--- title: Drata Reviews meta_title: 'Drata Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 1337 reviews by the users' company size, role or industry to find out how Drata works for a business like yours. aggregate_rating: rating_value: 4.7 review_count: 1337 scale: '5' date_modified: '2026-08-13' parent_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Drata Reviews **Vendor:** Drata **Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance) **Average Rating:** 4.7/5.0 **Total Reviews:** 1,337 ## About Drata Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations. ## Drata Pros & Cons **What users like:** - Users commend the **exceptional customer support** from Drata, enhancing their compliance and security management experience. (135 reviews) - Users value the **intuitive design** of Drata, making setup and integration seamless and efficient for everyone. (115 reviews) - Users highlight the **automation of compliance monitoring** in Drata, significantly easing reporting processes and enhancing efficiency. (109 reviews) - Users value the **time-saving automation** of Drata, streamlining compliance tasks and simplifying audits significantly. (96 reviews) - Users value the **seamless integrations** of Drata, enhancing functionality by connecting various platforms effortlessly. (89 reviews) - Automation (78 reviews) - Users find Drata to be **simple to use and set up** , enhancing automation and support for audit processes. (77 reviews) - Easy Integrations (75 reviews) - Easy Setup (67 reviews) - Team Helpfulness (62 reviews) **What users dislike:** - Users find Drata's **limited integrations** frustrating, wishing for broader support for third-party tools and self-hosted versions. (43 reviews) - Users face **integration issues** with Drata, leading to a challenging transition and unexpected manual effort required. (38 reviews) - Users note that **configuration limitations** and complex transitions hinder a seamless experience with Drata. (35 reviews) - Users find the **lack of clarity** in Drata's UI can complicate the audit process and task management. (28 reviews) - Users find the **UX confusing at times** , making it difficult to identify missing tasks and necessary fixes. (22 reviews) - Limited Customization (20 reviews) - Policy Management (18 reviews) - Users find Drata’s services to be **expensive** , especially for startups looking for cost-effective compliance solutions. (15 reviews) - Lack of Customization (15 reviews) - Users desire **additional features** for formatting, better user interface, and more integrations for improved functionality. (15 reviews) ## Drata Reviews ### 1. Drata: Simplifying Your Compliance Journey **Rating:** 4.5/5.0 stars **Reviewed by:** Eric L. | Security Engnieer, Electrical/Electronic Manufacturing, Mid-Market (51-1000 emp.) **Reviewed Date:** January 15, 2025 **What do you like best about Drata?** Drata supports the most common compliance frameworks. It effectively translates compliance requirements into readable control items. Each control item consists of a set of tests that are defined with clear specifications. For example, if an organization wants to adhere to the compliance NIST CSF, personnel responsible for achieving compliance simply focus on the control items of target compliance that Drata organized. Some tests can be shared across multiple compliance frameworks! It is easier for them to implement other compliances more efficiently in the future. Secondly, the most impressive design is the capability of automated evidence collection. With easy configuration on integrations to popular platforms, it can save effort when collecting the evidence of control items. To manage the overall readiness of compliance continuously, Drata provides efficient monitoring of controls, the status of tests, and the integrity of essential evidence. It provides users with real-time status and benchmarks in the dashboard. That helps internal or external auditors to track progress, identify gaps, and demonstrate compliance to key stakeholders. Finally, when I was new to Drata in the beginning, the Drata support team consistently delivered effective solutions to customer issues. The experience of customer support really touched my heart. **What do you dislike about Drata?** The automated evidence-collection feature is a very productive design. However, it has both pros and cons. The limitations on integrations may become a burden if the target platform is not on the support list. Another thing that needs to be improved is the instructions for fixing the failed/error tests. Sometimes, I can not directly understand the root cause of the failed test. I hope the error information or solution instructions become more transparent or readable. **What problems is Drata solving and how is that benefiting you?** Readiness status: make the estimation on the progress of compliance adherence easier and more readable. Continuous monitoring: easy to track progress and identify gaps, minimize the risk of non-compliance and reduces the likelihood of costly audit findings. Automation on evidence: Drata automates many of the manual tasks associated with compliance, frees up valuable resource for the security team and product teams ### 2. Streamlined Compliance with Automated Evidence Collection **Rating:** 4.0/5.0 stars **Reviewed by:** Arther M. | Head of Information security, Telecommunications, Mid-Market (51-1000 emp.) **Reviewed Date:** January 29, 2026 **What do you like best about Drata?** I use Drata for my GRC program including ISO27001, SOC2, GDPR, and Cyberessentials. I appreciate having better visibility of my controls and risks all in a single console. I like the ability to integrate with my tech stack with automated evidence collection. I don't have to log into AWS and Google Workspace to check compliance as everything is visible from Drata connections. The automation of evidence collection for SOC2 is what made us switch from Rubiq. **What do you dislike about Drata?** The asset management module could be improved to generate a consolidated report. It currently doesn’t display device serial numbers and make, which are useful identifiers for an asset list. The serial numbers can only be seen when downloading a report for an individual, not for the entire company. I’d prefer Drata to have out-of-the-box modules like incident management to avoid purchasing a separate solution. Having an incident management report and a business continuity flow would greatly enhance Drata. Also, the integrations with Zoho Desk have been buggy since last year, and the issue remains unresolved despite logging a ticket about it. **What problems is Drata solving and how is that benefiting you?** With Drata, I have better visibility of my controls and risks on a single console. I also like the integration with my tech stack and automated evidence collection, which means I don't have to log in to AWS and Google Workspace to check compliance. **Official Response from Lizzie Higgins:** > Hi Arther! Thank you for the thoughtful and detailed feedback! We're thrilled to hear that Drata has provided you with improved visibility of controls and risks, along with seamless integration for automated evidence collection. We appreciate your feedback on the asset management module and the request for out-of-the-box modules like incident management. Your suggestions will be taken into account as we continue to enhance our platform. Please keep the feedback coming, and be sure to submit all your product feature requests to our team. Thanks again :) ### 3. From Manual Work to Automation: Why We Love Drata **Rating:** 5.0/5.0 stars **Reviewed by:** Artem T. | Chief Information Security Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** November 13, 2025 **What do you like best about Drata?** The most valuable feature for us is the continuous monitoring and real-time alerts, which provide reassurance that our controls are consistently effective. Drata also simplifies evidence collection and audit preparation, helping us save time and reduce the risk of errors. As a result, we are able to maintain compliance proactively and dedicate more attention to strategic security improvements instead of getting bogged down by administrative work. In terms of usability, the platform is highly intuitive and user-friendly, making it easy for even new team members to navigate and complete tasks. The implementation process was smooth and quick, thanks to clear instructions and minimal disruption to our existing workflows. Drata’s integration with our current tools and systems is seamless, which cuts down on manual work and keeps our data consistent across platforms. The customer support team is always responsive, knowledgeable, and eager to help, which greatly enhances our overall experience. We rely on Drata daily for monitoring and compliance activities, and it has become an essential part of our security operations. **What do you dislike about Drata?** It would be great to have more available integrations, for example with popular observability tools such as Grafana. **What problems is Drata solving and how is that benefiting you?