External reviews
1,116 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Centralizes Compliance Evidence, Needs Policy Sync
What do you like best about the product?
I like that Drata reminds us when to update and submit our evidence for the past 12 months. It's convenient to have one place to add all the evidence instead of having pieces stored in different locations. This organization makes it easier to refer back to the information submitted as evidence. The reminders are also helpful once the time to review the evidence is near. We have successfully integrated Drata with our other platforms like Office365, Jira, and Bitbucket.
What do you dislike about the product?
The audit option is a bit clunky as it's hard to differentiate who owns the control. In addition, we still need to double up on maintaining the policies. Once version in Drata and another soft copy we need to keep when it is required by our clients when we do proposals. Our Sales team will need access to the latest version. It took a while to fully understand what it did.
What problems is the product solving and how is that benefiting you?
I use Drata to assist with obtaining SOC2 Type 2 and HIPAA reports. Drata centralizes evidence submission, making it easier to refer back and providing reminders when updates are needed.
Efficient Compliance Management, Needs UI Enhancements
What do you like best about the product?
I appreciate Drata because it eases the management of our SOC2 (Type I) compliance. I like the control and evidence management features, which make it easy to track completed, pending, or in-process controls and tasks with related evidence. Additionally, the integration with our internal tools and applications for control monitoring and automation adds value to our workflow.
What do you dislike about the product?
Need more better user interface and evidence repository management. There's also scope for adding country or region specific cyber security and data privacy laws or rules as notified by respective governments.
What problems is the product solving and how is that benefiting you?
I use Drata for SOC2 compliance, easing compliance management by tracking controls and related evidence efficiently.
Transforms Compliance with Seamless Automation
What do you like best about the product?
I really appreciate how Drata transforms compliance from a stressful, manual process into a seamless, automated system that runs in the background, keeping me continuously audit-ready without slowing down my business. I find it most powerful when paired with other tools in our compliance and security stack due to its wide integration, eliminating the need to manually bridge gaps. I also find the initial setup straightforward thanks to its guided onboarding and Quick Start process.
What do you dislike about the product?
The main areas where Drata could improve are around customization, integration depth, and cost. I love its automation but often find limitations when workflows get complex.
What problems is the product solving and how is that benefiting you?
Drata solves compliance issues by automating evidence collection, continuous monitoring, and policy management. It replaces manual, error-prone processes, keeping me audit-ready without slowing down my business.
Efficient Compliance Management, Needs More Reporting options
What do you like best about the product?
I like Drata's simple login UX which makes onboarding users easy since they just need to go to the login screen and sign in with Google. The reporting feature is decent and allows me to track how many people are yet to install the agent. I also appreciate the ease of installing the agent software. The initial setup was fairly good, with simple integration of Google Workspace and Atlassian, and even though the integration with Hibob (HRIS) took a bit longer, Drata support was helpful in resolving this by providing the necessary third-party integration docs.
What do you dislike about the product?
More reporting options would be useful. More granularity with filters is needed; for example, I can filter by non-compliant devices, but I can't filter by a single non-compliant device-related item like a screen lock. Also, scheduled and saved reports are a must, which is missing currently. The initial setup with certain integrations like HiBob (HRIS) took a little longer because the guide we followed ended up missing a few steps. Eventually, Drata support helped by finding the third-party integration docs and forwarding them to me.
What problems is the product solving and how is that benefiting you?
Drata identifies security gaps, helps us start policies, and simplifies user onboarding with Google sign-in. Reporting shows agent installation status, and the agent is easy to install.
Outstanding Support and Policy Management Platform
What do you like best about the product?
This platform is excellent for monitoring and creating your policies, but what truly stands out is the helpfulness of their professionals.
What do you dislike about the product?
During the startup phase, you are likely to experience an overwhelming amount of information. The sheer volume can make the process feel far from intuitive.
What problems is the product solving and how is that benefiting you?
The platform ensures that I have all the necessary controls and the correct policies in place for our SOC2 and ISO27001 compliance.
Good for Vendor Management, Needs Better Integration
What do you like best about the product?
I like using Drata for vendor management and security reviews. The security review feature helps us in selecting vendors, which is quite valuable. Overall, Drata is good.
What do you dislike about the product?
I'm experiencing issues with Drata, specifically the chat feature which keeps throwing unexpected errors, making the survey process not valuable. The integration with Zip and Azure needs improvement.
What problems is the product solving and how is that benefiting you?
I use Drata for vendor management and compliance, especially through its Security review, which helps us in selecting vendors.
Comprehensive Compliance Tools with Real-Time Monitoring
What do you like best about the product?
Drata has so many tools to help with policy creation and real-time compliance monitoring. It's more that just a GRC tool, it provides live data when policy, process, and assets fall out of compliance so you can quickly reign them back in.
What do you dislike about the product?
There have been issues with rolling out new features. Support responsiveness has slowed lately, especially after the introduction of the chatbot.
What problems is the product solving and how is that benefiting you?
We are able to monitor all aspects of our internal and cloud infrastructure to ensure our employees are applying what we state in our internal policy. They also keep us up to date on any new changes to the frameworks we implement.
Simplifies SOC 2 Compliance with Ease
What do you like best about the product?
I like that Drata is easy to use and has great customer service. The evidence library is the feature we use the most, as it plays a big part in our SOC 2 compliance efforts, and it integrates with other features well. Drata itself was very easy to set up and continues to be easy to use, even though there was a learning curve because we were new to SOC 2 compliance.
What do you dislike about the product?
It seems that the automated testing is what gives us the most problems. At least once a year, there's kind of a significant problem with the automated testing that requires interaction with their support team.
What problems is the product solving and how is that benefiting you?
I use Drata to navigate the complexities of SOC 2 compliance, like implementing controls, creating policies, doing automated testing, and managing risks.
Streamlined PCI Management with Intuitive Ease
What do you like best about the product?
Drata has been incredibly easy to use—simple, intuitive, and very well designed. Their support has been outstanding. We were paired with an onboarding specialist who stayed with us for nine months during our first year and guided us all the way through completing our audit. Setting up Drata was straightforward, and the automated monitoring features worked well with just a bit of tuning for our environment. The workflows make it easy to manage controls, maneuver through the platform, and upload evidence. Overall, Drata has helped us stay extremely organized and efficient with our PCI compliance program.
What do you dislike about the product?
One area that could be improved is the level of detail provided within the control environment. Drata goes one or two layers deep, but for more complex compliance programs, it would be helpful if the platform went further into the nitty-gritty details. Another area is around certain automated monitoring features that rely on specific applications. Expanding support to a broader range of third-party tools would make the monitoring even more flexible and effective.
What problems is the product solving and how is that benefiting you?
Drata helps us manage the entire PCI process end to end. It keeps us organized operationally, from daily compliance tasks all the way through the audit cycle. The platform centralizes everything we need, streamlines evidence collection, and makes the audit process significantly more efficient. Overall, Drata removes a lot of manual effort and gives us structure and visibility, which saves time and reduces audit stress.
Outstanding Experience with This Software
What do you like best about the product?
Tracking and monitoring the controls and requirements to accomplish the targeted frameworks
What do you dislike about the product?
It takes some time to see the changes reflected in the application
What problems is the product solving and how is that benefiting you?
Tracking and monitoring the controls and requirements to accomplish the targeted frameworks
showing 1 - 10