---
title: Drata Reviews
meta_title: 'Drata Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 1333 reviews by the users' company size, role or industry
  to find out how Drata works for a business like yours.
aggregate_rating:
  rating_value: 4.7
  review_count: 1333
  scale: '5'
date_modified: '2026-07-27'
parent_category:
  name: Cloud Security
  url: https://www.g2.com/categories/cloud-security
---

# Drata Reviews
**Vendor:** Drata  
**Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance)  
**Average Rating:** 4.7/5.0  
**Total Reviews:** 1,333
## About Drata
Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata&#39;s core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you&#39;re demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.



## Drata Pros & Cons
**What users like:**

- Users commend the **exceptional customer support** from Drata, enhancing their compliance and security management experience. (135 reviews)
- Users value the **intuitive design** of Drata, making setup and integration seamless and efficient for everyone. (115 reviews)
- Users highlight the **automation of compliance monitoring** in Drata, significantly easing reporting processes and enhancing efficiency. (109 reviews)
- Users value the **time-saving automation** of Drata, streamlining compliance tasks and simplifying audits significantly. (96 reviews)
- Users value the **seamless integrations** of Drata, enhancing functionality by connecting various platforms effortlessly. (89 reviews)
- Automation (78 reviews)
- Users find Drata to be **simple to use and set up** , enhancing automation and support for audit processes. (77 reviews)
- Easy Integrations (75 reviews)
- Easy Setup (67 reviews)
- Team Helpfulness (62 reviews)

**What users dislike:**

- Users find Drata&#39;s **limited integrations** frustrating, wishing for broader support for third-party tools and self-hosted versions. (43 reviews)
- Users face **integration issues** with Drata, leading to a challenging transition and unexpected manual effort required. (38 reviews)
- Users note that **configuration limitations** and complex transitions hinder a seamless experience with Drata. (35 reviews)
- Users find the **lack of clarity** in Drata&#39;s UI can complicate the audit process and task management. (28 reviews)
- Users find the **UX confusing at times** , making it difficult to identify missing tasks and necessary fixes. (22 reviews)
- Limited Customization (20 reviews)
- Policy Management (18 reviews)
- Users find Drata’s services to be **expensive** , especially for startups looking for cost-effective compliance solutions. (15 reviews)
- Lack of Customization (15 reviews)
- Users desire **additional features** for formatting, better user interface, and more integrations for improved functionality. (15 reviews)

## Drata Reviews
  ### 1. Drata makes our jobs easier

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** June 12, 2024

**What do you like best about Drata?**

It is easy to use and saves time across our business.

**What do you dislike about Drata?**

I do not like that my ideas and not heard or implemented

**What problems is Drata solving and how is that benefiting you?**

We can ensure our staff is doing the right thing and gives us valuable insights

  ### 2. It just works

**Rating:** 5.0/5.0 stars

**Reviewed by:** Tom M. | Technical Support Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 06, 2025

**What do you like best about Drata?**

Reviewing policies or trust center access requests isn't exactly a particularly enjoyable task, but of course it's something that needs to be done by any serious enterprise.

Drata makes this process as painless as possible. I have used their platform in different roles in different companies and even though I am an occasional user, I never have any problems finding my way around. I cannot stress enough how valuable it is to have such an accessible compliance platform and I really wish more business software was like Drata.

**What do you dislike about Drata?**

I recently couldn't log in to Drata and the error message wasn't very helpful (basically saying I couldn't log in). Our company's Drata admin was also unable to see any further error details on his end.

However, Drata's support team managed to resolve the issue in just 13 minutes (!) after I emailed them, even though I was contacting them outside of their core West Coast working hours.

So as far as negative experiences go, Drata provided by far the best.

**What problems is Drata solving and how is that benefiting you?**

Ensuring that our organisation implements security best practices and meets all certification requirements.

  ### 3. Streamlining SOC 2 Compliance with Clarity and Confidence

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jorge A. | Director of IT, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 05, 2025

**What do you like best about Drata?**

Drata has taken a complex, often burdensome process like SOC 2 compliance and made it manageable and clear. The continuous control monitoring gives our team real-time visibility into our compliance posture, which means we’re not scrambling last minute or relying on guesswork. Integrations with our existing tools were smooth, and the platform's automation features cut down on time spent chasing documentation. Their support team has also been highly responsive and knowledgeable, which matters when you're dealing with audits and deadlines.

**What do you dislike about Drata?**

The initial onboarding felt a bit overwhelming, there’s a lot to configure and understand upfront. Some integrations required extra manual effort to get fully functional. Also, while the dashboard is generally intuitive, a few areas could use better UI feedback when something breaks or falls out of compliance.

**What problems is Drata solving and how is that benefiting you?**

Drata solves the problem of manual, inconsistent compliance tracking. Before, we had to rely on spreadsheets and scattered documentation, which made it hard to maintain confidence in our audit readiness. Now, Drata automates most of that work, saving time, reducing risk, and giving us real-time visibility into our compliance posture. It also makes it easier to prove our security standards to customers and auditors, which supports our growth and credibility.

  ### 4. Unmatched support and brilliant responsiveness.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Todd F. | CDO/CISO, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 24, 2025

**What do you like best about Drata?**

Drata has been a game changer in our audit preperation process, and the Safebase acquisition promises to simplify our third-party engagment even further. Simply the best platform out there. It's notable not only for its excellent capabilities, but its low-TCO and great ease-of-use. Even the best systems still need support - especially with a new client like Lydonia. We struggled with some unique exclusion requirments for an automated test configuration, and reached out using Drata's simple chat interface. Sean Blaine on their team immediately engaged and helped walk through and resolve issues - great service!

**What do you dislike about Drata?**

No downside to Drata. If anything, the sheer volume of capabilities means there is a lot to leverage - but the intuitive nature of the product and the impeccable support make that not just manageable, but a true pleasure in using the platform.

**What problems is Drata solving and how is that benefiting you?**

Drata is a game changer in audit preparation.

  ### 5. Best experience

**Rating:** 4.5/5.0 stars

**Reviewed by:** Renato Luis C. | Sysadmin Secops, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 15, 2024

**What do you like best about Drata?**

Excellent technical support. My problem was solved within minutes after identifying the issue and applying the appropriate solution.

**What do you dislike about Drata?**

Could you improve the Drata agent so that it can detect disk encryption using different tools

**What problems is Drata solving and how is that benefiting you?**

Drata help us to implement ISO 27001.

  ### 6. Drata over here making my life easier :)

**Rating:** 5.0/5.0 stars

**Reviewed by:** David G. | Manager SRE, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 27, 2025

**What do you like best about Drata?**

1 stop shop Dasboard showing me at an immediate glance where tests are failing. I use the portal on a daily basis.
Failing tests show exactly what you need to do to remediate.
Everything is linked very nicely to next steps. Once I learned the layout it is very intuitive.
Setup was fairly easy and integrated well into our environment.

**What do you dislike about Drata?**

I have not found anything to dislike yet, even the support is quick and friendly.

**What problems is Drata solving and how is that benefiting you?**

Drata quickly tells me where we are failing or falling behind in compliance. From Infrastructure to Observability to version control to patching...

  ### 7. Drata rocks!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Andrei B. | Security Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** June 27, 2023

**What do you like best about Drata?**

Customer service, automation, ease of use!

**What do you dislike about Drata?**

Some bugs are sometimes present, however the customer support team has been phenomenal in assisting us

**What problems is Drata solving and how is that benefiting you?**

We love the ease of use when it comes to audits and love the idea of not having to upload all the evidence each year.

