great Support
What do you like best about the product?
Its hard to say which part I liked best:
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
1. Drata quickly took the process of getting a SOC2 from something unattainable for us non-GRC specializing mere mortals to a clearly defined project and steps. Having 0 experience in getting a SOC2 or any type of audit in the past, Drata made it dead simple. To the point that we are even exploring other audits and certifications.
2. For those rare cases that we had questions about the controls or the product, their support and compliance folks are super easy to talk reach and get a clear answer quickly - either directly in the Drata app or in Slack.
3. For something that connects to a bunch of infrastructure, it was fairly easy to get set up and get started.
4. A lof of policy templates came out of the box. If you know you need a certain internal policy, but not sure what it should include Drata comes with all the policies and contract templates you will need.
What do you dislike about the product?
At the time we tried it, their free trust center was not super configurable. So we ended up having to build our own trust center for our customers to find the current state of our security program and request security evidence.
What problems is the product solving and how is that benefiting you?
Drata brings in all of the evidence and data required to understand our security posture, provide evidence to auditors, and design controls that keep our employees, customers, and data safe with ample privacy protections for all.
- Leave a Comment |
- Mark review as helpful
Compliance, planning, monitoring, all in one
What do you like best about the product?
It's hard to pick just one feature, here are my favorites:
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
1. It took us 15 minutes to get our infrastructure connected
2. Monitoring gives useful, prioritized information
3. Policy building is well thought out
4. Customer Support Chat is responsive and very helpful
5. Easy onboarding, easy to use
6. Integrations options were exactly what we needed
What do you dislike about the product?
If you already have ISO management software for something Drata doesn't support, you can make a Custom Framework (which is great) but it takes a lot of effort to implement (which makes perfect sense). That said, all the security compliance needs are well thought out and super easy to use.
What problems is the product solving and how is that benefiting you?
We need to plan and consider a lot of things before launching a new Service to customers. Drata does a great job making a roadmap to follow to consider all the things we might not think about, but are really important.
How Drata saved me from going crazy.
What do you like best about the product?
Platform is easy to understand with great insight from their help sections, but the best thing was the consistent communication and insight from Elizabeth. She was terrific.
What do you dislike about the product?
I have not found a downside yet. We will keep looking.
What problems is the product solving and how is that benefiting you?
Drata is assisting us in our SOCII Certification. We are a relatively new start-up with no security compliance background. If a novice team can navigate the solution and get a SOCII report done, all the credit goes to Drata and their team.
Great platform for getting compliance certifications quickly
What do you like best about the product?
Provides pre-built templates for all required policies and controls for the common certifications. Comes with pre-built controls that helps track the current status of compliance with each requirement.
It's very simple to use and kept us organized when building the policies, implementing them, gathering evidence, and during the audits themselves.
It's very simple to use and kept us organized when building the policies, implementing them, gathering evidence, and during the audits themselves.
What do you dislike about the product?
Missing some features, specifically better customization in monitored tests and the Drata agent which verifies endpoint compliance.
I would like to have a tighter link between the policies and the controls. After setting up the initial policies, adding new frameworks is a bit more complex. It's hard to keep track of your policy changes compared to the standard template.
I would like to have a tighter link between the policies and the controls. After setting up the initial policies, adding new frameworks is a bit more complex. It's hard to keep track of your policy changes compared to the standard template.
What problems is the product solving and how is that benefiting you?
policy creation (templates), policy impementation, evidence collection including ongoing monitoring
Great tool for automating security compliance
What do you like best about the product?
The automation of evidence gathering and tight integration into our existing tech stack.
What do you dislike about the product?
When automated tests against specific pieces of infrstructure fail it can be hard to tell what drata is looking for in the testing.
What problems is the product solving and how is that benefiting you?
Drata helps us ensure that we can continually compliant against all the security and privacy frameworks we target and enables us to provide accurate, live updates to our customers on our security posture.
World Class Support
What do you like best about the product?
From my first conversation with Dylan, the sales development manager in the UK, to my ongoing success journey with Morgan, our CSM, who has been nothing less than fantastic, Drata has been and continues to be a company I love more and more. From an ease-of-use product to having passionate people behind the product who genuinely care for your success in whatever certifications you are attempting to achieve. The ease of implementation and integration enables me to use the platform frequently daily, knowing the number of features that contribute more and more before future audits. After a bad experience using a previous piece of software, Drata does everything and more to give me confidence that the company I work for will achieve our three main goals of ISO 27001, GDPR and SOC2.
