External reviews
1,074 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Drata's smooth experience
What do you like best about the product?
Drata is very easy and intuitive to use, it saves a lot of intensive manual work, and we use if very frequently. The support is very responsive and fast, one of the best support teams we have dealt with. The implementation phase was also easy in terms of setting up the connections, integrations, and just kicking off the process. Drata supports a wide range of integrations too!
What do you dislike about the product?
Maybe one downside which is really specific is that there is no support for asset-based risk assessment, which is totally fine since there is a scenario-based risk assessment section that is well documented and supported and contains many features.
What problems is the product solving and how is that benefiting you?
Drata is helping us with getting certified in SOC2, ISO27001, and GDPR. It's helping us with policy writing, control mapping, framework understanding, risk assessment, asset inventory, vendor management, awesome integrations, and automated monitoring of controls as well as giving us a dashboard to measure our progress.
Great GRC platform
What do you like best about the product?
Intuitive interfaces that are easy to use
What do you dislike about the product?
Nothing at the moment. Its a solid tool,
What problems is the product solving and how is that benefiting you?
holistic GRC automation
Fantastic platform and even better CSM!
What do you like best about the product?
We really like the fact that it has several views on the controls, we also like that it is helping us get through SOC2 and ISO at the same time.
It was easy to rollout - everyone was good to go with one walk through (I found doing a 1x1 with Exec was easiest)
It was easy to rollout - everyone was good to go with one walk through (I found doing a 1x1 with Exec was easiest)
What do you dislike about the product?
When you leave a page, nothing is saved so you have to save your settings that you had already put in SOC/ISO(compliance) , readiness, etc. Super annoying. If you hit the back button on the browser, it will take you there, but if you have opened a lot of items - it takes forever
What problems is the product solving and how is that benefiting you?
Help us get to SOC2 and ISO compliance. The templates in the Policies were fantastic! Really saved us a lot of time
Great platform with a ton of features and excellent account management
What do you like best about the product?
The application truly provides a great template for GRC. Everything from personnel management, risk management, policy maintenance, framework compliance and access review is a standard feature within the application. It allows organizations to be as involved (or not) as they want. It also has easy to use integrations to multiple platforms.
Account management and support are also equally as important. Drata has both. Even with my organization's internal resource transition, our customer success manager Ben, was ready to assist with the plethora of questions any new user would have. He continually provided supplemental information via self-help links, and was quick to respond to questions via a call or email. The times that we had to involve support our success manager was involved until a resolution was found.
Account management and support are also equally as important. Drata has both. Even with my organization's internal resource transition, our customer success manager Ben, was ready to assist with the plethora of questions any new user would have. He continually provided supplemental information via self-help links, and was quick to respond to questions via a call or email. The times that we had to involve support our success manager was involved until a resolution was found.
What do you dislike about the product?
The application is very expansive; it has a ton features. Greener organizations may find it difficult to understand how all the modules are interrelated.
What problems is the product solving and how is that benefiting you?
Policy maintenance
SOC2 audit repository and guidelines
Vendor Management
Risk Management
Personnel Compliance Management
SOC2 audit repository and guidelines
Vendor Management
Risk Management
Personnel Compliance Management
Great product and support
What do you like best about the product?
Audit readiness and allows our auditors to collect via tool.
What do you dislike about the product?
Doesn't have a connector for all of our data sources like Paycom
What problems is the product solving and how is that benefiting you?
Audit readiness. It is helping us collect and verify audit requirements and keping us up to date.
Great overall experience with Drata
What do you like best about the product?
Ease of use and automation. Ease of implementation. Customer support is very responsive and timely with follow up.
What do you dislike about the product?
Some manual entry required depending more on business practices and limitations with applications.
What problems is the product solving and how is that benefiting you?
Creates automation experience around execution of multiple compliance frameworks.
Complete and Organized Solution
What do you like best about the product?
It is built to help you get compliance done. You rarely feel uncertain about what to do next, and the support is great.
What do you dislike about the product?
Nothing honestly. When I find gaps they close them quickly
What problems is the product solving and how is that benefiting you?
Security compliance and demonstrating that to our clients
Review For Drata
What do you like best about the product?
The Ease of use , the interface is user friendly and the support team is the best
What do you dislike about the product?
I did not find anything which I not like in Drata
What problems is the product solving and how is that benefiting you?
All of our compliance issue
Great Experience
What do you like best about the product?
Drata helps organize all your documentation like a dream. Theres a ton of time saved figuring out related controls. The integrations make tracking changes much easier. I have used this platform everyday for the past few months preparing for our PCI compliance audit. After all the initial heavy lifting I can see that huge amount of burden relief this product offers its clients.
What do you dislike about the product?
There are some features that feel lacking such as, no way to track requirements that are in progress state in the midst of an audit in audit hub.
What problems is the product solving and how is that benefiting you?
Drata helps monitor realtime environment compliance.
Exceptional Compliance Support & Automation
What do you like best about the product?
Drata has been a game-changer for our compliance program. From seamless evidence collection to real-time monitoring of control effectiveness, it’s given us back hours each week. Integrations with Jira, AWS, and other tooling mean everything just “talks” to Drata without extra effort. Their dedicated compliance support team has been outstanding, providing tailored guidance, swift responses, and deep expertise at every turn. You also get a glimpse into what's coming and can submit suggestions for features in the portal.
What do you dislike about the product?
Its built-in control templates aren’t always flexible enough for fully bespoke workflows, and integrations with niche or legacy systems can require manual workarounds.
What problems is the product solving and how is that benefiting you?
Drata addresses the headache of scattered, manual evidence gathering by automatically pulling configuration snapshots, user access logs, and policy attestations from your tech stack; it eliminates the risk of compliance drift by continuously monitoring control health and flagging deviations in real time; and it streamlines audit preparation by organizing all artifacts and mapping them directly to relevant PCI DSS requirements. As a result, we spend far less time chasing down screenshots or spreadsheet entries, gain clear visibility into our compliance posture at any moment, and enter audits with confidence—knowing that our controls are both documented and functioning as intended.
showing 1 - 10