Drata Reviews & Product Details

As a relatively small organisation, Drata has truly been a game-changer for us. Without a large compliance team, we have still been able to make steady progress toward our compliance goals, thanks to the platform. Working alongside a responsive auditing partner, we found the initial implementation straightforward and easy to get started with. The automation features for evidence collection and continuous monitoring have saved us countless hours of manual effort. We rely on Drata daily to ensure that any issues are promptly reported to the appropriate team and resolved quickly. We also value how smoothly it integrates with our core tools, such as AWS, Microsoft 365, and Intune, and how it offers clear dashboards and guided workflows that make preparing for audits much less stressful. Review collected by and hosted on G2.com.

The only real negative we’ve experienced is that support can sometimes be slower than we would like to respond. However, this has been more than mitigated by our highly responsive Customer Success Manager, who has consistently gone above and beyond to keep us moving forward. Overall, this balance has meant issues never become blockers. I wouldn't hesitate to recommend Drata to any organization. Review collected by and hosted on G2.com.

Drata provides a clear dashboard view of the frameworks we work towards, clear connections to controls, the capabilities of ownership and maintenance of our ISMS and risk management.

The supplier management section is also super helpful!

Implementation was easy and using the connections and integrations we were set up and running within two weeks.

The ability to be part of the roadmap and feedback to Drata using customer support really makes you feel part of a family.

When I log on to our system, Drata is one of the first applications I open and it stays with me all day. Review collected by and hosted on G2.com.

The downside of Drata for me personally, is that it is that efficient, the moment any part of ISMS falls out of review I see the percentage score drop and this messes with my OCD! Review collected by and hosted on G2.com.

Drata makes creating policies and following frameworks easy and straight forward. Security is necessary at all companies now and so many companies are trying to re-invent the wheel. Why? Drata gives you what you need to pass your audits and do it right, without trying to re-invent what security is. Its a one stop shop for security professionals to keep their companies in the green in all senses of the word. We will continue to use Drata and it will enable us to grow without worrying about if we are doing it right. We know we are because we use Drata. Review collected by and hosted on G2.com.

I wish there were even easier way to fill out the templates for the policies. Allow more boxes to fill in the "stuff" that matters to your company. Review collected by and hosted on G2.com.

Drata is very easy and intuitive to use, it saves a lot of intensive manual work, and we use if very frequently. The support is very responsive and fast, one of the best support teams we have dealt with. The implementation phase was also easy in terms of setting up the connections, integrations, and just kicking off the process. Drata supports a wide range of integrations too! Review collected by and hosted on G2.com.

Maybe one downside which is really specific is that there is no support for asset-based risk assessment, which is totally fine since there is a scenario-based risk assessment section that is well documented and supported and contains many features. Review collected by and hosted on G2.com.

Drata makes it much easier to stay on top of compliance tasks that would otherwise take countless hours. The integrations with cloud services and tools pull in evidence automatically, which saves time and reduces manual work. The dashboards and automated workflows give great visibility into what’s on track and what needs attention. Overall, it’s a strong system that helps streamline compliance. Review collected by and hosted on G2.com.

While the system is powerful, some areas can be confusing to navigate at first, and documentation isn’t always clear enough to answer every question. When reaching out to support, the response time can feel too long, which slows down momentum when you’re trying to resolve an issue quickly. Faster turnaround on support and more intuitive guidance in the platform would make the experience even better. Review collected by and hosted on G2.com.

The application truly provides a great template for GRC. Everything from personnel management, risk management, policy maintenance, framework compliance and access review is a standard feature within the application. It allows organizations to be as involved (or not) as they want. It also has easy to use integrations to multiple platforms.

Account management and support are also equally as important. Drata has both. Even with my organization's internal resource transition, our customer success manager Ben, was ready to assist with the plethora of questions any new user would have. He continually provided supplemental information via self-help links, and was quick to respond to questions via a call or email. The times that we had to involve support our success manager was involved until a resolution was found. Review collected by and hosted on G2.com.

The application is very expansive; it has a ton features. Greener organizations may find it difficult to understand how all the modules are interrelated. Review collected by and hosted on G2.com.

Drata is proactive, timely, and professional — whenever there’s a problem, help is never far away; the team is friendly and professional, the AI and human help options save valuable time, the well-structured management software is easy to implement and easy to use, I use it daily multiple times, and Drata is the best solution we’ve ever tried. Review collected by and hosted on G2.com.

I honestly can’t think of a single thing to dislike about Drata. Review collected by and hosted on G2.com.

I appreciate Drata’s setup process, which was quick and clear, with any issues resolved swiftly. I find the integration features particularly beneficial, as it automates many compliance checks. The compliance advisors chatbot is also a great help, providing quick answers when I have questions. Review collected by and hosted on G2.com.

Initially, I found it challenging to fully understand how the control framework and evidences were connected, which was confusing. Additionally, there seems to be inconsistency with the compliance adviser's chatbot responses. Sometimes it answers 'yes' to a question, and other times it says 'no' to the same question, which shakes my confidence in its reliability. I would like this function to be updated regularly to ensure it meets my needs accurately. Review collected by and hosted on G2.com.

I use Drata daily in my workflow and coming from legacy GRC platforms, the vision of multi-framework compliance testing is a no-brainer. I cannot count how many times I've said and heard phrases such as "minimize overlap" and "let's not retread ground" throughout my career. Drata is the first platform that's actually made me feel like these were more than platitudes, and more importantly, actually easy to implement! Drata's feature set is lean and targeted. There is no bloat and it cuts straight to the point.

Drata's integrations streamline and reduce tens of hours of manual evidence collection. When we encounter applications without pre-programmed integration, our support from Drata has been timely and knowledgeable in helping us navigate our options. I think it's valuable to hire former auditors who know the inside as guidance setters. Review collected by and hosted on G2.com.

Drada's default policy guidance seems to lean towards more is better. As a former auditor myself, I know that auditors can only judge you based on what you give them so I feel like Drata's approach of covering all corners is not the right strategy when dealing with external auditors. Review collected by and hosted on G2.com.

We really like the fact that it has several views on the controls, we also like that it is helping us get through SOC2 and ISO at the same time.

It was easy to rollout - everyone was good to go with one walk through (I found doing a 1x1 with Exec was easiest) Review collected by and hosted on G2.com.

When you leave a page, nothing is saved so you have to save your settings that you had already put in SOC/ISO(compliance) , readiness, etc. Super annoying. If you hit the back button on the browser, it will take you there, but if you have opened a lot of items - it takes forever Review collected by and hosted on G2.com.