You could have the most incredible piece of software in the world; however, without Morgan, who I am lucky to have as my Customer Success Manager, the software falls without its people. Drata has the people behind the product, and the passion shows with each interaction I have with them.
You could have the most incredible piece of software in the world; however, without Morgan, who I am lucky to have as my Customer Success Manager, the software falls without its people. Drata has the people behind the product, and the passion shows with each interaction I have with them.
What do you dislike about the product?
Dislike and Drata are not used in the same sentence. I am confident this will be the case today and the future.
What problems is the product solving and how is that benefiting you?
Drata is identifying where we are not compliant. Advising how to correct using it's fantastic automated software which is backed up by it's impressive people behind the product who understand but also take the time to educate the issue and solution.
Great Seamless Product
What do you like best about the product?
It covers all parts of an audit and not just pieces.
What do you dislike about the product?
Drata can be an expensive product but I think it is worth it.
What problems is the product solving and how is that benefiting you?
Drata is helping us achieve SOC2 certification without needing a dedicated hire for managing the certification.
World class product supported by a top-notch team
What do you like best about the product?
A holistic view of controls from multiple frameworks is very helpful. I also enjoy the benfits of automating the colelction of evidence. Even the Drata preffered auditor community has made preparing for upcoming audits easy and painless. Crazy easy to implement. Intergrations with other existing tooks minutes. Fantastic, real-time customer support. This is a tool I actually find myself using every day.
What do you dislike about the product?
The only item that was not "obvious" to me was how each control tied back to a control family. Guess what - they have a solution for that, too. In 2 hours i recevied a matrix from support identifying which controls are addressed within each policy.
What problems is the product solving and how is that benefiting you?
Cross-functional control ownership. Address controls from multiple frameworks. Automate evidence collections through integrations with existing tools. Also, its so easy to use that people across the organization are actually leveraging the tool - no shelfware here.
Solid product, great support and engagement
What do you like best about the product?
Drata is well laid out, and clear for the most part, and easy to maintain controls compliance and evidence.
What do you dislike about the product?
No major dislikes stand out. The few minor speed bumps are usually quickly ironed out by the Drata team once they are brought to their attention.
What problems is the product solving and how is that benefiting you?
It has allowed us to move from a disorganized mass of spreadsheets and documents to a very well organized and self-checking structure in Drata that makes it *much* easier to maintain and produce evidence for audits and compliance requests from customers.
Growing Compliance Platform
What do you like best about the product?
If you're implementing a new compliance program Drata will give you default policies that are impactful for a number of different frameworks and if you link your stack it will help you automate the monitoring of your services.
Compliance support is really good and knowledgeable.
I think on average I get an email a month about some new feature being released. Seems to be in active development.
Any issues I've run into I've dropped a message in the chat box and it gets resolved or followed up with a ticket.
Onboarding users and giving visibility into compliance status was a breeze.
Compliance support is really good and knowledgeable.
I think on average I get an email a month about some new feature being released. Seems to be in active development.
Any issues I've run into I've dropped a message in the chat box and it gets resolved or followed up with a ticket.
Onboarding users and giving visibility into compliance status was a breeze.
What do you dislike about the product?
Their trust page functionality is interesting but has a rather large footer advertising their service. I'm all for attribution but the star of the show should be the data a customer is looking for.
What problems is the product solving and how is that benefiting you?
I just wanted a place to manage my compliance program that isn't a series of spreadsheets. This technically meets that requirement.
Additionally:
- a very simple security training
- automated checks for infrastructure, hrip, and date tracker for when evidence or policies need an update
- centralized policy accepting for all staff, as well as a transparent portal for self-serving themselves to be compliant
- user onboarding/tracking for compliance status
- the notifications when a status changes is really helpful
Additionally:
- a very simple security training
- automated checks for infrastructure, hrip, and date tracker for when evidence or policies need an update
- centralized policy accepting for all staff, as well as a transparent portal for self-serving themselves to be compliant
- user onboarding/tracking for compliance status
- the notifications when a status changes is really helpful
showing 201 - 210