** Drata has been instrumental in removing the complexity and manual work typically associated with maintaining compliance. By automating evidence collection, continuous monitoring, and control verification, it greatly reduces the time needed for audit preparation and helps minimize the risk of human error. This shift enables our team to dedicate more attention to strategic security initiatives rather than getting bogged down by repetitive administrative duties. Furthermore, Drata offers real-time insight into our compliance status, allowing us to proactively identify and address any gaps, which helps us maintain trust with both customers and partners. ### 4. Great Features but Mediocre UX **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.) **Reviewed Date:** March 18, 2025 **What do you like best about Drata?** Drata has a big range of features and covers a lot of usecases for us. Also, the integrations that exist are relatively easy to integrate. **What do you dislike about Drata?** There are two downsides to Drata, in my opinion: 1) User Experience The UX of the product is okay, but it's not great. There are multiple smaller paper-cuts: The UI is overall a bit slow, frequently presenting loading spinners. Controls/Monitors have individual URLs, but unfortunately when shared they get removed. I.e. even if I send a colleague a link to a specific /control/123 they will get redirected to all controls instead of the specific one. 2) Integration Limitations The default integrations that come with Drata are a bit limited, e.g. we still haven't been able to connect a vulnerability scanner into Drata, as it comes with 14 different options by default and we use none of them. That's always an issue with these integration platforms, but it's not clear to us yet how we could build a manual API integration for this feature. **What problems is Drata solving and how is that benefiting you?** Drata helps us track our compliance against a wide range of controls. We are using Drata's automation features to reduce the burden on our employees. ### 5. Streamlined PCI Management with Intuitive Ease **Rating:** 5.0/5.0 stars **Reviewed by:** Phil P. **Reviewed Date:** December 11, 2025 **What do you like best about Drata?** Drata has been incredibly easy to use—simple, intuitive, and very well designed. Their support has been outstanding. We were paired with an onboarding specialist who stayed with us for nine months during our first year and guided us all the way through completing our audit. Setting up Drata was straightforward, and the automated monitoring features worked well with just a bit of tuning for our environment. The workflows make it easy to manage controls, maneuver through the platform, and upload evidence. Overall, Drata has helped us stay extremely organized and efficient with our PCI compliance program. **What do you dislike about Drata?** One area that could be improved is the level of detail provided within the control environment. Drata goes one or two layers deep, but for more complex compliance programs, it would be helpful if the platform went further into the nitty-gritty details. Another area is around certain automated monitoring features that rely on specific applications. Expanding support to a broader range of third-party tools would make the monitoring even more flexible and effective. **What problems is Drata solving and how is that benefiting you?** Drata helps us manage the entire PCI process end to end. It keeps us organized operationally, from daily compliance tasks all the way through the audit cycle. The platform centralizes everything we need, streamlines evidence collection, and makes the audit process significantly more efficient. Overall, Drata removes a lot of manual effort and gives us structure and visibility, which saves time and reduces audit stress. ### 6. Audit-Ready Dashboard and Automation Save Us Time **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** November 13, 2025 **What do you like best about Drata?** It's always audit-ready: I can literally look at the dashboard and see our real-time compliance status for SOC 2 or ISO 27001. If a control fails, I get an alert immediately, not six months later during a review. Massive time savings: It has seriously automated 90% of the manual evidence collection. I no longer spend days or weeks before an audit compiling screenshots and documentation. The Audit Hub is a game-changer: When the auditor shows up, everything they need is centralized in one place. Communication and evidence requests are streamlined, which makes the entire audit process so much smoother and faster. **What do you dislike about Drata?** Limited Niche Integrations: We use a few niche tools, and Drata either doesn't have an integration for them or the pre-built connection is very limited in the evidence it can pull. This forces us back to the manual process for those specific controls, which defeats the whole purpose of the automation. Lack of Flexibility in Control Mapping: For standard frameworks (like SOC 2), it's great. But if your organization has unique workflows, internal policies, or needs a less common framework, customizing or mapping your controls to fit those needs can be rigid and challenging. It can feel like it's a "my way or the highway" platform. **What problems is Drata solving and how is that benefiting you?** The problem Drata solves is a huge one: It replaces the manual, fragmented, and panic-driven traditional approach to compliance (GRC) with a continuous, automated, and proactive system. Before Drata, preparing for an audit (like SOC 2 or ISO 27001) was a company-wide crisis. It involved: Manual Evidence Collection: Running reports from our cloud provider, HR system, ticketing system, and endpoint management tool. Point-in-Time Compliance: Knowing we were compliant only on the day we pulled the evidence. As soon as a setting was changed, we were blind again. Human Error and High Effort: Endless spreadsheets, copy-pasting, and chasing people for screenshots—all time that my security and engineering teams could have spent on actual security work ### 7. Effortless Compliance Automation with Seamless Integrations **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** November 11, 2025 **What do you like best about Drata?** Drata has taken what used to be a complex, manual process and turned it into a seamless, automated workflow. The integrations with HR systems, cloud providers, and security tools (like Google Workspace, AWS, and Jira) make evidence collection nearly effortless. I particularly love the continuous monitoring feature — it gives real-time visibility into control status and alerts when something falls out of compliance. The user interface is clean and intuitive, making it easy for both technical and non-technical stakeholders to navigate. The risk assessment and policy management modules are also well-structured, helping us align with auditors’ expectations without juggling multiple spreadsheets. **What do you dislike about Drata?** While the platform covers most use cases perfectly, some integrations (like HR background checks and certain people-data syncs) occasionally require reauthentication or manual validation. Their support team, however, is responsive and proactive in resolving such issues. **What problems is Drata solving and how is that benefiting you?** Drata has significantly reduced the burden of manual compliance work. Previously, tracking evidence, managing policies, and keeping controls up to date was a tedious process, often spread across multiple tools. With Drata, all of these tasks are now centralized and automated, from monitoring controls to collecting evidence. The reminders and real-time alerts make it much easier to keep up with compliance responsibilities, and the automation helps minimize errors and overlooked items. Overall, Drata keeps us organized, boosts our confidence, and ensures we are always prepared for audits without the usual stress. ### 8. Transforms Compliance with Seamless Automation **Rating:** 4.0/5.0 stars **Reviewed by:** Rahul S. **Reviewed Date:** December 18, 2025 **What do you like best about Drata?** I really appreciate how Drata transforms compliance from a stressful, manual process into a seamless, automated system that runs in the background, keeping me continuously audit-ready without slowing down my business. I find it most powerful when paired with other tools in our compliance and security stack due to its wide integration, eliminating the need to manually bridge gaps. I also find the initial setup straightforward thanks to its guided onboarding and Quick Start process. **What do you dislike about Drata?** The main areas where Drata could improve are around customization, integration depth, and cost. I love its automation but often find limitations when workflows get complex. **What problems is Drata solving and how is that benefiting you?** Drata solves compliance issues by automating evidence collection, continuous monitoring, and policy management. It replaces manual, error-prone processes, keeping me audit-ready without slowing down my business. ### 9. Drata Made SOC 2 Type 2 Simple with Easy Setup and Strong Integrations **Rating:** 5.0/5.0 stars **Reviewed by:** Jeremy M. | Director of IT, Mid-Market (51-1000 emp.) **Reviewed Date:** February 19, 2026 **What do you like best about Drata?** Drata simplified the process of attaining the SOC 2 Type 2 and works well with integrations. Easy to use, easy implementation, Good Support, its used every day, and has good features. **What do you dislike about Drata?** I wish it had more integrations as we have many **What problems is Drata solving and how is that benefiting you?