External reviews
External reviews are not included in the AWS star rating for the product.
Great Features but Mediocre UX
What do you like best about the product?
Drata has a big range of features and covers a lot of usecases for us. Also, the integrations that exist are relatively easy to integrate.
What do you dislike about the product?
There are two downsides to Drata, in my opinion:
1) User Experience
The UX of the product is okay, but it's not great. There are multiple smaller paper-cuts: The UI is overall a bit slow, frequently presenting loading spinners. Controls/Monitors have individual URLs, but unfortunately when shared they get removed. I.e. even if I send a colleague a link to a specific /control/123 they will get redirected to all controls instead of the specific one.
2) Integration Limitations
The default integrations that come with Drata are a bit limited, e.g. we still haven't been able to connect a vulnerability scanner into Drata, as it comes with 14 different options by default and we use none of them. That's always an issue with these integration platforms, but it's not clear to us yet how we could build a manual API integration for this feature.
1) User Experience
The UX of the product is okay, but it's not great. There are multiple smaller paper-cuts: The UI is overall a bit slow, frequently presenting loading spinners. Controls/Monitors have individual URLs, but unfortunately when shared they get removed. I.e. even if I send a colleague a link to a specific /control/123 they will get redirected to all controls instead of the specific one.
2) Integration Limitations
The default integrations that come with Drata are a bit limited, e.g. we still haven't been able to connect a vulnerability scanner into Drata, as it comes with 14 different options by default and we use none of them. That's always an issue with these integration platforms, but it's not clear to us yet how we could build a manual API integration for this feature.
What problems is the product solving and how is that benefiting you?
Drata helps us track our compliance against a wide range of controls. We are using Drata's automation features to reduce the burden on our employees.
- Leave a Comment |
- Mark review as helpful
Drata for SOC2
What do you like best about the product?
Great support team who does a great job answering questions about Drata product and compliance-related controls.
Product is easy to use.
Product is easy to use.
What do you dislike about the product?
Missing the feature to acknowledge company policies annually for every personnel. As an alternative, I have to create new policy versions every year and ask everyone to acknowledge the new versions, even if they just acknowledge the old version recently.
It will also be great to have a compliance owner rotation feature instead of just specifying a single owner for each control. Then every week there could be a separate person to receive notifications of compliance tasks.
It will also be great to have a compliance owner rotation feature instead of just specifying a single owner for each control. Then every week there could be a separate person to receive notifications of compliance tasks.
What problems is the product solving and how is that benefiting you?
SOC2 controls and auditing
HIPPA and GDPR controls
HIPPA and GDPR controls
Takes a little time to have a real person assigned but once they are they're quite responsive
What do you like best about the product?
If all relevant info is linked to a control Drata can easily tell you if you're compliant
What do you dislike about the product?
That controls are split out to Drata's DCF controls - these didn't map well our audit schedule and meant increased work to get through an internal audit
What problems is the product solving and how is that benefiting you?
One place of truth for internal audits
Drata makes evidence management straight-forward in a central management interface
What do you like best about the product?
Drata is the best tool my team and I have found for gathering and managing evidence in a central location. We have to gather and herd tons of information, so having one simple, central place to do it is crucial for us. Customer support is also well-executed at Drata. They're very helpful and responsive.
What do you dislike about the product?
It doesn't support all the connections I would like it to have, but despite that, it's still the best option for us.
What problems is the product solving and how is that benefiting you?
Drata is giving us a place to track and manage our efforts to become compliant, and it's making it easier for us to collaborate and maintain a huge amount of information.
Great platform to manage compliance to multiple framework.
What do you like best about the product?
Consolidation of controls aligned to various frameworks make audit easy and efficient. It really helps in building efficient and accurate process for monitoring controls. Continuous monitoring through integration is very helpful to identify & mitigate vulnerabilities. CSM support was great throughout the onboarding and transition process. @Elizabeth John
What do you dislike about the product?
There is still scope of improvement on Risk Management component.
What problems is the product solving and how is that benefiting you?
It helps in reducing repetitive work for multiple frameworks and various controls are mapped together.
Drata makes compliance easy
What do you like best about the product?
We use Drata for SOC2 and GDPR compliance. It tells you everything you need to do and monitors it continuously. I don't have to think about it on an ongoing basis. They are also very responsive in the chat if you have any questions. It also makes our audits easier, most of the information is available to the auditors so we don't need to produce much documentation.
What do you dislike about the product?
For GDPR, it was a little unclear how to get started, but we chatted with them and that helped a lot. Now that we are set up, it's easy.
What problems is the product solving and how is that benefiting you?
Solves SOC2 and GDPR compliance
The tool makes compliance much easier!
What do you like best about the product?
The chat support takes a bit to get used to - most engineers are quick to want to chat with someone live or read docs.... however, having a human on the other end making a quick turnaround with more nuanced support really helps. The AI chatbot helps as well.
What do you dislike about the product?
Some of the checks aren't always straight forward to determine why something failed and how to fix it. Sometimes/many times this is because of different implementations for the check details and/or exclusions.
What problems is the product solving and how is that benefiting you?
It's providing a way for us to see our estate and status and health - and (working towards) making it so that we can keep this running with minimal effort AND provide critical data to auditors and customers (as needed).
Awesome and quick work
What do you like best about the product?
How fast support will jump on an issue when it's brought to their attention.
What do you dislike about the product?
Sometimes it can take a bit of time and constant communication to resolve more complex issues.
What problems is the product solving and how is that benefiting you?
Drata helps us stay in compliance.
Drata support - quick and efficient
What do you like best about the product?
It makes vendor risk assessments easy from start to finish. Can't wait to see what else it can do.
What do you dislike about the product?
I have not run into any dislikes as of yet.
What problems is the product solving and how is that benefiting you?
Ensuring that our vendor risk assessments get completed and on a review schedule.
Drata is an excellent compliance platform
What do you like best about the product?
Drata is really handy for things like 27001 compliance as it walks you through the process initially, and then monitors your platforms to ensure ongoing compliance. You get notifications of things like controls that are not ready and it's generally pretty straightforward to dig down to find what's causing it, and then fix it.
The support staff at Drata are very helpful and always prompt to respond and were able to answer a number of complicated compliance questions for us as we went through the process.
The support staff at Drata are very helpful and always prompt to respond and were able to answer a number of complicated compliance questions for us as we went through the process.
What do you dislike about the product?
The main downside of Drata is that you have a continuous insight into your compliance status so you know immediately if you're not passing - nothing gets the chance to get swept under the rug.
What problems is the product solving and how is that benefiting you?
Drata helps ensure that we are up-to-date with our security stance.
showing 21 - 30