  ### 8. helped with accessing trust center.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Nick R. | IT Technician, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 16, 2024

**What do you like best about Drata?**

Easy organization and display of user compliance.

**What do you dislike about Drata?**

It could use more ways to customize and control variables of users. Like being able to remove them from an email ban list the system put them on that you didn't know about. You should be made aware of and be able to control that list.

**What problems is Drata solving and how is that benefiting you?**

Drata is helping us prepare for our first audits with Policies and making it easy for our staff to meet compliance requirements.

  ### 9. Excellent security risk and compliance management platform

**Rating:** 4.5/5.0 stars

**Reviewed by:** Alex S. | Security, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 20, 2024

**What do you like best about Drata?**

This platform saves a GRC leader tons of time but mapping all the important frameworks, controls, tests (even automates many of them). I would never go back to driving a GRC program without this tool.

**What do you dislike about Drata?**

Some of the user interfaces can be a little confusing at times. Good news is Drata has terrific 24/7 support with real, expert people who are always ready and able to help.

**What problems is Drata solving and how is that benefiting you?**

Drata hels me manage our company's security risk and compliance program.

  ### 10. Drata Simplifies Certification Effortlessly

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** February 09, 2026

**What do you like best about Drata?**

As someone who's been doing certification before without Drata, it's simplify the process so much.

**What do you dislike about Drata?**

To be honest, not much that I dislike, I think the system is very nice

**What problems is Drata solving and how is that benefiting you?**

Drata really helps me be on track with my evidence collections and controls

**Official Response from Lizzie Higgins:**

> Thank you so much for the feedback! We're so happy to hear that we're able to help simplify your process, and keep everything on track with evidence collection and centralized controls :) Keep up the great work! 

  ### 11. Excellent experience with Drata

**Rating:** 5.0/5.0 stars

**Reviewed by:** Debra B. | Technical Program Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** April 19, 2023

**What do you like best about Drata?**

I'm a vCISO and work with customers on building their security programs and preparing for an audit.  Drata has been amazing in preparing my customer for SOC2.  It's amazing in that 85% of the evidence is automatically gathered and tested every 24 hours.  No more screenshots and manual gathering of evidence.  The best part is knowing the control is actually being enforced on a daily basis.  Ali McCormick our Drata Customer Success Manager has been great in helping us use Drata and meet the customer's accelerated SOC2 timeline.

**What do you dislike about Drata?**

I wish the Risk Assessment and Remediation Plan were more automated.  Having to map the Remediation to the control manually was disappointing.  The SOC2 system description isn't automated.

**What problems is Drata solving and how is that benefiting you?**

85% automation of gathering the evidence and preparation for SOC2.  Pulling everything about SOC2 into one place.  Being able to assign controls to specific owners who can then manage the control and receive alerts when it's out of compliance,  Easily maintaining daily compliance is critical to lowering a company's risk.

  ### 12. We love Drata!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Cassandra M. | Head of Security, CSO, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 08, 2024

**What do you like best about Drata?**

It seems dumb to say out loud, but it works as expected, every time, and I have the support I need to do what I need to do, when I need to do it. I don't think I've ever waited on help or an answer, and our entire team finds value in the tool each time we use it.  You can't say that about much in the software world. We had an easy implementation, easy integration experience, and I love that the chatbot actually works in the after hours when I need to ask my obscure questions. Turns out they're really not all that out of the ordinary, because there's a ready made and easy to find answer no matter what time I want to ask the question.

**What do you dislike about Drata?**

I'm a little sad my person moved onto another job (Claire), but we have a lovely new person and I know we're in good hands.

**What problems is Drata solving and how is that benefiting you?**

Drata has made our lives much easier, and while we still haven't started having all of our users use it themselves, it does greatly simplify our lives in that the integrations have saved us a ton of time in evidence gathering, but also system monitoring and having to reconnect the integrations, which was happening a lot with Vanta. I can't count how many times the integrations broke and caused us to have to restart in the middle of an audit. Such a waste of time and effort (and patience).

  ### 13. Comprehensive tool and excellent support for both technical and compliance questions

**Rating:** 5.0/5.0 stars

**Reviewed by:** Norbert P. | CISO, Mid-Market (51-1000 emp.)

**Reviewed Date:** June 11, 2025

**What do you like best about Drata?**

Out of the box compliant policy drafts, security controls and support for required practices like vendor management or user access reviews.
Easy to use and support is always there for you. Event the bot is pretty good and if it is not enough the professional and nice human is available too.

**What do you dislike about Drata?**

Asset management could have more features and more useful manual asset management.

**What problems is Drata solving and how is that benefiting you?**

Drata gives me a clear path towards compliance with ISO 27001. It spared me a lot of effort with integrations and ISMS procedures support.

  ### 14. Great Assistance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** August 13, 2025

**What do you like best about Drata?**

I love the automation of it all and how i can access several different frameworks that are already mapped to controls my environment is already following. 

The assistance i received was not only quick but the 2 that i dealt with were very knowledgeable which made the process easy.

**What do you dislike about Drata?**

Some end user stuff with how to access certain things. There are some things i would change just to make it easier for me as the end user to do my tasks when im using the tool.

**What problems is Drata solving and how is that benefiting you?**

Mapping and understanding the controls correctly.

  ### 15. Amazing support team and product

**Rating:** 4.0/5.0 stars

**Reviewed by:** Pramod  K. | GRC consultant, Computer Software, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 20, 2024

**What do you like best about Drata?**

Tech support team is amazing, they follow-up and give resolutions, they go an extra mile to make it easy for us, tools is also very good, overall i am a happy user. Its super easy to implement, their support members are available 24/7, its already very well integrated, and too easy to do it myself.

**What do you dislike about Drata?**

so far nothing, i realy need to think and put something here, may be an example could have been better to help me-  link evidence which is failing in monitoring environment, that could have been better.

**What problems is Drata solving and how is that benefiting you?**

Achieving faster compliance means that nearly 50-60% of the work is reduced, and it's altogether 3-4 months of hard and trying work that's completed. Drata allows collaboration and automation to make things easy for everyone.

  ### 16. Compliance platform that facilitates certification

**Rating:** 5.0/5.0 stars

**Reviewed by:** Bruno F. | Analista de Segurança da informação, Small-Business (50 or fewer emp.)

**Reviewed Date:** June 17, 2025

**What do you like best about Drata?**

The automation of controls and integration with tools like GitHub, Microsoft 365, and Azure greatly facilitate the continuous monitoring of compliance with standards such as ISO 27001 and SOC 2. The platform also features intuitive dashboards and proactive alerts that help keep the requirements updated and visible to all parties involved.

**What do you dislike about Drata?**

Learning curve for non-technical users: For team members outside the security or compliance area, the platform can be challenging at first.

**What problems is Drata solving and how is that benefiting you?**

Obtain ISO 27001 certification

  ### 17. Seamless SOC 2 Compliance with Exceptional Support from Elizabeth John!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Rachel B. | Operations and Compliance Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 13, 2025

**What do you like best about Drata?**

We had an awesome experience working with Drata, especially with Elizabeth John, who was incredibly helpful throughout the process. She made setting up everything for our SOC 2 Type 1 and 2 so much easier, guiding us every step of the way and always being available to answer questions. Elizabeth was extremely prompt, responding quickly whenever we needed support, which made the entire process feel smooth and efficient. The platform itself is intuitive and streamlined, taking a lot of the stress out of compliance. Highly recommend Drata if you’re looking for a straightforward compliance journey — and if you get the chance to work with Elizabeth, you’re in great hands!

