Sign in
Sign in
Don’t have an account?
Sign up
Sign up
By clicking on the sign up button you accept our Terms of Use and confirm that you have read our Privacy Policy
Already have an account?
Drata Reviews
20 reviews
- 01 Is Drata any Good? My expert Review
- 02 Pros and cons from reviewers
- 03 Main features
- 04 How Drata compare to similar software?
- 05 Who is Drata best for according to our reviewers?
- 06 Drata Reviews
Start saving on the best SaaS
Secret has already helped tens of thousands of startups save millions on the best SaaS like Microsoft Teams, Google Workspace & many more. Join Secret now to buy software the smart way.
01 Is Drata any Good? My expert Review
I have used Drata for approximately eight (8) months and, without exaggeration, it has fundamentally changed my team's approach to compliance. We were manually tracking employee access review and security policy records within spreadsheets prior to implementing Drata for our SOC 2 audit. The automated tracking and evidence gathering capabilities that Drata offers are significant. Specifically, instead of having to scramble each quarter to take screenshots of our AWS configurations or log activity from GitHub, Drata tracks these on an ongoing basis in the background.
The feature that most impressed me was the ease at which I was able to provide evidence during our audit last month regarding our background checks as well as how we enforce MFA across various tools. This was something I was able to accomplish in a matter of minutes versus days as would normally be the case.
While the platform is far from perfect, I found the integration with our existing stack of Okta and Google Workspace to be seamless and to require very little configuration.
However, I do believe the platform has some areas for improvement. Initially, the setup process took longer than anticipated – approximately three (3) weeks – primarily due to the fact that we had to correct many inconsistencies in our own security practices before we could effectively use the platform. I also believe that the cost structure of the platform may be too high for smaller teams; however, the potential time-saving benefits of using the platform may outweigh those costs. Finally, I sometimes find myself contacting support to clarify how to implement specific controls based upon the compliance guidance provided by the platform.
In general, if you are working towards obtaining SOC 2 or ISO 27001 certification and you have sufficient funds available, I believe that Drata will significantly reduce your compliance burden and keep you audit-ready on an ongoing basis throughout the year.
02 Pros and cons from reviewers
Pros from reviewers
-
Automated Compliance Monitoring
Drata continuously monitors your security controls and compliance posture in real-time, automatically collecting evidence and identifying gaps to reduce manual audit preparation time by up to 200 hours per framework -
Streamlined Multi-Framework Support
The platform enables simultaneous compliance management for SOC 2, ISO 27001, GDPR, HIPAA and 15+ other frameworks from a single dashboard, eliminating the need for multiple tools and reducing complexity -
Pre-Built Integration Ecosystem
Drata connects seamlessly with 75+ popular business tools including AWS, GitHub, Okta, and Slack to automatically gather compliance evidence without disrupting existing workflows or requiring extensive technical setup -
Audit-Ready Documentation
The system generates comprehensive, auditor-friendly reports and maintains a centralized evidence locker that organizes all compliance documentation, making audit processes 70% faster and significantly less stressful -
Continuous Employee Training and Policy Management
Drata automates security awareness training, policy acknowledgments, and background check tracking while providing customizable policy templates that keep your team aligned with compliance requirements year-round.
Cons from reviewers
-
Steep Learning Curve
Drata's extensive compliance framework and automation features can be overwhelming for teams new to security compliance, requiring significant time investment to fully understand the platform's capabilities and properly configure it for specific organizational needs -
High Cost for Small Teams
The pricing structure can be prohibitively expensive for startups and small businesses with limited budgets, as the platform is primarily designed for mid-to-large enterprises with substantial compliance requirements and financial resources -
Limited Customization Options
While Drata offers comprehensive pre-built compliance frameworks, organizations with unique or highly specialized compliance needs may find the customization capabilities restrictive and unable to fully accommodate their specific regulatory requirements -
Integration Complexity
Although Drata supports numerous integrations, some users report challenges when connecting certain legacy systems or less common tools, potentially requiring additional technical resources or workarounds to achieve full connectivity -
Dependency on Third-Party Integrations
The platform's effectiveness heavily relies on its ability to connect with your existing tech stack, meaning any disruptions or limitations in supported integrations can significantly impact the continuous monitoring and compliance automation capabilities
Drata
Premium
Streamline compliance and maximize security.
30% off for 1 year
Save up to $11,400
03 Main features
Starting Price
Free Plan
Risk management tools
Audit-ready documentation
Customizable compliance frameworks
Access reviews
Automated evidence collection
N/A
Free Plan
No
Risk management tools
Audit-ready documentation
Customizable compliance frameworks
Access reviews
Automated evidence collection
Drata
Premium
Streamline compliance and maximize security.
30% off for 1 year
Save up to $11,400
04 How Drata compare to similar software?
Drata and OneTrust are respected players in the compliance and data privacy landscape, providing a wide range of tools to help organizations meet regulatory requirements and ensure data security. However, when deciding which platform best suits your needs, it’s essential to understand several key distinctions between them.
