External reviews
External reviews are not included in the AWS star rating for the product.
Drata helps us to automate the security checks in our company
What do you like best about the product?
On Drata, the most useful thing is the possibility of seeing the status of the various security checks in real time. Coupled with Drata's automation and a simple and efficient web interface, it is also a great pleasure to use the tool everyday.
What do you dislike about the product?
One thing that could help us even more on Drata is the possibility to configure a period for the onboarding of new employees. Because right now, onboarding new employees can take several days and therefore some checks can fail during this time.
What problems is the product solving and how is that benefiting you?
Drata helps us both to understand and follow all that must be done to pass and validate our certification (for us SOC2) but also to automate all this (and therefore save us time), moreover the tool is useful to us as an alert system when something is not being done as it should.
- Leave a Comment |
- Mark review as helpful
Drata gives our small business a clear path to SOC 2 compliance
What do you like best about the product?
Getting certified for SOC 2 is daunting, and as a software startup we do not have the expertise to get there on our own. Drata presents a checklist of what I need to tackle, saving me a ton of time researching and planning, so I can focus on the execution. I feel very confident in our ability to achieve certification, and don't think we'd be able to achieve it without Drata.
What do you dislike about the product?
There's not a lot to dislike. Drata hooks into our systems and imports most of our data automatically. One improvement that would save me some time is if Drata maintained Risk Assessment information on vendors, so I don't have to track down vendors SOC2 reports, or other data collection activities.
What problems is the product solving and how is that benefiting you?
We are working on SOC2 type 1 and type 2 certification. Having a discrete list of things I need to tackle to get us there has been critical to the progress we've made so far.
Recommendations to others considering the product:
There's other competitors out there, but after doing our own research and speaking with a few of them we went with Drata, and I'm very glad we did. It's been a great experience the whole time.
Compliance without infinite spreadsheets
What do you like best about the product?
Automatic monitoring and reporting for auditors in Drata have accelerated our audit a great deal. The staff at Drata have been instrumental in our success. In particular, working sessions with CS have helped us a great deal with prep for our audit, our account manager has been a great accountability partner, and Drata's compliance specialist has been able to weigh in with expert opinions where we're not quite sure about things.
What do you dislike about the product?
Lots of clicking to scope things in and out, where traditional methods would have included conversations with auditors about scoping Drata is pretty opinionated and requires scope to be deliberately in or out for all items. Programmatic vs Human interaction is really the crux of this and I don't have constructive feedback or know how this could go any other way with any other tool.
What problems is the product solving and how is that benefiting you?
We don't have a full time privacy/security officer. This is a big difference from my past experiences, and a huge win that Drata can fill that gap in many ways for us.
Recommendations to others considering the product:
Drata is great. Highly recommended.
So far, Drata has surpassed our expectations!
What do you like best about the product?
We're a software and data quality assurance company so we're pretty picky about the tools we use. It's clear that the Drata development team had their customers in mind when they built the product. The navigation is intuitive and the UI is aesthetically pleasing. It's been really easy to use so far and we're really happy with it. What we didn't realize when we decided to go with Drata was that we'd be getting a whole lot more than just a tool. From the beginning, we've had outstanding, personalized support as we work towards SOC 2 certification. Our friendly and knowledgeable support team, Nick and Rick, have been fantastic! They've helped us to refine the scope for our organization and have been there at every step to provide detailed guidance on anything we've needed. The combination of a solid tool and great support has made an ordinarily stressful and complicated process, smooth and easy so far.
What do you dislike about the product?
It would be great if there were a few more features to make internal collaboration even smoother when getting started (e.g. the ability to search & filter comments when communicating back and forth within our team about policy edits would be very handy).
What problems is the product solving and how is that benefiting you?
We're working towards SOC 2 certification and Drata has made the process so much easier. We always know what the next steps are and are easily able to make progress towards our security goals without having a dedicated security team.
Strong Compliance Platform
What do you like best about the product?
Easy to use, simplifies an otherwise complex process, and the support team is great.
What do you dislike about the product?
Integrations are a little lacking (ex. Slack notifications if a test fails for faster responsiveness), but this is on their roadmap.
What problems is the product solving and how is that benefiting you?
We are working through SOC 2, Type 1 & 2. The software provides an overview of the requirements of SOC 2 and allows us to easily monitor progress. This has helped us move faster and more efficiently.
Recommendations to others considering the product:
Make sure to not discount the value of Drata's support team. They make life a lot easier, and you will need them once you start on your compliance journey (regardless of the framework).
Drata as been seamless
What do you like best about the product?
Very intuitive UI, it was a fast learning curve to figure out what needed to be done, especially being new to SOC2 compliance.
What do you dislike about the product?
This more so pertains to the designated auditor. There's a lot of repeat work sometimes, depending on the auditor you choose. There could be some workflow efficiencies when navigating from Monitoring, Fixing Controls, Controls, and filtering for Control ownership from the Monitoring section.
What problems is the product solving and how is that benefiting you?
SOC2 compliance was a guided process when using Drata. Financially, it's around the same ballpark when comparing other services. However, Drata's demo was the best and it seemed best in class from a product UX standpoint.
Streamlined our security compliance program
What do you like best about the product?
Drata is easy to use for both employees as well as those who are managing the security program. The integrations with AWS, Jira, Google, GitHub, HiBob and Certn helped us save a lot of time in managing our compliance program. Drata offers a wide range of trusted partners such as auditors, penetration test providers, etc.
What do you dislike about the product?
Nothing much. As an early customer of Drata we have seen a lot of improvements in the platform over the last two years.
What problems is the product solving and how is that benefiting you?
Drata helped us turn the complex process of SOC 2 into a streamlined process. Drata not only increased our customers' confidence in using our product but also helped us close more opportunities at a faster rate.
Amazingly easy to setup combined with top notch customer support
What do you like best about the product?
The thing I like the most about Drata is the customer support they offer. Any issue we've faced we've been able to solve with the help articles they make readily available.
What do you dislike about the product?
The only issue we've come across is that some of the privacy and processing integrity controls are automatically monitored by Drata and that wasn't super clear (at least to me) on initial setup
What problems is the product solving and how is that benefiting you?
We have been able to handle our SOC2 audit with a very minimal about of people. This has allowed us to save a lot of money and time when it comes to hiring personnel, or borrowing them from their normal day to day job.
Recommendations to others considering the product:
I think this tool could help anyone - especially small-medium-sized companies.
Automated, Helpful Tool for Compliance
What do you like best about the product?
Drata has been very helpful with keeping records of our staff compliance needs and which areas are outstanding for which staff members. I also really like the helpful articles and great customer support offered - thanks Alex!
What do you dislike about the product?
It's a helpful tool if you use it right. We are still learning how to utilize all of the available features so we are making the most of this investment
What problems is the product solving and how is that benefiting you?
SOC2 compliance. We are able to keep our audit evidence in one place and get automated tests run so we can know quickly if something has fallen behind.
DevOps Tech Lead and DPO
What do you like best about the product?
One of the best platforms I have ever used. Everything is so smooth and easy to understand. Help from Drata's employees is out of this world. Definitely makes achieving compliance readiness an easy and enjoyable process.
What do you dislike about the product?
To be honest there is nothing so far that I dislike!
What problems is the product solving and how is that benefiting you?
Drata helps us at automating our SOC 2 compliance.
Recommendations to others considering the product:
Schedule a demo with Drata! They will explain everything and after that, there will be no doubt if choosing them is the right choice!
showing 791 - 800