** Drata helped us manage and attaining our SOC 2 Type 2 **Official Response from Lizzie Higgins:** > Thank you very much for the feedback! We love to hear that your team is using Drata daily to simplify your SOC 2 program. We are also so happy that the set up, integrations, and support were easy for you to use! ### 10. Cost-effective solution **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Translation and Localization | Mid-Market (51-1000 emp.) **Reviewed Date:** January 16, 2025 **What do you like best about Drata?** Ease of use, ease of implementation, ease of integration, Number of features, customer support. **What do you dislike about Drata?** Support for on premise solutions and limitations on custom integration. **What problems is Drata solving and how is that benefiting you?** GRC Tool used to help our company achieve SOC2 compliance. ### 11. Drata Makes Continuous Audit Readiness Easy with Real-Time Compliance Visibility **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** February 19, 2026 **What do you like best about Drata?** I like how Drata automates compliance and provides real-time visibility, making audit readiness continuous instead of manual and stressful. **What do you dislike about Drata?** Sometimes the UI can feel overwhelming, and certain integrations or customizations require more manual effort than expected. **What problems is Drata solving and how is that benefiting you?** Drata helps automate and streamline the SOC 2 compliance process by continuously collecting evidence, monitoring controls, and keeping us audit-ready, which saves time, reduces manual effort, and lowers compliance risk. **Official Response from Lizzie Higgins:** > Thank you so much for the helpful feedback. We're so happy that the real time visibility provided by Drata's continuous monitoring and evidence collection is reducing your compliance risk as well as your stress! ### 12. Great Features and Extraordinary Customer Support **Rating:** 4.5/5.0 stars **Reviewed by:** Serdar T. | Internal IT support Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** May 28, 2025 **What do you like best about Drata?** I really appreciated the video tutorials – even with a strong tech background, I found them helpful in understanding various Drata functions. https://help.drata.com/en/collections/9595024-welcome-to-drata . So the documentation is great and I really care about it. Also, Drata taught almost everything. this is really great. For example, there is an available sercurity awareness trainings and we can just enable it. The content is rich and enough **What do you dislike about Drata?** as far as I understand and read, one of Drata’s main goals is to automate controls, but unfortunately, our Background Check and MDM solutions are not currently supported or listed among the available integrations. I would have expected broader vendor support. Yes, Drata offers Drata agent. this is good and we can also provide That said, I’ve already submitted requests to enable integrations for our existing solutions. **What problems is Drata solving and how is that benefiting you?** There are many requirements for passing audits, and Drata helps consolidate everything into one centralized platform. You can manage users, assign and track security training, configure automated controls, and monitor compliance—all in one place. Without Drata, these processes become fragmented and difficult to manage. Additionally, we benefit from free customer support, which allows us to ask questions and get timely assistance when needed. ### 13. Great product and best support **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** April 04, 2025 **What do you like best about Drata?** Drata has provided a great platform to begin our ISO-27001 journey. There are so many aspects of this certification and Drata has simplified it in many ways. We had so many questions regarding the policies, etc. and Drata has helped us enormously. **What do you dislike about Drata?** The tool has some limitations- and one of the most annoying is the inability to store my list/filter settings in the controls, personnel, etc. We have so many people that for it to show only 20 items at a time is a waste of my time. Also, when I go to the controls, I sort by policy number, not alphabetical and I have to reset that *every* time I use the app. **What problems is Drata solving and how is that benefiting you?** It's a one-stop for us to write the policies, have personnel acknowledge those, has security awareness training, and maps tasks/evidence to the policies via controls. This makes is so much easier to work through the requirements for ISO-27001. On top of it, it's very easy to see where we are missing something. ### 14. Drata has streamlined our compliance process with great support and onboarding. **Rating:** 4.5/5.0 stars **Reviewed by:** Shireen T. | AI Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 22, 2025 **What do you like best about Drata?** Drata has been a valuable tool in simplifying our compliance and security processes. The onboarding experience was smooth, and their customer support has been consistently responsive and helpful. The overall experience has been positive, and I would definitely recommend Drata to others looking to streamline their compliance efforts. **What do you dislike about Drata?** While most integrations work well, a few didn’t fully meet our expectations. **What problems is Drata solving and how is that benefiting you?** Drata is helping me automate and manage our security compliance processes, which used to be really manual and time-consuming. It's made it much easier to stay audit-ready, track controls, and collect evidence without constantly chasing down documentation. The continuous monitoring gives me peace of mind, and it's definitely saved our team a lot of time and effort. It’s also helped us build credibility with customers by showing we take security seriously ### 15. Effortless Compliance with Drata's Intuitive Features **Rating:** 4.5/5.0 stars **Reviewed by:** Timothy C. **Reviewed Date:** August 20, 2025 **What do you like best about Drata?** I appreciate Drata's simplicity in guiding us through the compliance process, making it easy to set up and maintain. Its real-time synchronization ensures our operations stay up-to-date. I'm impressed by the policy templates and the useful integrations, particularly the connectors for different types of vulnerability scanners, which keep everything connected seamlessly. **What do you dislike about Drata?** While I find the integrations and connectors in Drata great, I wish they were even more simplified. I believe there could be more development work done to enhance the system, potentially incorporating AI to guide users through the process with greater ease. **What problems is Drata solving and how is that benefiting you?** I use Drata to achieve SOC 2 compliance easily, benefiting my company and clients, with real-time integration and useful policy templates ensuring seamless compliance maintenance. ### 16. A Game-Changer for SOC 2, CCPA, and Third-Party Risk Management **Rating:** 5.0/5.0 stars **Reviewed by:** Sulaiman J. | Director of Information Security & IT, Mid-Market (51-1000 emp.) **Reviewed Date:** March 18, 2025 **What do you like best about Drata?** As the Information Security & IT Director at YCharts, I'm responsible for our SOC 2 and CCPA compliance, along with managing our third-party risk. Drata has been a fantastic partner in automating and streamlining these efforts. Drata's real-time monitoring, seamless integrations, and intuitive dashboard has made our SOC 2 compliance effortless. Drata continuously tracks our security posture, evidence, and policies. While the Drata platform and technology is greater, the real differentiator has been our Customer Success Manager, Elizebeth. Her wealth of knowledge and expertise in SOC 2 compliance has been invaluable, wheather we need guidance on compliance updates, or details on current controls. **What do you dislike about Drata?** One area I think Drata could improve is by improving and increasing it's integrations with other Security and IT tools. **What problems is Drata solving and how is that benefiting you?** As YCharts grew we knew that becoming SOC 2 and or ISO 27001 compliance was essential for building our customer trust. When we started compliance journey and was in search for a solution that could provide expert guidance to help us navigate compliance, Drata was the answer. ### 17. Natural, lightweight, intuitive **Rating:** 5.0/5.0 stars **Reviewed by:** Jean-Francois P. | Architect, Infra Ops and Security, Mid-Market (51-1000 emp.) **Reviewed Date:** March 25, 2025 **What do you like best about Drata?** Drata is an opinionated, lightweight, easy to understand repository for all our compliance information. It does everything we need (and more) which gives us a growth path with the tool, all-the-while aligning us with requirements and making them clear. The automated tests are a bonus, on top of the very clear control management system. Its integration with Slack is fast and efficient, and allows our tech team to keep an eye on control compliance and test status. **What do you dislike about Drata?** I would wish for more native integrations with third-party vendors, since this really where such a tool shines, and more support for self-hosted versions, since we are big proponents of self-hosting. **What problems is Drata solving and how is that benefiting you?