The primary difference lies in their core focus and the suite of features they offer. Drata specializes in compliance automation, making it a strong choice for companies aiming to achieve and maintain industry certifications like SOC 2, ISO 27001, and GDPR with minimal manual effort. It emphasizes automation, continuous control monitoring, and seamless integration with existing tech stacks, including cloud services, identity providers, and development tools, which helps companies streamline the audit process efficiently.
In contrast, OneTrust provides a more comprehensive suite of tools that span across privacy, compliance, governance, and third-party risk...
Drata
Used by 49 members
Streamline compliance and maximize security.
30% off for 1 year
Save up to $11,400
Sprinto and Drata are leading compliance automation platforms, each offering unique strengths that cater to different organizational needs. Understanding the differences between these two tools is crucial in choosing the one that best aligns with your compliance objectives and business model.
Sprinto is designed with a focus on automation and scalability, making it an ideal solution for fast-growing startups and mid-sized companies aiming to streamline their compliance processes. Sprinto excels in automating the entire compliance lifecycle, from continuous monitoring to automated evidence collection and reporting. It integrates seamlessly with popular tech stacks, allowing organizations to maintain compliance with minimal manual effort. Sprinto is particularly strong in supporting companies through rapid growth phases, where managing compliance manually could become cumbersome and error-prone. Its deep automation capabilities make it a preferred choice for teams looking to reduce the...
Drata
Used by 49 members
Streamline compliance and maximize security.
30% off for 1 year
Save up to $11,400
Sprinto
Used by 60 members
Security compliance automation platform
25% off for 1 year
Save up to $2,500
Drata and Vanta are two leading platforms in the compliance automation space, each catering to different business needs. Understanding their key differences can help you make an informed decision on which tool best aligns with your organization's goals.
One of the main distinctions between Drata and Vanta lies in their approach to automation and user experience. Drata is designed with a strong emphasis on continuous compliance monitoring and automation. It provides an extensive set of features that allow organizations to maintain ongoing compliance with frameworks like SOC 2, ISO 27001, and GDPR. Drata's platform automates evidence collection, real-time monitoring, and risk assessment, making it particularly suited for larger organizations that require a high degree of automation to manage complex compliance landscapes. Its integration capabilities with various cloud services and business tools further enhance its ability to provide a comprehensive compliance management solution.
In...
Drata
Used by 49 members
Streamline compliance and maximize security.
30% off for 1 year
Save up to $11,400
05 Who is Drata best for according to our reviewers?
-
Compliance Teams
Drata streamlines and automates compliance workflows, reducing the manual effort required to achieve and maintain SOC 2, ISO 27001, GDPR, and other security certifications through continuous monitoring and evidence collection -
SaaS Companies Seeking Certification
Drata accelerates the path to security compliance for growing SaaS businesses that need to demonstrate trust to enterprise customers, automating up to 75% of compliance work and reducing time-to-certification from months to weeks -
Security and IT Professionals
Drata provides real-time visibility into security posture across cloud infrastructure, enabling security teams to identify gaps, remediate issues quickly, and maintain continuous compliance without switching between multiple tools -
Finance and Operations Leaders
Drata reduces the operational burden and costs associated with compliance audits by centralizing evidence collection, automating reporting, and enabling teams to scale compliance efforts without proportionally increasing headcount -
Startups and Scale-ups
Drata offers an accessible entry point for emerging companies to establish enterprise-grade security practices early, building customer trust and unlocking enterprise sales opportunities that require compliance certifications as prerequisites
Drata
Premium
Streamline compliance and maximize security.
30% off for 1 year
Save up to $11,400
06 Drata Reviews
Drata rating
Drata Reviews
-
Devin Tillman
Transforming Compliance Journey
Drata has transformed our compliance journey for the better
November 23, 2024
-
Priscilla Bergstrom
Helpful Pre-Built Frameworks
The pre-built frameworks are extremely helpful for businesses like ours starting from scratch
November 18, 2024
-
Casper Ebert
Second-to-None Integrated Solution
Drata's fully integrated solution for compliance requirements is second to none
November 11, 2024
-
Omari Mayert
Efficient and Effective Compliance Management
We're impressed by the efficiency and effectiveness of Drata's compliance management
November 3, 2024
-
Lorena Douglas
Indispensable Tool for All Businesses
The platform is an indispensable tool for businesses of all sizes like ours
October 28, 2024
-
Edgardo Lubowitz
Perfect Business Alignment
The platform's innovative approach ensures perfect alignment with our business requirements
October 19, 2024
-
Bonita Trantow
Simplifying Regulatory Standards Navigation
Drata has made navigating the complexities of various regulatory standards a breeze
October 14, 2024
-
Eula Hodkiewicz
Robust Compliance Management Offers.
We highly recommend checking out the latest offers on Drata's platform for robust compliance management.
October 6, 2024
-
Wilfrid Medhurst
Extensive Network for Evidence Collection
We appreciate the extensive network that facilitates effortless evidence collection and control monitoring
September 28, 2024
-
Meghan Labadie
Centralized Compliance Management
The platform's ability to manage compliance tasks and documentation in one centralized location is a huge time-saver
September 22, 2024
Start saving on the best SaaS
Secret has already helped tens of thousands of startups save millions on the best SaaS like Microsoft Teams, Google Workspace & many more. Join Secret now to buy software the smart way.