**What do you dislike about Drata?**

The only downside we’ve encountered is the lack of integration with Oracle Cloud Infrastructure (OCI), which would make the platform even more versatile for our needs.

**What problems is Drata solving and how is that benefiting you?**

Obtaining SOC 2 Type 1 and 2

  ### 18. Drata is the lifeboat to a drowning compliance team

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jared B. | Chief Compliance Officer, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 27, 2025

**What do you like best about Drata?**

1. Drata's compliance automation is a game changer.  The available integrations allow a small compliance team to scale to an unlimited size organization.  For example, vulnerability scanning, device monitoring, data security testing, policy, network infrastructure, risk assessment, and the list goes on.  These were previously controlled and documented in independent places and my compliance team 1) struggled to manage all of the compliance evidence and 2) "pushed" the information to the SOC 2 auditor.  Drata consolidates this into one portal and the auditor has on demand access.  This truly is automated compliance.

2. Live chat support, compliance library, policy templates, risk assessment guide. The provided tools help you effectively set up a compliance program. 

3.  My vendor rep has been extremely helpful and available throughout the process.  We meet every two weeks to ensure we are progressing sufficiently.  But also, I appreciate that she understands everyone works at their own pace so is not pushing us if not necessary.

**What do you dislike about Drata?**

The vendor management  functionality is lacking.  Specifically, the questionairre function is very limited and not very useful.

**What problems is Drata solving and how is that benefiting you?**

SOC 2 type 2 certification.  We found Drata because of issues we were facing with a SOC 2 type 2 audit and I am so please we did!

  ### 19. Streamlined Compliance, Thanks to Drata’s Automation

**Rating:** 5.0/5.0 stars

**Reviewed by:** Isaac A. | System Administrator, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 23, 2025

**What do you like best about Drata?**

Drata’s automated compliance platform. From implementation to ongoing monitoring, easy to use.

**What do you dislike about Drata?**

No downside so far, and we hope for none.

**What problems is Drata solving and how is that benefiting you?**

My company, Resolut Business Solutions Ltd., has significantly benefited from Drata’s automated compliance platform. From implementation to ongoing monitoring, the experience has been impressively smooth and efficient. Drata’s automation tools have helped us reduce manual overhead and confidently maintain compliance standards with minimal disruption to our operations. Thanks to Drata, we’ve been able to focus more on our core business while staying audit-ready. Seamless implementation and real value—highly recommended.

  ### 20. Great compliance automation tool, great UX, easy to navigate.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Chris B. | Chief Technology Officer, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 21, 2025

**What do you like best about Drata?**

Drata has been great to map from the ISO 27001 framework requirements to actual controls. Whilst it doesn't replace compliance activities, it has sped up our alignment of our existing process to the ISO 27001 framework controls. The in-built policies have been great to use a base for review and sometimes wholly draft new policies. The risk assessment area is also very good for keeping and scoring risks. 

Finally the automation of controls is very good and suited to our environment (circa 150 employees + AWS infratructure). The tool makes it easy to disable tests  (where not appropriate) or exclude particular items from the test (and justify this).  The raw evidence is often very helpful for troubleshootin why our infrastructure may fail a particular test.

Their customer success folk are absolutely excellent and work with you the whole way, and the interface is very intuitive and so it's as 'self-service' as you can imagine. The onboarding of the various integrations/connections was seamless with little need for help.

During the "getting compliant", Drata has been used pretty mcuh every day by the security team in order to keep track of progress.

**What do you dislike about Drata?**

Dislike is a strong word. Given the relative youngness of the company, there are a few rough edges spread around none of which stop getting the value from the tool. It sometimes feel like the tool is geared more towards "keeping compliant" than "getting compliant" - which of course will be the vast majority of the platform's use.

Occasionally, the platform is a little limited (integrating with Enterprise Intune policies needs to be done in a very particular way) - though this we managed to overcome with the help our Customer Success manager. In other areas, we disagreed with some of the automated monitoring tests and their implementation (for example around production access to Gitlab). but that was overcome by using their API to upload evidence automatically from a small CI/CD job and disabling that single test. On the whole, we use almost every test provided by Drata out of the box.

**What problems is Drata solving and how is that benefiting you?**

It's helping ensuring that as we rework our policies, ways of working, etc, that we are algining to ISO 27001 and helping us formalise and identify activities we were already doing. Ultimately, it will help us with the ongoing compliance by prompting for regular activities to be performed, highlighting where we've departed from standards/policies immediately within 24 hours, etc.

  ### 21. Drata offers expert support!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Ralph A. | Executive Assistant | Operations, Small-Business (50 or fewer emp.)

**Reviewed Date:** January 17, 2025

**What do you like best about Drata?**

Drata streamlines compliance journey from start to audit-ready and provides professional support from its team of security and compliance experts, specially Ali!

And I would like to take a moment to commend her (Ali) for an exceptional efforts and dedication. She has consistently gone above and beyond in providing assistance, following up on meetings, and keeping us updated on Drata.

Ali’s proactive approach in ensuring that the our team remains as compliant as possible has been invaluable. Her diligence and commitment to excellence are truly commendable and have greatly contributed to the success of our compliance efforts.

We appreciate Ali’s hard work and dedication!
She's truly an asset!

**What do you dislike about Drata?**

None                                    .

**What problems is Drata solving and how is that benefiting you?**

Drata helps streamline and simplify the SOC 2 compliance. It continuously monitors the systems and collects evidence needed for SOC 2 audits, reducing manual effort. The platform offers a real-time dashboard to track your compliance status, highlighting any gaps that need attention. It provides templates and frameworks tailored for SOC 2, making it easier to implement and maintain necessary controls.

Drata integrates seamlessly with tools and platforms you already use, such as cloud providers and project management systems, ensuring smooth data collection and monitoring. The security and compliance experts offer support to help you navigate the SOC 2 process and prepare for audits effectively. By automating key tasks and providing expert support, Drata helps you achieve and maintain SOC 2 compliance more efficiently.

  ### 22. Automation and pre-filling that save time

**Rating:** 4.5/5.0 stars

**Reviewed by:** Michel L. | Head of Platforms, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 26, 2025

**What do you like best about Drata?**

Automation and pre-filling of controls.

**What do you dislike about Drata?**

The price of frameworks.
I would prefer an access price to the platform, with all frameworks allowed.

**What problems is Drata solving and how is that benefiting you?**

Pass the certifications efficiently, allowing for simplified tracking.

  ### 23. A good Compliance Automation Product

**Rating:** 4.5/5.0 stars

**Reviewed by:** Kailash M. | Information Security Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 03, 2025

**What do you like best about Drata?**

It is a good compliance automation tool that simplifies working with frameworks like SOC 2, ISO 27001, HIPAA, GDPR and many more. It has great integration capabilities, easy to use and have great customer support.

**What do you dislike about Drata?**

Some of the features are paid even if you have a subscription like access reviews.

**What problems is Drata solving and how is that benefiting you?**

Managing all the compliance activities under one umbrella and giving visibility and ease of managing.