** Our previous audits, carried out manually by an external consultancy, lacked a centralised, well-formed and opinionated data collection/repository, which required us (and the external consultant) to hunt for data and required a lot of back-and-forth to come to an agreement as to what is acceptable to be in-scope and not-in-scope without triggering exceptions. There was a lot less upfront clarity, and evidence could not be submitted much in advance, let alone as we go. ### 18. Streamlined Compliance Made Easy **Rating:** 4.5/5.0 stars **Reviewed by:** Afiq A. | Technical Support Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** April 06, 2025 **What do you like best about Drata?** Drata makes compliance tracking incredibly simple and efficient. The automated workflows and integrations with tools like Google Workspace, AWS, and Slack save a lot of manual effort. The dashboard is clean and easy to navigate, making it easy to stay on top of tasks and audits. **What do you dislike about Drata?** Some of the integrations require a bit of fine-tuning during the initial setup, and occasional sync delays can happen. A mobile app would also be a great addition for on-the-go access. **What problems is Drata solving and how is that benefiting you?** Drata helps streamline and automate our security compliance processes, reducing the need for manual tracking and documentation. It ensures that we're continuously meeting requirements for frameworks like SOC 2 by integrating with our existing tools and providing real-time monitoring. This saves time, minimizes human error, and keeps us audit-ready at all times. ### 19. Streamlining SOC 2 Compliance with Clarity and Confidence **Rating:** 5.0/5.0 stars **Reviewed by:** Jorge A. | Director of IT, Mid-Market (51-1000 emp.) **Reviewed Date:** May 05, 2025 **What do you like best about Drata?** Drata has taken a complex, often burdensome process like SOC 2 compliance and made it manageable and clear. The continuous control monitoring gives our team real-time visibility into our compliance posture, which means we’re not scrambling last minute or relying on guesswork. Integrations with our existing tools were smooth, and the platform's automation features cut down on time spent chasing documentation. Their support team has also been highly responsive and knowledgeable, which matters when you're dealing with audits and deadlines. **What do you dislike about Drata?** The initial onboarding felt a bit overwhelming, there’s a lot to configure and understand upfront. Some integrations required extra manual effort to get fully functional. Also, while the dashboard is generally intuitive, a few areas could use better UI feedback when something breaks or falls out of compliance. **What problems is Drata solving and how is that benefiting you?** Drata solves the problem of manual, inconsistent compliance tracking. Before, we had to rely on spreadsheets and scattered documentation, which made it hard to maintain confidence in our audit readiness. Now, Drata automates most of that work, saving time, reducing risk, and giving us real-time visibility into our compliance posture. It also makes it easier to prove our security standards to customers and auditors, which supports our growth and credibility. ### 20. Seamless SOC 2 Compliance with Exceptional Support from Elizabeth John! **Rating:** 5.0/5.0 stars **Reviewed by:** Rachel B. | Operations and Compliance Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** February 13, 2025 **What do you like best about Drata?** We had an awesome experience working with Drata, especially with Elizabeth John, who was incredibly helpful throughout the process. She made setting up everything for our SOC 2 Type 1 and 2 so much easier, guiding us every step of the way and always being available to answer questions. Elizabeth was extremely prompt, responding quickly whenever we needed support, which made the entire process feel smooth and efficient. The platform itself is intuitive and streamlined, taking a lot of the stress out of compliance. Highly recommend Drata if you’re looking for a straightforward compliance journey — and if you get the chance to work with Elizabeth, you’re in great hands! **What do you dislike about Drata?** The only downside we’ve encountered is the lack of integration with Oracle Cloud Infrastructure (OCI), which would make the platform even more versatile for our needs. **What problems is Drata solving and how is that benefiting you?** Obtaining SOC 2 Type 1 and 2 ### 21. Drata is the lifeboat to a drowning compliance team **Rating:** 5.0/5.0 stars **Reviewed by:** Jared B. | Chief Compliance Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** January 27, 2025 **What do you like best about Drata?** 1. Drata's compliance automation is a game changer. The available integrations allow a small compliance team to scale to an unlimited size organization. For example, vulnerability scanning, device monitoring, data security testing, policy, network infrastructure, risk assessment, and the list goes on. These were previously controlled and documented in independent places and my compliance team 1) struggled to manage all of the compliance evidence and 2) "pushed" the information to the SOC 2 auditor. Drata consolidates this into one portal and the auditor has on demand access. This truly is automated compliance. 2. Live chat support, compliance library, policy templates, risk assessment guide. The provided tools help you effectively set up a compliance program. 3. My vendor rep has been extremely helpful and available throughout the process. We meet every two weeks to ensure we are progressing sufficiently. But also, I appreciate that she understands everyone works at their own pace so is not pushing us if not necessary. **What do you dislike about Drata?** The vendor management functionality is lacking. Specifically, the questionairre function is very limited and not very useful. **What problems is Drata solving and how is that benefiting you?** SOC 2 type 2 certification. We found Drata because of issues we were facing with a SOC 2 type 2 audit and I am so please we did! ### 22. Great compliance automation tool, great UX, easy to navigate. **Rating:** 5.0/5.0 stars **Reviewed by:** Chris B. | Chief Technology Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** January 21, 2025 **What do you like best about Drata?** Drata has been great to map from the ISO 27001 framework requirements to actual controls. Whilst it doesn't replace compliance activities, it has sped up our alignment of our existing process to the ISO 27001 framework controls. The in-built policies have been great to use a base for review and sometimes wholly draft new policies. The risk assessment area is also very good for keeping and scoring risks. Finally the automation of controls is very good and suited to our environment (circa 150 employees + AWS infratructure). The tool makes it easy to disable tests (where not appropriate) or exclude particular items from the test (and justify this). The raw evidence is often very helpful for troubleshootin why our infrastructure may fail a particular test. Their customer success folk are absolutely excellent and work with you the whole way, and the interface is very intuitive and so it's as 'self-service' as you can imagine. The onboarding of the various integrations/connections was seamless with little need for help. During the "getting compliant", Drata has been used pretty mcuh every day by the security team in order to keep track of progress. **What do you dislike about Drata?** Dislike is a strong word. Given the relative youngness of the company, there are a few rough edges spread around none of which stop getting the value from the tool. It sometimes feel like the tool is geared more towards "keeping compliant" than "getting compliant" - which of course will be the vast majority of the platform's use. Occasionally, the platform is a little limited (integrating with Enterprise Intune policies needs to be done in a very particular way) - though this we managed to overcome with the help our Customer Success manager. In other areas, we disagreed with some of the automated monitoring tests and their implementation (for example around production access to Gitlab). but that was overcome by using their API to upload evidence automatically from a small CI/CD job and disabling that single test. On the whole, we use almost every test provided by Drata out of the box. **What problems is Drata solving and how is that benefiting you?** It's helping ensuring that as we rework our policies, ways of working, etc, that we are algining to ISO 27001 and helping us formalise and identify activities we were already doing. Ultimately, it will help us with the ongoing compliance by prompting for regular activities to be performed, highlighting where we've departed from standards/policies immediately within 24 hours, etc. ### 23. A beginner's guide to Drata **Rating:** 4.5/5.0 stars **Reviewed by:** Federick F. | Senior Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** January 17, 2025 **What do you like best about Drata?** What makes Drata helpful is the overall consolidation and mapping of the security standards and technical requirements needed to achieve compliance. There are functionalities too that can automate tasks for compliance evaluation which makes it very helpful in analyzing the gaps as to what needs remediation. **What do you dislike about Drata?