External reviews
1,121 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Drata is streamlining our SOC2 adoptation
What do you like best about the product?
I like that Drata comes with a workstation agent, giving autonomy and responsibility to every employee, cementing security into the organization because people are confronted with the matter every week. It helps me in raising security awareness without impeding anyone. Working with Gabe has been great so far; responsive, fast and has adequate follow-ups, cutting straight to the point.
What do you dislike about the product?
After the onboarding, we encountered a couple of issues requiring additional integration access. In and by itself, that's fine, but some fine-tuning in the onboarding would be desired for future customers. The Risk Assessment was not that; it was more like a control assessment, and the former has since been introduced as s a paid-for add-on.
What problems is the product solving and how is that benefiting you?
We are going for a SOC2 Type 2 audit for our SaaS platform and software development. We are using Drata to understand what we need to get done before kicking off the audit process. Our software product allows our customers to connect systems and transport data that they may consider sensitive. In addition, many customers have asked us for our security procedures and certifications. Although already having a certified ISO27001 ISMS, SOC2 seemed required to continue growing our business. On top of that, it is a great setup to centralize our (chain of) evidence instead of having this spread out all over our "document storage method", even more so because Drata takes away much of the redundancy between ISO27001 and SOC2 (one piece of evidence can be used for both frameworks).
Strong Customer support from Drata
What do you like best about the product?
The support team is always there to help, provide training and make sure integration with your systems and cloud tech is synced for SOC2 compliance.
What do you dislike about the product?
The policy updating structure could be more flexible.
What problems is the product solving and how is that benefiting you?
To prepare our organization to be SOC2 compliance and get approved with integration with our cloud and auditors.
Drat's always on compliance monitoring a great help
What do you like best about the product?
Drata is a great real time tool to monitor controls for compliance, providing a great snapshot at any point in time.
It is also useful when looking at new frameworks to understand where gaps may exist.
It is also useful when looking at new frameworks to understand where gaps may exist.
What do you dislike about the product?
Some connections to some tools are still being finalized and added, however many major SaaS applications are already built out,
What problems is the product solving and how is that benefiting you?
Monitoring compliance with various frameworks, notifying us of areas in need of remediation.
Great experiences so far
What do you like best about the product?
The platform is very user-friendly in helping us achieve our security posture goals. Also, the Help and Customer Success teams have been fantastic with attentiveness and resolutions.
What do you dislike about the product?
Customized notification times in Slack would be great, but that is a minor item. We would also love more IAM type features - viewing user lists and roles in Drata vs the applications, for example. But we know so many new features are coming as well, so that's another minor item.
What problems is the product solving and how is that benefiting you?
Drata is helping minimize the time manual monitoring tasks take by automating them. Now I have a checklist of items to review every morning instead of digging for them.
Easy-to-use product, great customer success management, the security cockpit of our company
What do you like best about the product?
* Easy-to-use product - clear guidance of what security and compliance controls are necessary
* Great customer success management - from the first onboarding call with Ali throughout our SOC2 audit, we always felt we had a reliable consultant on our side. Our audit and product questions were answered the same day.
* The system is the security cockpit and the security brain of our company - the right alerts, the right integration with our internal comms tools (Slack)
* Great customer success management - from the first onboarding call with Ali throughout our SOC2 audit, we always felt we had a reliable consultant on our side. Our audit and product questions were answered the same day.
* The system is the security cockpit and the security brain of our company - the right alerts, the right integration with our internal comms tools (Slack)
What do you dislike about the product?
Great to see more integrations are added on an ongoing basis.
What problems is the product solving and how is that benefiting you?
* The system is the security cockpit and the security brain of our company - the right alerts, the right integration with our internal comms tools (Slack)
* Helps us manage our audits with auditors
* Helps us manage our audits with auditors
Galactic level customer service
What do you like best about the product?
Drata encompasses a compliance audit, governance, and risk management solution that provides an easy-to-use setup. It's most helpful in reducing time inefficiencies. In the first month alone, we saved 50% of our time as it consolidated all our controls and monitoring into one place. Their CSM, Laci, is 2000% of amazing and I wish all other CSM contacts are like her. She is attentive, listens and takes our feedback into actionable items. Their customer service is amazing.
What do you dislike about the product?
Drata is still a new product in the market that is great for smaller companies. I believe, within a few months, they can service, enterprise customers in a mature manner, when they faithfully release their latest product updates related to (1) proper/deeper evidence classification, (2) access segregation and real-time viewing for auditors, (3) and allowing editing of compliance monitoring tools. It lacks deep customization into compliance audits. They are ahead of other GRC competitors, but some updates still need to be released. However, the shining light is their amazing customer success team who takes customer pain points and accomplishes fixes in accomplishable iterations. This is a key differentiator when purchasing a compliance GRC tool. The product in effect requires updates. Other GRCs....may fail by not innovating to continue servicing the customer.
What problems is the product solving and how is that benefiting you?
Tim inefficiencies, controls consolidation, governance and privacy.
Once you get started they make the process a cakewalk
What do you like best about the product?
The software is intuitive and the support is outstanding
What do you dislike about the product?
It's a an extremely powerful tool with a great responsive team. I still have to find what I dislike
What problems is the product solving and how is that benefiting you?
Soc 2 compliance and making the process smooth. Ensures we are compliant and gives us relevant notifications to take action
Compliance & Privacy Manager
What do you like best about the product?
The tool, by far, is more advanced than some other similar tools in the industry. But most importantly I love the account management part and having a contact to reach out to for support. Laci is absolutelty an amazing partner to work with.
What do you dislike about the product?
A few features like notification to the tool owner when evidence is uploaded so that it can be reviewed/ approved to meet control requirements.
What problems is the product solving and how is that benefiting you?
Right now, Drata is helping Cypress get ready for SOC 2 Type 2, so its extremely helpful to proactively manage evidence ahead of observation period. Ultimately Drata will help us measure compliance success in the long term.
The fastest way to a SOC2 compliance operation.
What do you like best about the product?
Drata has automated our compliance monitoring. It makes it easy to review all user compliance.
What do you dislike about the product?
That we didn't learn about Drata sooner!
What problems is the product solving and how is that benefiting you?
Compliance automation, user monitoring, policy automations, and much more.
Drata does the Hard Work for You
What do you like best about the product?
Puts the controls in one place and breaks them out in an easy to understand way. The various frameworks are selectable and you can ascertain where the overlap is.
What do you dislike about the product?
A work in progress. Some things are not quite in the right place and some of the automated cloud control tests need refinedment. The Drata agent does make asset management of endpoints simple.
What problems is the product solving and how is that benefiting you?
Staying in compliance when an attestation needs to be attained quickly. It makes the controls very concrete as to how they would apply in a modern IT environment.
showing 861 - 870