  ### 24. The tool makes compliance much easier!

**Rating:** 4.0/5.0 stars

**Reviewed by:** G W. | Senior Director of Security, Mid-Market (51-1000 emp.)

**Reviewed Date:** March 10, 2025

**What do you like best about Drata?**

The chat support takes a bit to get used to - most engineers are quick to want to chat with someone live or read docs.... however, having a human on the other end making a quick turnaround with more nuanced support really helps.  The AI chatbot helps as well.

**What do you dislike about Drata?**

Some of the checks aren't always straight forward to determine why something failed and how to fix it.  Sometimes/many times this is because of different implementations for the check details and/or exclusions.

**What problems is Drata solving and how is that benefiting you?**

It's providing a way for us to see our estate and status and health - and (working towards) making it so that we can keep this running with minimal effort AND provide critical data to auditors and customers (as needed).

  ### 25. Drata is the way to go!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Anthony M. | Director of Audit Operations, Small-Business (50 or fewer emp.)

**Reviewed Date:** January 23, 2025

**What do you like best about Drata?**

The Drata platform is very user friendly and provides great support and help articles for users to navigate and understand the compliance requirements. The Drata team is also extremely helpful, responsive, and approachable any time they are needed.

**What do you dislike about Drata?**

I would like to see a feature that requires manual user updates (i.e. marking items ready for audit) as opposed to automatically checking off as green since this could lead to confusion.

**What problems is Drata solving and how is that benefiting you?**

Drata improves the efficiency (time and effort) in maintaining security compliance. The frequent reminders of overdue, quarterly/annual tasks, and overall status dashboard provide great value to users who do not have the time or headcount to manually keep track of these. On the auditor side, it helps with being able to quickly identify which big ticket items are missing and provide some guidance to the user on how to best address those items.

  ### 26. Easy to use, constantly improving, and easy to understand GRC platform

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Manufacturing | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 14, 2025

**What do you like best about Drata?**

It's constantly improving - the changes in the little time we have been using the platform has been enormous.

Customer Support and compliance team are also top notch - they've never not been able to help.

The amount of integrations are staggering, and they all work pretty well in my experience. We've rarely had any issues in that area.

**What do you dislike about Drata?**

Some omissions in features that would truly make it an 'all-in-on' GRC tool - such as a NC register - sometimes hold it pack a little.

**What problems is Drata solving and how is that benefiting you?**

Implementing different security frameworks, and hand holding along the way

  ### 27. Still feels newish, but works

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Logistics and Supply Chain | Mid-Market (51-1000 emp.)

**Reviewed Date:** March 19, 2025

**What do you like best about Drata?**

I like being able to review which users have access to which apps. I like the concept behind being able to match controls for different frameworks based on the tests and connections they provide. Being able to match policy acknowledgements to users is also a plus.

**What do you dislike about Drata?**

Their text editor for Policies is awful. Makes me feel like I have to write my own webpage. I was instructed to copy/paste policies in for easy version control, but the editor doesn't recognize table of contents blocks. It also doesn't have a tab system, so if you have to create things in columns, none of the data lines up.

They don't have Active Directory support beyond an agent that you would have to install to all systems. So if your company uses GPOs, it's difficult to get compliance data out of AD without using a third party tool.

It is difficult to see where some data is coming from once a connection is made. Most tests just say "Autopilot", which does not refer to Intune Autopilot. So if there's an issue with a connection or specific test, it's hard to fix.

Lastly, in order to get help with Drata you have to use their Chatbot system. The chatbot isn't bad per se, but the window/drawer that pops out for it, obscures half of the controls/buttons you need to use to allow access to your tenant for help and other actions for fixing issues. You have to actually close out of the window to get what an agent or the bot asks for, and then find a way to navigate back to that specific chat. A minimize button would be all it takes to fix this!

**What problems is Drata solving and how is that benefiting you?**

Having a single pane of glass to identify compliance issues and evidence requests makes auditing much easier.

  ### 28. Great Experience

**Rating:** 5.0/5.0 stars

**Reviewed by:** Rob H. | Senior DevOps Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** July 02, 2025

**What do you like best about Drata?**

Drata helps organize all your documentation like a dream. Theres a ton of time saved figuring out related controls. The integrations make tracking changes much easier. I have used this platform everyday for the past few months preparing for our PCI compliance audit. After all the initial heavy lifting I can see that huge amount of burden relief this product offers its clients.

**What do you dislike about Drata?**

There are some features that feel lacking such as, no way to track requirements that are in progress state in the midst of an audit in audit hub.

**What problems is Drata solving and how is that benefiting you?**

Drata helps monitor realtime environment compliance.

  ### 29. Invaluable Tool for Security

**Rating:** 4.5/5.0 stars

**Reviewed by:** Frank W. | Head of Security &amp; IT, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 23, 2025

**What do you like best about Drata?**

Really helped to present a far more polished experience to customers and prospects. The implementing of Safebase saved the Security and Sales teams a lot of time because prospects got access to all the security information in one step, mitigating follow up questions.

**What do you dislike about Drata?**

A little more flexibility regarding content and Trust Center layout would be helpful. 
Like being able to publish articles that can be linked with a static link vs. having to create and upload a document.

**What problems is Drata solving and how is that benefiting you?**

Provide security related information to prospects and customers

  ### 30. Simple and effective for people new to compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** March 27, 2025

**What do you like best about Drata?**

Drata presents all the tasks and requirements you need to do for your chosen compliance framework in a very clear way, with detailed descriptions to help you understand what the auditor will need from you. The support and advice from the team has also been high quality and responsive. The integrations also automate a huge amount of the evidence collection and monitoring.

**What do you dislike about Drata?**

As a first time user of a fully fledged GRC platform, there is very little to dislike. The suggest controls and evidence do focus on what will suffice for the majority but there could be more built-in options for alternatives - however the support teams and chatbot are quick to suggest these when asked.

**What problems is Drata solving and how is that benefiting you?**

Drata has helped centralise the compliance tasks and reporting as well as helped with employee onboarding. The interface it provides for the auditors makes the audit's much easier.

  ### 31. Industry leader for a reason

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 24, 2025

**What do you like best about Drata?**

It's fairly intuitive and quick to deploy, implement and maintain. The white glove onboarding service is really effective, our Senior CSM Amanda made sure not only that we're able to implement what we planned, but also that we're familiar with additional capabilities that we could benefit, which are included in the product.

**What do you dislike about Drata?**

It's pricier than its competitors, aiming at high-end.

**What problems is Drata solving and how is that benefiting you?**

Safebase helps us offload some manual labor of our front-line teams, by providing easier access of our customers to documentation that we share with them.

  ### 32. Customer Service

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** September 10, 2025

**What do you like best about Drata?**

Terrious was prompt and clear in communication.  He understood the issue and very quickly suggested a workaround.

**What do you dislike about Drata?**

Unfortunately, it was a real bug in the system

**What problems is Drata solving and how is that benefiting you?**

Gathering all evidence and continuous monitoring of controls.  Though we have discovered that depending on control, the monitoring can be suspect.  Meaning even though the control is 'green' , monitoring did not catch errors.

  ### 33. Easy automation for your Certification needs.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Blagoy K. | Head of Business Projects, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 13, 2025

**What do you like best about Drata?**

It is automated platform that now includes SafeBase and the Compliance Accelerator.

**What do you dislike about Drata?**

Little hard to navigate in the beginning but it becomes easy to operate afterwards.

**What problems is Drata solving and how is that benefiting you?**

Automation in Certification preparation by implementing controls and internal Auditing.