** There are certain options that can be quite challenging to integrate and this needs to be head leveled in the documentation procedures. **What problems is Drata solving and how is that benefiting you?** Evaluation and mapping of our current security posture which is needed for our ISMS certification. The ability to automate the evidence collection, control monitoring, and documentation for frameworks like SOC 2, ISO 27001, PCI DSS, HIPAA, and GDPR are hepful. Although there are no one-size fits all in security evaluation, the pre-built frameworks and controls are sufficient to come of with substantial evaluation for a security audit. ### 24. good support **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.) **Reviewed Date:** October 30, 2025 **What do you like best about Drata?** Excellent support and a good feature set. **What do you dislike about Drata?** missing some integrations that would helpful such as elmo and phished. **What problems is Drata solving and how is that benefiting you?** ISO Certification and management client questionnaire automation ### 25. Drata is simplifying Compliance and certification **Rating:** 4.0/5.0 stars **Reviewed by:** Jeremy M. | Director of IT, Mid-Market (51-1000 emp.) **Reviewed Date:** January 30, 2025 **What do you like best about Drata?** There are real people there to help me along the way. Our company is going through SOC2 Type 2 comliance for the first time and learning a lot. Drata is there to help with every step of the process. The Patform is easy to use, implemented quickly, has good customer support, and easily integrates with other tools to simplify the process. **What do you dislike about Drata?** I feel like there are parts of the platform which feel disconnected and confusing. We have to use the tool everyday. We are also missing some of the integrations to tools we use daily. **What problems is Drata solving and how is that benefiting you?** They are solving the SOC2 Type2 puzzle for us providing a nice platform to use throughout the process. ### 26. Streamlined the SOC2 requirements from Scratch **Rating:** 5.0/5.0 stars **Reviewed by:** Neil W. | CTO, Small-Business (50 or fewer emp.) **Reviewed Date:** December 21, 2024 **What do you like best about Drata?** They really streamlined and automated alot of the tasks that require SOC 2 compliance. They also send reminders and have due dates around tasks needing to be completed, so for smaller companies with limited resources, it really helps to make sure we are continually staying compliant. We continue to login and use the system monthly and their customer support is extremely responsive and helpful when it is necesary. **What do you dislike about Drata?** The main thing I have trouble with in Drata is the expansive set of different frameworks they support and me wanting to align to all of them, but with a small team I can not stay on top of it all, but for larger companies this would be a benefit. **What problems is Drata solving and how is that benefiting you?** Unknown requirements when first starting out and understanding what the compliance standards are along with gathering of evidence to satisfy the auditors. ### 27. Finally Found a Platform That Makes Compliance Feel Manageable! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** January 28, 2025 **What do you like best about Drata?** Instead of drowning in spreadsheets and endless checklists, I found myself with a clear roadmap of exactly what we needed. It's like having a knowledgeable compliance partner who breaks everything down into bite-sized pieces. The way it automatically gathers evidence and keeps track of our progress has saved me countless hours of chasing down documents and pestering team members for updates. The support team is responsive and knowledgeable about compliance requirements. When you run into questions during setup or about specific controls, they're there to help guide you through the process. **What do you dislike about Drata?** The initial setup can be a bit overwhelming - there are so many integrations and settings to configure that it took us some time to get everything properly connected. **What problems is Drata solving and how is that benefiting you?** The platform solves the challenge of continuous compliance monitoring. Rather than scrambling to gather evidence during audit time, Drata automatically collects and updates evidence in real-time. This means we're always audit-ready, reducing the stress and rush typically associated with certification preparations. The direct benefit to me is peace of mind - knowing that we're consistently meeting our compliance requirements and having clear visibility into our certification progress at any given time. ### 28. Streamlined SOC 2 Audit and Great Customer Support **Rating:** 5.0/5.0 stars **Reviewed by:** Shannon K. | Senior Director of Quality, Compliance and Security, Mid-Market (51-1000 emp.) **Reviewed Date:** April 30, 2025 **What do you like best about Drata?** Automates and streamlines day-to-day security compliance efforts with easy implementation and usage. Amazing customer support from timely account management, tech support, and policy support. Makes the SOC 2 audit easy and stress-free! **What do you dislike about Drata?** There is no HITRUST framework yet. But I hear it's coming next quarter. Some of the automated integrations have been problematic (e.g., github, background checks, and HRIS updates). However, I've seen great improvement and responsive fixes from Drata over time. Quite pleased with the turn-around. **What problems is Drata solving and how is that benefiting you?** Automated monitoring rather than manual monitoring. Huge time-savings and cost-savings. Real-time alerts while scaling a fast-growing SaaS company. Personnel compliance is a breeze now! ### 29. Invaluable Compliance Automation **Rating:** 5.0/5.0 stars **Reviewed by:** Jared M. | Chief Technology Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** December 13, 2024 **What do you like best about Drata?** Drata provides an intuitive platform that simplifies the process for businesses to achieve and maintain certifications like SOC 2, minimizing the time and effort required to stay compliant. Our compliance and security team uses Drata daily to react to alerts and build out additional controls with monitoring for additional frameworks the company requires. Drata requires some setup but they provide excellent documentation on the steps required. Support has always been helpful and quick. **What do you dislike about Drata?** I would like additional integrations for all products and additional options in the integrations I have to simplify the configuration my IT has to perform. **What problems is Drata solving and how is that benefiting you?** Drata delivers precise, real-time insights into our compliance status, enabling us to consistently meet security standards. With its automation capabilities, it streamlines the compliance process, saving time and minimizing the potential for errors. ### 30. Solid platform but not without some issues. **Rating:** 3.5/5.0 stars **Reviewed by:** Pav A. | General Counsel, Mid-Market (51-1000 emp.) **Reviewed Date:** May 05, 2025 **What do you like best about Drata?** I think it is generally intuitive at a high level. UI is solid. Seems to have most of the features. **What do you dislike about Drata?** Not super intuitive at the more granular level. No integration with some tools. **What problems is Drata solving and how is that benefiting you?** Maintaining a record of our documents and folks acknowledging them. Also, providing some visibility into compliance status. ### 31. Best Compliance tool out there **Rating:** 5.0/5.0 stars **Reviewed by:** Kithmina S. | Information Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** January 21, 2025 **What do you like best about Drata?** It is very easy to use, Implementation was a breeze, and also has top-notch customer support. We use the product on a daily basis and since it was easy to integrate with our other platforms, compliance is easier to perform. **What do you dislike about Drata?** Some granularity in controls still needs an uplift, one such place is ticketing management, It currently only supports Jira which creates some difficulties when performing tasks. **What problems is Drata solving and how is that benefiting you?** Keeping up with compliance frameworks, monitoring controls and systems, maintaining policies and procedures, managing vendors ### 32. Drata makes evidence management straight-forward in a central management interface **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** March 13, 2025 **What do you like best about Drata?** Drata is the best tool my team and I have found for gathering and managing evidence in a central location. We have to gather and herd tons of information, so having one simple, central place to do it is crucial for us. Customer support is also well-executed at Drata. They're very helpful and responsive. **What do you dislike about Drata?** It doesn't support all the connections I would like it to have, but despite that, it's still the best option for us. **What problems is Drata solving and how is that benefiting you?