Comprehensive alerts on tasks and status pf controls. Could not have passed SOC2 audit without Drata. Initial onboarding was difficult as the platform is not intuitive, especially for folks new to the CRG arena. Good documention but not easy to formulate searches as a newbie. Review collected by and hosted on G2.com.

Usage is not intuitive, UI is OK

Support is excellent Review collected by and hosted on G2.com.

What I like best is the Integration with MS365, CERTN, Defender, Meraki ect. the automation makes it easier to manage several endpoints and users. Review collected by and hosted on G2.com.

Clearly defined policy renewal steps should be given prior to renewal, simply renewing a policy without updates changes the version of the document eg: 1.1, 1.2 and the tables inside don't reflect the changes. there's no point in doing the renew without updates as the table below has not reflected the version change. Review collected by and hosted on G2.com.

My favorite part of using Drata is that it provides a clear, concise playbook to work off of when I am going about organizing my evidence for my compliance framework. Review collected by and hosted on G2.com.

The user interface is not always as intuitive as it could be. There are times when I am not sure where to find what I am looking for even after using the site off and on for over a year. Review collected by and hosted on G2.com.

This platform is excellent for monitoring and creating your policies, but what truly stands out is the helpfulness of their professionals. Review collected by and hosted on G2.com.

During the startup phase, you are likely to experience an overwhelming amount of information. The sheer volume can make the process feel far from intuitive. Review collected by and hosted on G2.com.

Before the update it was easy to access and find certain sop's and IC's Review collected by and hosted on G2.com.

With the new update, something about it feels a little uneasy to use, and it’s harder to find things under certain departments. Review collected by and hosted on G2.com.

I like how Drata automates compliance and provides real-time visibility, making audit readiness continuous instead of manual and stressful. Review collected by and hosted on G2.com.

Sometimes the UI can feel overwhelming, and certain integrations or customizations require more manual effort than expected. Review collected by and hosted on G2.com.

Drata supports the most common compliance frameworks. It effectively translates compliance requirements into readable control items. Each control item consists of a set of tests that are defined with clear specifications. For example, if an organization wants to adhere to the compliance NIST CSF, personnel responsible for achieving compliance simply focus on the control items of target compliance that Drata organized. Some tests can be shared across multiple compliance frameworks! It is easier for them to implement other compliances more efficiently in the future. Secondly, the most impressive design is the capability of automated evidence collection. With easy configuration on integrations to popular platforms, it can save effort when collecting the evidence of control items. To manage the overall readiness of compliance continuously, Drata provides efficient monitoring of controls, the status of tests, and the integrity of essential evidence. It provides users with real-time status and benchmarks in the dashboard. That helps internal or external auditors to track progress, identify gaps, and demonstrate compliance to key stakeholders. Finally, when I was new to Drata in the beginning, the Drata support team consistently delivered effective solutions to customer issues. The experience of customer support really touched my heart. Review collected by and hosted on G2.com.

The automated evidence-collection feature is a very productive design. However, it has both pros and cons. The limitations on integrations may become a burden if the target platform is not on the support list. Another thing that needs to be improved is the instructions for fixing the failed/error tests. Sometimes, I can not directly understand the root cause of the failed test. I hope the error information or solution instructions become more transparent or readable. Review collected by and hosted on G2.com.

Intuitive, integrations, support community. Review collected by and hosted on G2.com.

Learning how to navigate the interface, resolving custom controls, policies and associated tests. Review collected by and hosted on G2.com.

Simple & straight forward design. Easy to understand what I need to do. And what's my responsibility. Easy to sign and consume info. I like the gamification as well. Review collected by and hosted on G2.com.

Sometimes it's difficult to understand just how much signatures one need to go through, it's duteous and tiring to go over paper works- especailly important ones. So I'd have loved to have a AI summary or maybe highlighting of certain areas that I would need to focus on. Review collected by and hosted on G2.com.

I feel like it's well organized. Also includes corporate documentation. That is a big help. Review collected by and hosted on G2.com.

There is a lot in there. Sometimes it's hard to find things. Review collected by and hosted on G2.com.