  ### 34. GRC platform for companies that take risk management seriously

**Rating:** 5.0/5.0 stars

**Reviewed by:** Ernest P. | Partner, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 23, 2024

**What do you like best about Drata?**

It is a very complete package. My team and I do audits and risk management integration daily. It is straight forward to work with. Everything is there, and it is so convenient for us to work with. Risk Management within an organization is a discipline, a commitment within the organization that risk management is more important than internet access. GRC becomes the public face of the collective strategic risk initiatives. It is a place to share risk efforts with auditors, regulators, clients and leads.

The platform is complex, but it makes sense in it's role within risk management.

**What do you dislike about Drata?**

The interaction with auditors focuses around the DCF (Drata Control Framework) rather than a specific framework control (like SOC2, ISO, etc). I know that Drata is using that to increase coverage of more frameworks. However, forcing auditors to use DCF rather than an ISO control is a bit of a nuisance. 

Despite that, auditors have figured it out. This is a small inconvenience and not a major stopper.

**What problems is Drata solving and how is that benefiting you?**

GRC is an agnostic platform that becomes the single source of truth for risk management. If this is accepted, customers, leads, regulators, auditors and more, never have to go further than trusting the information displayed by Drata.

It becomes a place to shape the forward looking risk mission of an organization and then share that with others.

It has to be a trusted platform onto which controls, standards, policies, evidence and SOPs are published. It needs to be the definitive source of this information and this has to be trusted by all without question. Drata is critically used for clients acheiving and maintaining regulatory compliance and security certifications year over year. It has to be a credible and agnostic platform, trusted by external reviewers and auditors. 

It excels at those requirements.

  ### 35. Excellent Customer Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** October 16, 2025

**What do you like best about Drata?**

Drata's customer support & how it can help customers have a better picture of their compliance

**What do you dislike about Drata?**

At the moment, nothing. Their customer support is top notch.

**What problems is Drata solving and how is that benefiting you?**

It is allowing me to manage my customer's Drata instances and help them achieve compliance.

  ### 36. Effortless Compliance Gap Detection and Audit Readiness

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Consulting | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 06, 2026

**What do you like best about Drata?**

The platform makes it very easy to identify compliance gaps and ensure you are audit-ready.

**What do you dislike about Drata?**

The onboarding process can be quite involved depending on the existing compliance program.

**What problems is Drata solving and how is that benefiting you?**

Drata makes audit readiness and control validation simple and centralized.

**Official Response from Lizzie Higgins:**

> Thank you for sharing how Drata has made audit readiness and control validation simple and centralized for you. We're committed to providing a seamless experience for our users, and appreciate the onboarding feedback. Keep up the great work! 

  ### 37. Drata is Great with Fantastic Support!

**Rating:** 4.5/5.0 stars

**Reviewed by:** Sam S. | Director of Operations, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 19, 2024

**What do you like best about Drata?**

When it comes to Drata there are two things that have left a lasting impression: continual product improvement and a remarkable level of support.

I've seen Drata push out new features and improvements quarter after quarter, and I am blown away by their growth even after only a year of use.  Their "Trust Center" as a resource as well as Docusign and Salesforce integrations help automate and streamline our internal processes.

Above that our CSM, Benjamin Chau, is phenominal.  His professionlism, his can-do attitude, and availability makes him stand out against other CS personnel I've worked with in the past.  There was more than one occasion Benjamin dropped what he was doing and joined one of our calls without hesitation to ensure our success, making us feel truly valued both as a customer and a partner.

**What do you dislike about Drata?**

A small gripe I have is there were some technical nuances that were not clearly mentioned within the help articles when attempting to self-service the SFDC and Docusign connection.  This created small hiccups in the integration process, but Benjamin was a strategic partner helping iron our the nuances.

**What problems is Drata solving and how is that benefiting you?**

Speeding up prospective sales cycle by bypassing NDA requirements

  ### 38. The Drata Experience

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.)

**Reviewed Date:** April 20, 2023

**What do you like best about Drata?**

The UI of the platform is intuitive. Technical and compliance support is responsive and helpful when questions and issues arise (shout out to Sean and Dante!). Our CSM, Alex Bank, is easy to work with as well!

**What do you dislike about Drata?**

Some features are still desired, but Drata provides a roadmap available to customers to view and rate feature requests on the importance to increase priority in development.

**What problems is Drata solving and how is that benefiting you?**

Drata provides a platform for continuous compliance monitoring against existing frameworks such as ISO and SOC 2. This allows our compliance team to get an overview of our compliance posture throughout the year as well as set reminders for evidence gathering. Drata also provides a helpful feature that allows customers to contact compliance experts for clarification and questions.

  ### 39. Great platform. Customer Support is a true differentiator.

**Rating:** 1.5/5.0 stars

**Reviewed by:** Dennis A. | Founder &amp; CEO, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 10, 2025

**What do you like best about Drata?**

Drata is very intuitive and includes a plethora of features and functionality for the money. I especially like the policy templates.

**What do you dislike about Drata?**

The Drata Agent, which is a really nice piece of functionality, doesn't play well with some remote management systems. It would be nice if Drata could figure out how to fix that.

**What problems is Drata solving and how is that benefiting you?**

Most of my clients are pursuing and preparing for SOC 2 audits. Using Drata and the automation and integrations really help streamline the entire process. Something else worth mentioning. Auditing firms will often times quote a quicker audit turnaround if you use an automation tool such as Drata.

**Official Response from Ashley Hyman:**

> Hi Dennis, Thank you for sharing your feedback. I know you and I have been in contact to ensure you have the proper resources via your account team to address your concerns. Our CTO has also reached out to set up time to review the issue you are experiencing. I assure you we will work with you to find a solution and ensure your experience moving forward exceeds your expectations.
Thank you, again!
Ashley Hyman
VP of Customer Experience 

  ### 40. For Amazingly fast GRC process.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Pramod K. | Consultant, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 18, 2024

**What do you like best about Drata?**

It pools all the users from cloud, pools evidences from all events, gives rating, and easily integrates everything, makes the life comfortable every step of the way. Its easy to implement any compliance if we have this tool. 

Have been using for 2 days, its very intutive and easy to work with. gives all the required documents and criterias needed in less than a min. Gives lot of automtion and customisation with complete ease. Well developed tool to handle GRC, i would recomend everyone to use this and make your process faster and easier.

They have 24/5 customer support, who works like you buddies at work. supporting all the way in your accomplishments.

**What do you dislike about Drata?**

Nothing much yet, in less than 2 days am able to handle everything very esily, its a great tool. will comeback and write if there is anything that i feel needs to be updated.

**What problems is Drata solving and how is that benefiting you?**

getting complaint and an easy approch for the same.

  ### 41. A beginner's guide to Drata

**Rating:** 4.5/5.0 stars

**Reviewed by:** Federick F. | Senior Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 17, 2025

**What do you like best about Drata?**

What makes Drata helpful is the overall consolidation and mapping of the security standards and technical requirements needed to achieve compliance. There are functionalities too that can automate tasks for compliance evaluation which makes it very helpful in analyzing the gaps as to what needs remediation.

**What do you dislike about Drata?**

There are certain options that can be quite challenging to integrate and this needs to be head leveled in the documentation procedures.

**What problems is Drata solving and how is that benefiting you?**

Evaluation and mapping of our current security posture which is needed for our ISMS certification. The ability to automate the evidence collection, control monitoring, and documentation for frameworks like SOC 2, ISO 27001, PCI DSS, HIPAA, and GDPR are hepful. Although there are no one-size fits all in security evaluation, the pre-built frameworks and controls are sufficient to come of with substantial evaluation for a security audit.