** Drata is giving us a place to track and manage our efforts to become compliant, and it's making it easier for us to collaborate and maintain a huge amount of information. ### 33. Game Changing **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Medical Practice | Mid-Market (51-1000 emp.) **Reviewed Date:** December 20, 2024 **What do you like best about Drata?** Drata has truly been a game-changer for our organization’s compliance and security processes. Drata’s user-friendly interface is intuitive, and the platform’s ability to continuously monitor and track our compliance status in real-time is incredibly valuable. What really stands out is the level of support Drata provides. They've even made changes to their product based on some of our feedback. Overall, Drata has been an essential tool for our team. It has not only helped us stay compliant but also enhanced our overall security posture. **What do you dislike about Drata?** We encountered some complications integrating with Google Workspace due to our company’s organizational structure. We could only link one account, which required a complex consolidation of multiple Workspace accounts, that did add some additional costs when onboarding. **What problems is Drata solving and how is that benefiting you?** Drata is helping us achieve our goal of SOC 2, ISO 27001, and HIPAA compliance ### 34. Reliable security management platform for SOC2 **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** December 30, 2024 **What do you like best about Drata?** - User friendly interface and easy to setup for users - Continuous monitoring of systems ensures our organization stays compliant in real time - Seamless integrations with a wide varitey of other control tools - Automates many compliance tasks, such as evidence collection and report generation, saving significant time and reducing manual work - Able to review audits at all times - Comprehensive security framework support - Excellent customer support - Centralized dashboard - Customizable policies and controls **What do you dislike about Drata?** - Potential overhead for smaller teams, there are many features and policies that we dont use since we are a smaller company **What problems is Drata solving and how is that benefiting you?** SOC2 compliance ### 35. We use Drata for GRC for SOC2, Type 2 and ISO 27001:2022 **Rating:** 5.0/5.0 stars **Reviewed by:** Joel F. | Sr. IT & Security Consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** December 11, 2024 **What do you like best about Drata?** Ease of use, easy implmentation, easy integration, and flexibility. **What do you dislike about Drata?** Missing a connection to out ITSM for ticketing. I have to admit our ticketing system isn't in the top 20. So I am not shocked. **What problems is Drata solving and how is that benefiting you?** Single pane of glass for GRC. Reduces cost of annual audits. Single repositiry for evidence and policies, etc. Vendor security questionnaire automation. ### 36. We have just started.. but support has been really good **Rating:** 5.0/5.0 stars **Reviewed by:** Alan L. | CTO, Mid-Market (51-1000 emp.) **Reviewed Date:** February 05, 2025 **What do you like best about Drata?** Sales process - kudos Sam Support team has been very helpful **What do you dislike about Drata?** Integrations can be a little cluncky, stuggling with Sendgrid **What problems is Drata solving and how is that benefiting you?** Gaining SOC2 and then GDPR ### 37. Drata Framework Review **Rating:** 5.0/5.0 stars **Reviewed by:** Garrod T. | Project Manager/Compliance, Small-Business (50 or fewer emp.) **Reviewed Date:** January 14, 2025 **What do you like best about Drata?** Drata tracks all of the controls and personell, automates every aspect of becoming compliant including automation of evidence. Makes becoming compliant so much easier than tracking on spreadsheets or collecting manual evidence. **What do you dislike about Drata?** They connect to most tools, IE: Microsoft, and other main tools. However there are some that do not connect automatically. **What problems is Drata solving and how is that benefiting you?** SOC 2, NIST ### 38. True SOC2 Compliance Accelerator **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** January 03, 2025 **What do you like best about Drata?** Drata has helped accelerate our soc2 compliance rapidly. They have amazing integrations and awesome customer support. They resolve issues fast with the integrations and have been extremely helpful in understanding the nuances of the platform. We passed our audit with flying colors with almost no manual effort on our part. They helped provide a clear path towards attaining and maintaining our standards. **What do you dislike about Drata?** Application has been slightly unstable. Some integrations have not worked as expected. But there is not much to complain about. **What problems is Drata solving and how is that benefiting you?** Removing the majority of the manual effort involved in securing and maintaining SOC2 compliance. ### 39. Drata Review **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** May 07, 2025 **What do you like best about Drata?** It's effective for tracking compliance and monitoring. **What do you dislike about Drata?** I think that loading evidence manually can begin to get reduced with more integrations. **What problems is Drata solving and how is that benefiting you?** Monitoring compliance and rules that need to be met. **Official Response from Ashley Hyman:** > Hi there! Thank you for your review. We are glad you find Drata to be helpful for tracking compliance and monitoring. We'd love to hear additional feedback, and understand how we can improve your experience. Please reach out to me directly at ashley@drata.com. Best, Ashley Hyman VP of Customer Experience ### 40. Great compliance tool, although a little pricey **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** January 27, 2025 **What do you like best about Drata?** Drata has streamlined our security complance journey and made it easy to understand where our gaps are. **What do you dislike about Drata?** The main downside for us as been the cost involved, additionally, there is limited support during our business hours as Drata are US based and we're in Australia, so things happen a little slowly. **What problems is Drata solving and how is that benefiting you?** Drata and the connections to our services allow for a large amount of automation and gap anaysis, this has saved us a lot of time and manual checks. ### 41. Customer service is incredibly helpful **Rating:** 4.5/5.0 stars **Reviewed by:** Emily P. | Head of Operations, Small-Business (50 or fewer emp.) **Reviewed Date:** December 17, 2024 **What do you like best about Drata?** If you have any issues, whether that be compliance related, or platform related, their customer service team is really attentive. **What do you dislike about Drata?** Some of the integrations don't work the way I assumed they would but this could also be due to limitations of the products/companies we are integrating with Drata. **What problems is Drata solving and how is that benefiting you?** Keeps our information safe and in one place for SOC 2/GDPR compliance. ### 42. Internova Risk Management **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Leisure, Travel & Tourism | Enterprise (> 1000 emp.) **Reviewed Date:** December 03, 2024 **What do you like best about Drata?** The system is very user friendly, the help articles are a daily go to for us and the continued support from Ben Chau our Customer Success Manager definetly makes a huge difference. **What do you dislike about Drata?** Lack of Business Conitnuity and Contract Management features & functionality, force us to use other non integrated tools. **What problems is Drata solving and how is that benefiting you?** Centralization of internal monitoring and controls as well as stremlining and simplifying PCI and ISO readiness. ### 43. The only way to manage audits. Period. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** December 18, 2024 **What do you like best about Drata?** Ease of use and time saving efficiencies to meet our compliance objectives. Has changed how audits are conducted considerably so **What do you dislike about Drata?** Hopefully they'll support automated onboarding of devices through integrations like MDM soon. **What problems is Drata solving and how is that benefiting you?