External reviews
1,074 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Great database
What do you like best about the product?
Version control, reminders, ability to mass-mail to a department.
What do you dislike about the product?
The interface could be better. Would love to see structure for additional ISO standards.
What problems is the product solving and how is that benefiting you?
Security documents awareness across the organization.
Solid platform but not without some issues.
What do you like best about the product?
I think it is generally intuitive at a high level. UI is solid. Seems to have most of the features.
What do you dislike about the product?
Not super intuitive at the more granular level. No integration with some tools.
What problems is the product solving and how is that benefiting you?
Maintaining a record of our documents and folks acknowledging them. Also, providing some visibility into compliance status.
Streamlining SOC 2 Compliance with Clarity and Confidence
What do you like best about the product?
Drata has taken a complex, often burdensome process like SOC 2 compliance and made it manageable and clear. The continuous control monitoring gives our team real-time visibility into our compliance posture, which means we’re not scrambling last minute or relying on guesswork. Integrations with our existing tools were smooth, and the platform's automation features cut down on time spent chasing documentation. Their support team has also been highly responsive and knowledgeable, which matters when you're dealing with audits and deadlines.
What do you dislike about the product?
The initial onboarding felt a bit overwhelming, there’s a lot to configure and understand upfront. Some integrations required extra manual effort to get fully functional. Also, while the dashboard is generally intuitive, a few areas could use better UI feedback when something breaks or falls out of compliance.
What problems is the product solving and how is that benefiting you?
Drata solves the problem of manual, inconsistent compliance tracking. Before, we had to rely on spreadsheets and scattered documentation, which made it hard to maintain confidence in our audit readiness. Now, Drata automates most of that work, saving time, reducing risk, and giving us real-time visibility into our compliance posture. It also makes it easier to prove our security standards to customers and auditors, which supports our growth and credibility.
A system that greatly simplified the complicated SOC2 and PCI process.
What do you like best about the product?
We tried doing SOC2 compliance on our own, and it was a complicated mess and very confusing. Drata provides a well-defined structure to follow. We simply checked off each item gradually until our score was 100%. When the auditors came in, they had minimal questions.
What do you dislike about the product?
The downside is very minimal. When a compliance test fails, the instructions for resolution could be better.
What problems is the product solving and how is that benefiting you?
Drata has simplified the SOC2 and PCI compliance process.
Customer Support w/ terrious
What do you like best about the product?
Dratas framework comparison is excellent
What do you dislike about the product?
Unable to put more than one piece of evidence per artifact. Also tasks cannot be set to reset after completion
What problems is the product solving and how is that benefiting you?
Drata has enabled me to better maintain our compliance certifications and conduct training
Streamlined SOC 2 Audit and Great Customer Support
What do you like best about the product?
Automates and streamlines day-to-day security compliance efforts with easy implementation and usage.
Amazing customer support from timely account management, tech support, and policy support.
Makes the SOC 2 audit easy and stress-free!
Amazing customer support from timely account management, tech support, and policy support.
Makes the SOC 2 audit easy and stress-free!
What do you dislike about the product?
There is no HITRUST framework yet. But I hear it's coming next quarter.
Some of the automated integrations have been problematic (e.g., github, background checks, and HRIS updates). However, I've seen great improvement and responsive fixes from Drata over time. Quite pleased with the turn-around.
Some of the automated integrations have been problematic (e.g., github, background checks, and HRIS updates). However, I've seen great improvement and responsive fixes from Drata over time. Quite pleased with the turn-around.
What problems is the product solving and how is that benefiting you?
Automated monitoring rather than manual monitoring. Huge time-savings and cost-savings.
Real-time alerts while scaling a fast-growing SaaS company.
Personnel compliance is a breeze now!
Real-time alerts while scaling a fast-growing SaaS company.
Personnel compliance is a breeze now!
Excellent Platform
What do you like best about the product?
Being able to connect various monitoring solutions (M365, AWS, etc) to automate evidence collection.
What do you dislike about the product?
None that I can think of. It's very straightforward to use, and the people at Drata are extremely helpful.
What problems is the product solving and how is that benefiting you?
Working toward SOC II compliance, Drata helps organize tasks, ingest data from various platforms, and automates the collection of evidence.
Simplify and automate tedious tasks
What do you like best about the product?
Helps automate gathering audit artifacts.
What do you dislike about the product?
When session times out, sometimes the interface hangs without logging in at the drata.com homepage.
What problems is the product solving and how is that benefiting you?
Automation of gathering audit artifacts via API integrations. This helps us reduce the time spent completing audits.
Drata review
What do you like best about the product?
Features, Track all ISO/SOC2 progress in one platform
What do you dislike about the product?
Nothing as of now. Has potential to have more features
What problems is the product solving and how is that benefiting you?
ISO compliance, platform wide monitoring, vendor assessments, risk assessments, etc
Good product, some issues still to resolve
What do you like best about the product?
Overall feature set. The product has a lot to offer, when it's working fully.
What do you dislike about the product?
There are still "oddities" and unusual design decisions that are preventing me from rolling this out fully, and progress isn't moving as quickly as I'd like on tat.
What problems is the product solving and how is that benefiting you?
Framework compliance, client security audits, and vendor security assessments.
showing 51 - 60