  ### 42. Great product

**Rating:** 4.5/5.0 stars

**Reviewed by:** michael o. | IT Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 07, 2025

**What do you like best about Drata?**

Sales was straight forward to deal with, support was good, product is intuitive and easy to use, pricing was aggressive

**What do you dislike about Drata?**

the one drawback to implementation was some of their support wants you to upload a video to troubleshoot where i prefer to troubleshoot on my own or live troubleshoot

one of their engineers was kind enough to provide data and resolve the issue

**What problems is Drata solving and how is that benefiting you?**

we are using their software for compliance

  ### 43. Excellence: Your Comprehensive Partner in SOC 2 Compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Tina M. | Information Security Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 15, 2024

**What do you like best about Drata?**

Our Customer Success  Representative, Rachael has been extremely helpful, patient, and quite discerning; able to decipher what issues I am encountering and provides spot-on instructions as well as documentation to help me continue to move forward.  

Truly, I cannot say enough of the appreciation I have for the Drata team that has been supporting me and the company in working toward our Soc2.

Rachael is focused and dedicated to our company's success and guides me with every step and follows up with documentation for me to review.  

I have stated this before but believe it is well worth pointing out again, Drata is a well thought out platform and easy to use.  The integrations with other platforms have been well documented making the setup flawless.  

Anytime I've reached out to Drata's support team, without fail, they quickly assist and get me exactly what my company needs to keep us progressing forward.  

I use the platform on a daily basis and highly recommend using this platform.

**What do you dislike about Drata?**

I've been using the Drata platform for a year and have yet to find anything that has been a pain point.

**What problems is Drata solving and how is that benefiting you?**

To single out one area where I've noticed a remarkable change within our company is the adoption of a security mindset and a deep focus of best practices.

  ### 44. Compliance made much easier through Drata

**Rating:** 5.0/5.0 stars

**Reviewed by:** Lola K. | Cyber Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 07, 2022

**What do you like best about Drata?**

The feature I've enjoyed the most is having centralized and detailed visibility of all our personnel, assets and also being able to see what compliance requirements need our attention. Drata's customer service has been excellent, even being available to chat in real time late at night (EST time) and offering clear instructions.
Our representative Noah Barnett  meets with us frequently to address any issues we might have, get feedback, and give us excellent support on our SOC 2 type 2 compliance process. 
Using Drata as our security compliance platform was an excellent decision and has made the compliance process much more manageable. Highly recommend it!

**What do you dislike about Drata?**

There isn't anything significant that I dislike about Drata (I'm the person in charge of using the platform). My latest request/feedback is that I would love it if they had the option for dark mode in their UI, and I am confident the feature will be made available soon!

**What problems is Drata solving and how is that benefiting you?**

One crucial part for any compliance (and security) issues is having detailed and centralized visibility of all company assets and through all integrations available in Drata, we can have full control of what is necessary to achieve not only compliance, but also security best practices that benefit our company and our clients as well.

**Official Response from Ashley Hyman:**

> Hi Lola!
So happy to hear you've had such a positive experience with Drata and my team. Customer experience is of utmost importance to us--from our real time support chat to your meetings with your CSM (Isn't Noah just the best?! :) ). 
I know your request for dark mode has been heard and many on the team were excited about---keep your eye out for product updates. We'll keep you informed as it it prioritized!

Thank so much!
Ashley Hyman
VP of Customer Success

  ### 45. Great tool for compliance automation

**Rating:** 5.0/5.0 stars

**Reviewed by:** Aishwarya M. | Deputy Head of Infrastructure and Security, Mid-Market (51-1000 emp.)

**Reviewed Date:** June 23, 2025

**What do you like best about Drata?**

Continuous monitoring, Drata policy management templates, Trust center and AIQA

**What do you dislike about Drata?**

Some integrations errors happen and those are difficult to debug

**What problems is Drata solving and how is that benefiting you?**

We are using Drata as our GRC automation tool to help with annual certifications and audits. It is easy to keep track of monitoring, risk assessments and everything in one centralized place.

  ### 46. SOC2 compliance experience with Drata

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 18, 2025

**What do you like best about Drata?**

Drata is pretty easy to use once you understand how the user interface is setup. The detailed guide in every step has been very helpful.

**What do you dislike about Drata?**

Initially the UI was a little confusing. I can never talk to a live person under help option right away but they have a good customer team who are easy to reach through email.

**What problems is Drata solving and how is that benefiting you?**

It streamlines the compliance process and reduces manual effort.

  ### 47. good support

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** October 30, 2025

**What do you like best about Drata?**

Excellent support and a good feature set.

**What do you dislike about Drata?**

missing some integrations that would helpful such as elmo and phished.

**What problems is Drata solving and how is that benefiting you?**

ISO Certification and management client questionnaire automation

  ### 48. Drata is simplifying Compliance and certification

**Rating:** 4.0/5.0 stars

**Reviewed by:** Jeremy M. | Director of IT, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 30, 2025

**What do you like best about Drata?**

There are real people there to help me along the way.  Our company is going through SOC2 Type 2 comliance for the first time and learning a lot.   Drata is there to help with every step of the process.  The Patform is easy to use, implemented quickly, has good customer support, and easily integrates with other tools to simplify the process.

**What do you dislike about Drata?**

I feel like there are parts of the platform which feel disconnected and confusing.  We have to use the tool everyday.  We are also missing some of the integrations to tools we use daily.

**What problems is Drata solving and how is that benefiting you?**

They are solving the SOC2 Type2 puzzle for us providing a nice platform to use throughout the process.

  ### 49. Streamlined the SOC2 requirements from Scratch

**Rating:** 5.0/5.0 stars

**Reviewed by:** Neil W. | CTO, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 21, 2024

**What do you like best about Drata?**

They really streamlined and automated alot of the tasks that require SOC 2 compliance. They also send reminders and have due dates around tasks needing to be completed, so for smaller companies with limited resources, it really helps to make sure we are continually staying compliant. We continue to login and use the system monthly and their customer support is extremely responsive and helpful when it is necesary.

**What do you dislike about Drata?**

The main thing I have trouble with in Drata is the expansive set of different frameworks they support and me wanting to align to all of them, but with a small team I can not stay on top of it all, but for larger companies this would be a benefit.

**What problems is Drata solving and how is that benefiting you?**

Unknown requirements when first starting out and understanding what the compliance standards are  along with gathering of evidence to satisfy the auditors.

  ### 50. An Amazing Experience!!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** May 14, 2024

**What do you like best about Drata?**

I have been thoroughly impressed with Drata. The dashboard and modules provided are clear and concise which creates a clear learning experience and offers precise insights into our progress towards achieving security compliance. The customer service provided by Drata has exceeded my expectations. As someone who started the SOC2 compliance journey with very little knowledge of security protocols, I was lucky to have an outstanding Customer Success Manager guiding me through every step. Elizabeth John's expertise were evident in her explanation of each process during our meetings, allowing me to grasp concepts gradually. She has been instrumental in assisting me at every step.  I cannot emphasize enough how invaluable her support has been. I recommend Drata to anyone looking for comprehensive security compliance solutions!

**What do you dislike about Drata?**

I cannot express any negatives about my experience with Drata.