** Managing audits, ensuring device compliance, asset tracking, and access reviews. **Official Response from Ashley Hyman:** > Thank you so much for your review! We are grateful to have you as a customer. Don't be shy to reach out if we can do anything to further enhance your experience. On that note, we'd be happy to walk you through our current integrations with MDMs---you can reach out to me directly at ashley@drata.com or to our support team for more info: support@drata.com Sincerely, Ashley Hyman VP of Customer Experience ## Drata Discussions - [Hard Disk Encryption](https://www.g2.com/discussions/hard-disk-encryption) - 1 comment, 2 upvotes - [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote - [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote - [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote - [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote - [View Drata pricing details and edition comparison](https://www.g2.com/products/drata/reviews?filters%5Bsentiment_snippet%5D=1553638&qs=pros-and-cons§ion=pricing&secure%5Bexpires_at%5D=2026-08-14+17%3A15%3A33+-0500&secure%5Bsession_id%5D=d5938a66-0be2-425f-a45c-0e372c718053&secure%5Btoken%5D=0453023e377bbbad546c82ac86a2e8aa61abc0f527e625cdc7df9de007ff6061&format=llm_user) ## Drata Integrations - [1Password](https://www.g2.com/products/1password/reviews) - [360Learning](https://www.g2.com/products/360learning/reviews) - [ADP Workforce Now](https://www.g2.com/products/adp-workforce-now/reviews) - [Aha!](https://www.g2.com/products/aha/reviews) - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) - [AlexisHR](https://www.g2.com/products/alexishr/reviews) - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews) - [Arnica](https://www.g2.com/products/arnica/reviews) - [Asana](https://www.g2.com/products/asana/reviews) - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews) - [AWS CodeCommit](https://www.g2.com/products/aws-codecommit/reviews) - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews) - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews) - [AWS Organizations](https://www.g2.com/products/aws-organizations/reviews) - [Azure Portal](https://www.g2.com/products/azure-portal/reviews) - [Azure SQL Database](https://www.g2.com/products/azure-sql-database/reviews) - [BambooHR](https://www.g2.com/products/bamboohr/reviews) - [Basecamp](https://www.g2.com/products/basecamp/reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) - [Bitwarden](https://www.g2.com/products/bitwarden/reviews) - [Box](https://www.g2.com/products/box/reviews) - [Certn](https://www.g2.com/products/certn/reviews) - [CharlieHR](https://www.g2.com/products/charliehr/reviews) - [ChartHop](https://www.g2.com/products/charthop/reviews) - [Checkr](https://www.g2.com/products/checkr-inc-checkr/reviews) - [Checkr](https://www.g2.com/products/checkr/reviews) - [CircleCI](https://www.g2.com/products/circleci/reviews) - [ClearCo](https://www.g2.com/products/clearco-clearco/reviews) - [ClickUp](https://www.g2.com/products/clickup/reviews) - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) - [Confluence](https://www.g2.com/products/confluence/reviews) - [Cornerstone](https://www.g2.com/products/cornerstone-cornerstone/reviews) - [Coursera for Business](https://www.g2.com/products/coursera-for-business/reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - [CrowdStrike Falcon Exposure Management](https://www.g2.com/products/crowdstrike-falcon-exposure-management/reviews) - [CyberArk Workforce Identity](https://www.g2.com/products/cyberark-workforce-identity/reviews) - [Darwinbox](https://www.g2.com/products/darwinbox/reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - [Dayforce](https://www.g2.com/products/dayforce/reviews) - [Deel HR](https://www.g2.com/products/deel-hr/reviews) - [Docebo](https://www.g2.com/products/docebo/reviews) - [Docusign](https://www.g2.com/products/docusign/reviews) - [Dropbox](https://www.g2.com/products/dropbox/reviews) - [Duo](https://www.g2.com/products/duo/reviews) - [EasyLlama](https://www.g2.com/products/easyllama/reviews) - [Employment Hero](https://www.g2.com/products/employment-hero/reviews) - [Factorial](https://www.g2.com/products/factorial/reviews) - [Fibery](https://www.g2.com/products/fibery/reviews) - [Freshdesk](https://www.g2.com/products/freshdesk/reviews) - [Freshservice](https://www.g2.com/products/freshservice/reviews) - [Freshteam by Freshworks](https://www.g2.com/products/freshteam-by-freshworks/reviews) - [Front](https://www.g2.com/products/front/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Go1](https://www.g2.com/products/go1-go1/reviews) - [GoodHire (a Checkr company)](https://www.g2.com/products/goodhire-a-checkr-company/reviews) - [Google Cloud Run](https://www.g2.com/products/google-cloud-run/reviews) - [Google Workspace](https://www.g2.com/products/google-workspace/reviews) - [Gusto](https://www.g2.com/products/gusto/reviews) - [Harness](https://www.g2.com/products/harness-wealth-harness/reviews) - [Height](https://www.g2.com/products/height/reviews) - [Hexnode UEM](https://www.g2.com/products/hexnode-uem/reviews) - [HiBob HRIS](https://www.g2.com/products/hibob-hris/reviews) - [HireRight](https://www.g2.com/products/hireright/reviews) - [Hive](https://www.g2.com/products/hive-hive-hive/reviews) - [Humaans](https://www.g2.com/products/humaans/reviews) - [Huntress Managed Security Awareness Training](https://www.g2.com/products/huntress-managed-security-awareness-training/reviews) - [Hyperproof](https://www.g2.com/products/hyperproof/reviews) - [Infosec IQ](https://www.g2.com/products/infosec-iq/reviews) - [Insperity](https://www.g2.com/products/insperity/reviews) - [Intellihr.com](https://www.g2.com/products/intellihr-com/reviews) - [Intruder](https://www.g2.com/products/intruder/reviews) - [Ironclad](https://www.g2.com/products/ironclad/reviews) - [Iru](https://www.g2.com/products/iru/reviews) - [Jamf](https://www.g2.com/products/jamf/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews) - [Jit](https://www.g2.com/products/jit/reviews) - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) - [Justworks](https://www.g2.com/products/justworks/reviews) - [Kallidus](https://www.g2.com/products/kallidus/reviews) - [KarmaCheck](https://www.g2.com/products/karmacheck/reviews) - [Keka](https://www.g2.com/products/keka/reviews) - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews) - [LastPass](https://www.g2.com/products/lastpass/reviews) - [Lattice](https://www.g2.com/products/lattice-lattice/reviews) - [Linear](https://www.g2.com/products/linear/reviews) - [LinkedIn Learning](https://www.g2.com/products/linkedin-linkedin-learning/reviews) - [Lukka](https://www.g2.com/products/lukka/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Defender Vulnerability Management](https://www.g2.com/products/microsoft-defender-vulnerability-management/reviews) - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [miniOrange Identity & Access Management](https://www.g2.com/products/miniorange-identity-access-management/reviews) - [Namely](https://www.g2.com/products/namely/reviews) - [New Relic](https://www.g2.com/products/new-relic/reviews) - [NinjaOne](https://www.g2.com/products/ninjaone/reviews) - [Notion](https://www.g2.com/products/notion/reviews) - [Officient](https://www.g2.com/products/officient/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [OneLogin](https://www.g2.com/products/onelogin/reviews) - [Orca](https://www.g2.com/products/cortez-labs-orca/reviews) - [Oyster](https://www.g2.com/products/oyster-oyster/reviews) - [Paychex](https://www.g2.com/products/paychex/reviews) - [Paycor](https://www.g2.com/products/paycor/reviews) - [Paylocity](https://www.g2.com/products/paylocity/reviews) - [PeopleFluent Learning](https://www.g2.com/products/peoplefluent-peoplefluent-learning/reviews) - [Personio](https://www.g2.com/products/personio/reviews) - [Qualys VM](https://www.g2.com/products/qualys-vm/reviews) - [Rapid7 Managed Detection and Response Services](https://www.g2.com/products/rapid7-managed-detection-and-response-services/reviews) - [Rippling](https://www.g2.com/products/rippling/reviews) - [SafeBase](https://www.g2.com/products/safebase/reviews) - [Sage HR](https://www.g2.com/products/sage-hr/reviews) - [Salesforce Heroku](https://www.g2.com/products/salesforce-heroku/reviews) - [SAP SuccessFactors Onboarding](https://www.g2.com/products/sap-successfactors-onboarding/reviews) - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) - [SentinelOne Singularity Vulnerability Management](https://www.g2.com/products/sentinelone-singularity-vulnerability-management/reviews) - [ServiceNow Customer Service Management](https://www.g2.com/products/servicenow-customer-service-management/reviews) - [Shortcut](https://www.g2.com/products/shortcut/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Slack Connector for Jira](https://www.g2.com/products/slack-connector-for-jira/reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) - [Swif.ai](https://www.g2.com/products/swif-ai/reviews) - [TeamWork](https://www.g2.com/products/teamwork-2025-01-31/reviews) - [Tenable Vulnerability Management](https://www.g2.com/products/tenable-vulnerability-management/reviews) - [Tines](https://www.g2.com/products/tines/reviews) - [Torq](https://www.g2.com/products/torq-ai-torq/reviews) - [Travis CI](https://www.g2.com/products/travis-ci/reviews) - [Tray.ai](https://www.g2.com/products/tray-ai/reviews) - [Trello](https://www.g2.com/products/trello/reviews) - [TriNet](https://www.g2.com/products/trinet/reviews) - [Udemy Business](https://www.g2.com/products/udemy-business/reviews) - [UKG Pro](https://www.g2.com/products/ukg-pro/reviews) - [UKG Ready](https://www.g2.com/products/ukg-ready/reviews) - [Upwind](https://www.g2.com/products/upwind/reviews) - [Vetty](https://www.g2.com/products/vetty/reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - [Wiz Code](https://www.g2.com/products/wiz-code/reviews) - [Workday Learning](https://www.g2.com/products/workday-learning/reviews) - [Workspace ONE](https://www.g2.com/products/workspace-one/reviews) - [Wrike](https://www.g2.com/products/wrike/reviews) - [XFA](https://www.g2.com/products/xfa/reviews) - [Zendesk for Customer Service](https://www.g2.com/products/zendesk-for-customer-service/reviews) - [Zip](https://www.g2.com/products/zip-2025-09-24/reviews) - [Zoho BugTracker](https://www.g2.com/products/zoho-bugtracker/reviews) - [Zoho CRM](https://www.g2.com/products/zoho-crm/reviews) - [Zoho Desk](https://www.g2.com/products/zoho-desk/reviews) - [Zoho People](https://www.g2.com/products/zoho-people/reviews) ## Drata Features **Additional Functionality** - Tagging - Natural Language Processing - Data Extraction - Multi-Language - Predictive Analytics - Drag & Drop - Speech Recognition - Reporting/Analytics - Data Storage Management - Virtual Personal Assistant (VPA) - AI Copilot - Customer Segmentation - Collaboration Tools - Data Import/Export - Generative AI - For eCommerce - Role-Based Permissions - Customizable Branding - Search/Filter - Monitoring - Document Management - API - Data Visualization - Trend Analysis - Machine Learning - Access Controls/Permissions - Alerts/Escalation - Performance Metrics - Real-Time Data - Third-Party Integrations - Mobile App - Multiple Data Sources - For Sales Teams/Organizations - Sentiment Analysis - Activity Dashboard - Chatbot - Workflow Automation **Additional Functionality** - Incident Management - Real-Time Monitoring - Evidence Management - Risk Alerts - Reporting & Statistics - Third-Party Integrations - Workflow Management - Risk Analysis - Sarbanes-Oxley Compliance - Single Sign On - Compliance Management - Policy Management - Real-Time Reporting - Audit Trail - Assessment Management - HIPAA Compliant - Operational Risk Management - Document Storage - Enterprise Risk Management - Data Visualization - Configurable Workflow - Vendor Management - IT Risk Management - User Management - Issue Management - Internal Controls Management - AI Copilot - Environmental Compliance - Customizable Reports - Data Import/Export - Risk Management - API - Document Management - Risk Assessment - Activity Dashboard - Task Management - Audit Management - Generative AI - Governance - Corrective and Preventive Actions (CAPA) - Alerts/Notifications - FDA Compliance - Secure Data Storage - Approval Process Control - Version Control **AI/Machine Learning** - AI/Machine Learning **Decision Support** - Decision Support **Collaboration Tools** - Collaboration Tools **Access Controls/Permissions** - Access Controls/Permissions **Task Management** - Task Management **Real-Time Monitoring** - Real-Time Monitoring **Natural Language Processing** - Natural Language Processing **AI Policy Mapping** - AI Policy Mapping **AI Risk Management** - AI Risk Management **Ethical AI Monitoring** - Ethical AI Monitoring **Audit Trail** - Audit Trail **Integration into Third Party Applications** - Integration into Third Party Applications **Product Lifecycle Management** - Product Lifecycle Management **Proactive Recommendations** - Proactive Recommendations **Security** - Compliance Monitoring - Anomoly Detection - Cloud Gap Analytics **Functionality** - Centralized Vendor Catalog - Questionnaire Templates - User Access Control **Generative AI** - AI Text Summarization - AI Text Generation - Generative AI **Generative AI** - AI Text Generation - AI Text Summarization - Generative AI - Approval Process Control **AI Compliance** - Regulatory Reporting - Automated Compliance - Audit Trails **Agentic AI - Vendor Management** - Decision Making **Additional Functionality** - Generative AI - Billing & Invoicing - Customizable Templates - User Management - Invoice Processing - Onboarding - Search/Filter - Sourcing Management - Vendor Master Data Management - Procurement Management - Reporting & Statistics - Document Management - Project Management - Data Visualization - Access Controls/Permissions - Transaction History - Risk Assessment - Activity Dashboard - Real-Time Data - Alerts/Notifications - Offboarding - AI Copilot - Self Service Portal - Audit Management - Collaboration Tools - API - Approval Process Control - Vendor Payment - Third-Party Integrations - Performance Metrics - Purchase Order Management - Contract/License Management - Data Import/Export - Single Sign On - Workflow Management - Compliance Management - Task Management **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Revenue Recognition** - Usage Tracking - Deferred Revenue - Revenue Accrual **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Risk assessment** - Risk Scoring - Monitoring And Alerts - AI Monitoring **Workflows - Audit Management** - Audit Trail - Recommendations - Collaboration Tools - Integrations - Audit Planning **Risk Management & Monitoring** - AI Risk Management - Real-time Monitoring **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Platform AI Features - Policy Management** - Reports - Workflow Management - Customizable Reports - Content Management - Renewal Management - Document Management - Forms Management - Compliance Management - Incident Management - Lifecycle Management - Template Management - Audit Management - Assessment Management - Policy Metadata Management - Expiration Management - Configurable Workflow **Additional Functionality** - Version Control - Secure Data Storage - Search/Filter - Reminders - Monitoring - API - Activity Tracking - Activity Dashboard - Role-Based Permissions - Single Sign On - Policy Training - Archiving & Retention - Audit Trail - Attestation - AI/Machine Learning - Chatbot - Collaboration Tools - Risk Analysis - Self Service Portal - Document Analysis - AI Copilot - Third-Party Integrations - Policy Creation - Digital Signature - Alerts/Notifications - Policy Library - Real-Time Notifications - Document Review - Reporting/Analytics - Customizable Templates **Additional Functionality** - HIPAA Compliant - Workflow Management - Secure Data Storage - Third-Party Integrations - Access Controls/Permissions - Consent Management - Data Mapping - Audit Management - API - Role-Based Permissions - Policy Management - Single Sign On - Risk Management - Search/Filter - Template Management - Multi-Language - Data Visualization - User Management - Monitoring - PIA/DPIA - Alerts/Notifications - Sensitive Data Identification - Self Service Portal - Archiving & Retention - Data Import/Export - Risk Assessment - Activity Dashboard - Document Management - PCI Compliance - Incident Management - Data Governance - Compliance Management - Customizable Templates - AI Copilot - Reporting & Statistics - Generative AI - Data Storage Management - File Management - Customizable Reports - Performance Metrics - Risk Analysis - Intrusion Detection System - Log Analysis - Security Auditing - Log Management - Reporting/Analytics - Risk Alerts - PCI Assessment - Vulnerability Scanning - Event Logs - File Integrity Monitoring - Exceptions Management - Data Synchronization - Compliance Tracking - Activity Monitoring - Audit Trail - Secure Login **Security** - Data Security - Data loss Prevention - Security Auditing - Real-Time Data - Cloud Application Security - SSL Security **Administration** - Policy Enforcement - Auditing - Workflow Management **Documentation - Audit Management** - Customizable Forms - Checklists **AI Lifecycle Management** - Lifecycle Automation **Generative AI - Vendor Security and Privacy Assessment** - Text Summarization - Text Generation **Identity** - SSO - Real-Time Analytics - Visual Analytics - Reporting/Analytics **Reporting & Analytics - Audit Management** - Activity Dashboard - Audit Performance - Industry Compliance - ISO Compliance - Environmental Compliance - AML Compliance - Sarbanes-Oxley Compliance - KYC Compliance - FDA Compliance - OSHA Compliance - Real-Time Data - Real-Time Analytics **Access Control and Security** - Pole-based Access Control (RBAC) **Additional Functionality** - Alerts/Notifications - AI Copilot - Access Controls/Permissions - Endpoint Management - Intrusion Detection System - Compliance Management - HIPAA Compliant - Search/Filter - API - Two-Factor Authentication - Data Visualization - Risk Assessment - Real-Time Monitoring - Event Logs - Activity Dashboard - Audit Management - Cloud Security Policy Management - Vulnerability Protection - Anti Virus - Incident Management - Threat Intelligence - Real-Time Reporting - Reporting & Statistics - User Management - Encryption - Vulnerability Scanning - Generative AI - Status Tracking - Third-Party Integrations - Real-Time Notifications - Patch Management - Monitoring - Cloud Encryption **Additional Functionality** - Mobile Access - Corrective and Preventive Actions (CAPA) - Issue Management - Document Management - Role-Based Permissions - Activity Tracking - Document Storage - Reporting & Statistics - Task Management - Workflow Management - Status Tracking - Monitoring - Data Visualization - Approval Process Control - Forms Management - Change Management - Risk Alerts - Asset Tracking - AI Copilot - API - Risk Analysis - Policy Management - Incident Management - Real-Time Reporting - Real-Time Notifications - Alerts/Notifications - Security Auditing - Compliance Management - Risk Assessment - Real-Time Monitoring - Version Control - Archiving & Retention - Alerts/Escalation - Customizable Reports - Compliance Tracking - Access Controls/Permissions - Certification Tracking - Surveys & Feedback - Digital Signature - HIPAA Compliant - Reminders **Collaboration and Communication ** - Model Sharing and Reuse **Agentic AI - AI Governance Tools** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration - Adaptive Learning - Natural Language Interaction - Proactive Assistance - Decision Making ## Top Drata Alternatives - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,679 reviews) - [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) - 4.9/5.0 (1,311 reviews) - [Hyperproof](https://www.g2.com/products/hyperproof/reviews) - 4.5/5.0 (221 reviews)