**What problems is Drata solving and how is that benefiting you?**

As a startup operating in the cloud environment, ensuring security is extremely important to our success.  Navigating security protocol  standards can be confusing, especially for a cloud startup with very limited resources. Drata's platform offers clear guidance, streamlining the process of achieving  SOC 2 compliance.  As we scale our operations, maintaining visibility and control over our security posture becomes increasingly challenging. Drata's dashboard provides real-time overview into our security posture, identifying vulnerabilities and ensuring that we remain proactive in mitigating risks.  Drata's Trust Center enable us to  instill confidence in our customers and enhance our credibility.  Drata has been an invaluable partner in our journey towards building a secure and compliant platform.


## Drata Discussions
  - [Hard Disk Encryption](https://www.g2.com/discussions/hard-disk-encryption) - 1 comment, 2 upvotes
  - [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote
  - [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote
  - [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote
  - [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote

- [View Drata pricing details and edition comparison](https://www.g2.com/products/drata/reviews?page=4&section=pricing&secure%5Bexpires_at%5D=2026-07-27+14%3A45%3A10+-0500&secure%5Bsession_id%5D=f854af99-4337-4c64-94ad-38ececec37c5&secure%5Btoken%5D=b9c6acf5fb6c16911be9dc987bdbc3f56f391bd0c46710354f77a8f960a9cc3c&format=llm_user)
## Drata Integrations
  - [1Password](https://www.g2.com/products/1password/reviews)
  - [360Learning](https://www.g2.com/products/360learning/reviews)
  - [ADP Workforce Now](https://www.g2.com/products/adp-workforce-now/reviews)
  - [Agentforce Sales (formerly Salesforce Sales Cloud)](https://www.g2.com/products/agentforce-sales-formerly-salesforce-sales-cloud/reviews)
  - [Aha!](https://www.g2.com/products/aha/reviews)
  - [Aikido Security](https://www.g2.com/products/aikido-security/reviews)
  - [AlexisHR](https://www.g2.com/products/alexishr/reviews)
  - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews)
  - [Arnica](https://www.g2.com/products/arnica/reviews)
  - [Asana](https://www.g2.com/products/asana/reviews)
  - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews)
  - [AWS CodeCommit](https://www.g2.com/products/aws-codecommit/reviews)
  - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews)
  - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews)
  - [AWS Organizations](https://www.g2.com/products/aws-organizations/reviews)
  - [Azure Portal](https://www.g2.com/products/azure-portal/reviews)
  - [Azure SQL Database](https://www.g2.com/products/azure-sql-database/reviews)
  - [BambooHR](https://www.g2.com/products/bamboohr/reviews)
  - [Basecamp](https://www.g2.com/products/basecamp/reviews)
  - [Bitbucket](https://www.g2.com/products/bitbucket/reviews)
  - [Bitwarden](https://www.g2.com/products/bitwarden/reviews)
  - [Box](https://www.g2.com/products/box/reviews)
  - [Certn](https://www.g2.com/products/certn/reviews)
  - [CharlieHR](https://www.g2.com/products/charliehr/reviews)
  - [ChartHop](https://www.g2.com/products/charthop/reviews)
  - [Checkr](https://www.g2.com/products/checkr/reviews)
  - [Checkr](https://www.g2.com/products/checkr-inc-checkr/reviews)
  - [CircleCI](https://www.g2.com/products/circleci/reviews)
  - [ClearCompany](https://www.g2.com/products/clearcompany/reviews)
  - [ClearFeed](https://www.g2.com/products/clearfeed/reviews)
  - [ClickUp](https://www.g2.com/products/clickup/reviews)
  - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews)
  - [Confluence](https://www.g2.com/products/confluence/reviews)
  - [Cornerstone](https://www.g2.com/products/cornerstone-cornerstone/reviews)
  - [Coursera for Business](https://www.g2.com/products/coursera-for-business/reviews)
  - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews)
  - [CrowdStrike Falcon Exposure Management](https://www.g2.com/products/crowdstrike-falcon-exposure-management/reviews)
  - [CyberArk Workforce Identity](https://www.g2.com/products/cyberark-workforce-identity/reviews)
  - [Darwinbox](https://www.g2.com/products/darwinbox/reviews)
  - [Datadog](https://www.g2.com/products/datadog/reviews)
  - [Dayforce](https://www.g2.com/products/dayforce/reviews)
  - [Deel HR](https://www.g2.com/products/deel-hr/reviews)
  - [Docebo](https://www.g2.com/products/docebo/reviews)
  - [Docusign](https://www.g2.com/products/docusign/reviews)
  - [Dropbox](https://www.g2.com/products/dropbox/reviews)
  - [Duo](https://www.g2.com/products/duo/reviews)
  - [EasyLlama](https://www.g2.com/products/easyllama/reviews)
  - [Employment Hero](https://www.g2.com/products/employment-hero/reviews)
  - [Factorial](https://www.g2.com/products/factorial/reviews)
  - [Fibery](https://www.g2.com/products/fibery/reviews)
  - [Freshdesk](https://www.g2.com/products/freshdesk/reviews)
  - [Freshservice](https://www.g2.com/products/freshservice/reviews)
  - [Freshteam by Freshworks](https://www.g2.com/products/freshteam-by-freshworks/reviews)
  - [Front](https://www.g2.com/products/front/reviews)
  - [GitHub](https://www.g2.com/products/github/reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews)
  - [Go1](https://www.g2.com/products/go1-go1/reviews)
  - [GoodHire (a Checkr company)](https://www.g2.com/products/goodhire-a-checkr-company/reviews)
  - [Google Cloud Run](https://www.g2.com/products/google-cloud-run/reviews)
  - [Google Workspace](https://www.g2.com/products/google-workspace/reviews)
  - [Gusto](https://www.g2.com/products/gusto/reviews)
  - [Harness](https://www.g2.com/products/harness-wealth-harness/reviews)
  - [Height](https://www.g2.com/products/height/reviews)
  - [Hexnode UEM](https://www.g2.com/products/hexnode-uem/reviews)
  - [HiBob HRIS](https://www.g2.com/products/hibob-hris/reviews)
  - [HireRight](https://www.g2.com/products/hireright/reviews)
  - [Hive](https://www.g2.com/products/hive-hive-hive/reviews)
  - [Humaans](https://www.g2.com/products/humaans/reviews)
  - [Huntress Managed Security Awareness Training](https://www.g2.com/products/huntress-managed-security-awareness-training/reviews)
  - [Hyperproof](https://www.g2.com/products/hyperproof/reviews)
  - [Infosec IQ](https://www.g2.com/products/infosec-iq/reviews)
  - [Insperity](https://www.g2.com/products/insperity/reviews)
  - [Intellihr.com](https://www.g2.com/products/intellihr-com/reviews)
  - [Intruder](https://www.g2.com/products/intruder/reviews)
  - [Ironclad](https://www.g2.com/products/ironclad/reviews)
  - [Iru](https://www.g2.com/products/iru/reviews)
  - [Jamf](https://www.g2.com/products/jamf/reviews)
  - [Jenkins](https://www.g2.com/products/jenkins/reviews)
  - [Jira](https://www.g2.com/products/jira/reviews)
  - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews)
  - [Jit](https://www.g2.com/products/jit/reviews)
  - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews)
  - [Justworks](https://www.g2.com/products/justworks/reviews)
  - [Kallidus](https://www.g2.com/products/kallidus/reviews)
  - [KarmaCheck](https://www.g2.com/products/karmacheck/reviews)
  - [Keka](https://www.g2.com/products/keka/reviews)
  - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews)
  - [LastPass](https://www.g2.com/products/lastpass/reviews)
  - [Lattice](https://www.g2.com/products/lattice-lattice/reviews)
  - [Linear](https://www.g2.com/products/linear/reviews)
  - [LinkedIn Learning](https://www.g2.com/products/linkedin-linkedin-learning/reviews)
  - [Lukka](https://www.g2.com/products/lukka/reviews)
  - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews)
  - [Microsoft Defender Vulnerability Management](https://www.g2.com/products/microsoft-defender-vulnerability-management/reviews)
  - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews)
  - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews)
  - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews)
  - [miniOrange Identity &amp; Access Management](https://www.g2.com/products/miniorange-identity-access-management/reviews)
  - [Namely](https://www.g2.com/products/namely/reviews)
  - [New Relic](https://www.g2.com/products/new-relic/reviews)
  - [NinjaOne](https://www.g2.com/products/ninjaone/reviews)
  - [Notion](https://www.g2.com/products/notion/reviews)
  - [Objectivity/DB](https://www.g2.com/products/objectivity-db/reviews)
  - [Officient](https://www.g2.com/products/officient/reviews)
  - [Okta](https://www.g2.com/products/okta/reviews)
  - [OneLogin](https://www.g2.com/products/onelogin/reviews)
  - [Orca](https://www.g2.com/products/cortez-labs-orca/reviews)
  - [Oyster](https://www.g2.com/products/oyster-oyster/reviews)
  - [Paychex](https://www.g2.com/products/paychex/reviews)
  - [Paycor](https://www.g2.com/products/paycor/reviews)
  - [Paylocity](https://www.g2.com/products/paylocity/reviews)
  - [PeopleFluent Learning](https://www.g2.com/products/peoplefluent-peoplefluent-learning/reviews)
  - [Personio](https://www.g2.com/products/personio/reviews)
  - [Qualys VM](https://www.g2.com/products/qualys-vm/reviews)
  - [Rapid7 Managed Detection and Response Services](https://www.g2.com/products/rapid7-managed-detection-and-response-services/reviews)
  - [Rippling](https://www.g2.com/products/rippling/reviews)
  - [SafeBase](https://www.g2.com/products/safebase/reviews)
  - [Sage HR](https://www.g2.com/products/sage-hr/reviews)
  - [Salesforce Heroku](https://www.g2.com/products/salesforce-heroku/reviews)
  - [SAP SuccessFactors Onboarding](https://www.g2.com/products/sap-successfactors-onboarding/reviews)
  - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews)
  - [SentinelOne Singularity Vulnerability Management](https://www.g2.com/products/sentinelone-singularity-vulnerability-management/reviews)
  - [ServiceNow Customer Service Management](https://www.g2.com/products/servicenow-customer-service-management/reviews)
  - [Shortcut](https://www.g2.com/products/shortcut/reviews)
  - [Slack](https://www.g2.com/products/slack/reviews)
  - [Slack Connector for Jira](https://www.g2.com/products/slack-connector-for-jira/reviews)
  - [Snyk](https://www.g2.com/products/snyk/reviews)
  - [Swif.ai](https://www.g2.com/products/swif-ai/reviews)
  - [TeamWork](https://www.g2.com/products/teamwork-2025-01-31/reviews)
  - [Tenable Vulnerability Management](https://www.g2.com/products/tenable-vulnerability-management/reviews)
  - [Tines](https://www.g2.com/products/tines/reviews)
  - [Torq](https://www.g2.com/products/torq-ai-torq/reviews)
  - [Travis CI](https://www.g2.com/products/travis-ci/reviews)
  - [Tray.ai](https://www.g2.com/products/tray-ai/reviews)
  - [Trello](https://www.g2.com/products/trello/reviews)
  - [TriNet](https://www.g2.com/products/trinet/reviews)
  - [Udemy Business](https://www.g2.com/products/udemy-business/reviews)
  - [UKG Pro](https://www.g2.com/products/ukg-pro/reviews)
  - [UKG Ready](https://www.g2.com/products/ukg-ready/reviews)
  - [Upwind](https://www.g2.com/products/upwind/reviews)
  - [Vetty](https://www.g2.com/products/vetty/reviews)
  - [Wiz](https://www.g2.com/products/wiz-wiz/reviews)
  - [Wiz Code](https://www.g2.com/products/wiz-code/reviews)
  - [Workday Learning](https://www.g2.com/products/workday-learning/reviews)
  - [Workspace ONE](https://www.g2.com/products/workspace-one/reviews)
  - [Wrike](https://www.g2.com/products/wrike/reviews)
  - [XFA](https://www.g2.com/products/xfa/reviews)
  - [Zendesk for Customer Service](https://www.g2.com/products/zendesk-for-customer-service/reviews)
  - [Zip](https://www.g2.com/products/zip-2025-09-24/reviews)
  - [Zoho BugTracker](https://www.g2.com/products/zoho-bugtracker/reviews)
  - [Zoho CRM](https://www.g2.com/products/zoho-crm/reviews)
  - [Zoho Desk](https://www.g2.com/products/zoho-desk/reviews)
  - [Zoho People](https://www.g2.com/products/zoho-people/reviews)

## Drata Features
**Security**
- Compliance Monitoring
- Anomoly Detection
- Cloud Gap Analytics

**Functionality**
- Questionnaire Templates
- User Access Control

**Generative AI**
- AI Text Summarization
- AI Text Generation

**Generative AI**
- AI Text Generation
- AI Text Summarization

**AI Compliance**
- Regulatory Reporting
- Automated Compliance
- Audit Trails

**Agentic AI - Vendor Management**
- Decision Making

**Revenue Recognition**
- Usage Tracking
- Deferred Revenue
- Revenue Accrual

**Compliance**
- Governance
- Data Governance
- Sensitive Data Compliance

**Risk assessment**
- Risk Scoring
- Monitoring And Alerts
- AI Monitoring

**Workflows - Audit Management**
- Audit Trail
- Recommendations
- Collaboration Tools
- Integrations
- Planning & Scheduling

**Risk Management & Monitoring**
- AI Risk Management
- Real-time Monitoring

**Generative AI - Security Compliance**
- Predictive Risk
- Automated Documentation

**Platform AI Features - Policy Management**
- Reports
- Workflow Management

**Security**
- Data Security
- Data loss Prevention
- Security Auditing

**Administration**
- Policy Enforcement
- Auditing
- Workflow Management

**Documentation - Audit Management**
- Templates & Forms
- Checklists

**AI Lifecycle Management**
- Lifecycle Automation

**Generative AI - Vendor Security and Privacy Assessment**
- Text Summarization
- Text Generation

**Identity**
- SSO

**Reporting & Analytics - Audit Management**
- Dashboard
- Audit Performance
- Industry Compliance

**Access Control and Security**
- Pole-based Access Control (RBAC)

**Collaboration and Communication **
- Model Sharing and Reuse

**Agentic AI - AI Governance Tools**
- Autonomous Task Execution
- Multi-step Planning
- Cross-system Integration
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance
- Decision Making

## Top Drata Alternatives
  - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,657 reviews)
  - [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) - 4.9/5.0 (1,311 reviews)
  - [Hyperproof](https://www.g2.com/products/hyperproof/reviews) - 4.5/5.0 (217 reviews)

