The most valuable feature for us is the continuous monitoring and real-time alerts, which provide reassurance that our controls are consistently effective. Drata also simplifies evidence collection and audit preparation, helping us save time and reduce the risk of errors. As a result, we are able to maintain compliance proactively and dedicate more attention to strategic security improvements instead of getting bogged down by administrative work.

In terms of usability, the platform is highly intuitive and user-friendly, making it easy for even new team members to navigate and complete tasks. The implementation process was smooth and quick, thanks to clear instructions and minimal disruption to our existing workflows. Drata’s integration with our current tools and systems is seamless, which cuts down on manual work and keeps our data consistent across platforms. The customer support team is always responsive, knowledgeable, and eager to help, which greatly enhances our overall experience. We rely on Drata daily for monitoring and compliance activities, and it has become an essential part of our security operations. Review collected by and hosted on G2.com.

It would be great to have more available integrations, for example with popular observability tools such as Grafana. Review collected by and hosted on G2.com.

As a relatively small organisation, Drata has truly been a game-changer for us. Without a large compliance team, we have still been able to make steady progress toward our compliance goals, thanks to the platform. Working alongside a responsive auditing partner, we found the initial implementation straightforward and easy to get started with. The automation features for evidence collection and continuous monitoring have saved us countless hours of manual effort. We rely on Drata daily to ensure that any issues are promptly reported to the appropriate team and resolved quickly. We also value how smoothly it integrates with our core tools, such as AWS, Microsoft 365, and Intune, and how it offers clear dashboards and guided workflows that make preparing for audits much less stressful. Review collected by and hosted on G2.com.

The only real negative we’ve experienced is that support can sometimes be slower than we would like to respond. However, this has been more than mitigated by our highly responsive Customer Success Manager, who has consistently gone above and beyond to keep us moving forward. Overall, this balance has meant issues never become blockers. I wouldn't hesitate to recommend Drata to any organization. Review collected by and hosted on G2.com.

Drata provides a clear dashboard view of the frameworks we work towards, clear connections to controls, the capabilities of ownership and maintenance of our ISMS and risk management.

The supplier management section is also super helpful!

Implementation was easy and using the connections and integrations we were set up and running within two weeks.

The ability to be part of the roadmap and feedback to Drata using customer support really makes you feel part of a family.

When I log on to our system, Drata is one of the first applications I open and it stays with me all day. Review collected by and hosted on G2.com.

The downside of Drata for me personally, is that it is that efficient, the moment any part of ISMS falls out of review I see the percentage score drop and this messes with my OCD! Review collected by and hosted on G2.com.

It's always audit-ready: I can literally look at the dashboard and see our real-time compliance status for SOC 2 or ISO 27001. If a control fails, I get an alert immediately, not six months later during a review.

Massive time savings: It has seriously automated 90% of the manual evidence collection. I no longer spend days or weeks before an audit compiling screenshots and documentation.

The Audit Hub is a game-changer: When the auditor shows up, everything they need is centralized in one place. Communication and evidence requests are streamlined, which makes the entire audit process so much smoother and faster. Review collected by and hosted on G2.com.

Limited Niche Integrations: We use a few niche tools, and Drata either doesn't have an integration for them or the pre-built connection is very limited in the evidence it can pull. This forces us back to the manual process for those specific controls, which defeats the whole purpose of the automation.

Lack of Flexibility in Control Mapping: For standard frameworks (like SOC 2), it's great. But if your organization has unique workflows, internal policies, or needs a less common framework, customizing or mapping your controls to fit those needs can be rigid and challenging. It can feel like it's a "my way or the highway" platform. Review collected by and hosted on G2.com.

Drata has taken what used to be a complex, manual process and turned it into a seamless, automated workflow. The integrations with HR systems, cloud providers, and security tools (like Google Workspace, AWS, and Jira) make evidence collection nearly effortless. I particularly love the continuous monitoring feature — it gives real-time visibility into control status and alerts when something falls out of compliance.

The user interface is clean and intuitive, making it easy for both technical and non-technical stakeholders to navigate. The risk assessment and policy management modules are also well-structured, helping us align with auditors’ expectations without juggling multiple spreadsheets. Review collected by and hosted on G2.com.

While the platform covers most use cases perfectly, some integrations (like HR background checks and certain people-data syncs) occasionally require reauthentication or manual validation. Their support team, however, is responsive and proactive in resolving such issues. Review collected by and hosted on G2.com.

The partnership and support we've received from our Drata team have been exceptional. Sierra Alvarez, our Customer Success Manager, and Christina from support have both consistently gone above and beyond to help me organize our SOC 2 controls and prepare for the audit. Their prompt responses and expertise made what could have been a complicated process much more manageable, and Sierra's collaborative approach has truly helped me stay on track and sane throughout. Review collected by and hosted on G2.com.

The SOC 2 control mapping and evidence alignment process seems tedious and time consuming, the platform is powerful, but it could benefit from more streamlned control mapping and control reassignments. Review collected by and hosted on G2.com.

I find Drata extremely useful for complete document organization, alerts, compliance, and security across the board. The alert system stands out for its ability to integrate with tools like Slack and Linear, which enhances my workflow seamlessly. I also appreciate the templates for policies and recommendations that Drata makes; they provide valuable guidance and save me time in setting up our compliance processes. What truly sets Drata apart is the extraordinarily helpful support from Alex Hamilton and Tina, who are patient and knowledgeable, assisting me in learning how to optimize and best use Drata. As I become more familiar with the system, I'm increasingly able to leverage its full potential, which is a significant factor in my decision to continue using and considering repurchasing Drata. The combination of these features and the excellent customer support makes Drata an invaluable tool for me and my organization. Review collected by and hosted on G2.com.

{"I find the initial setup of Drata very difficult, and I felt a lack of sufficient onboarding support.","I'm also frustrated by the extensive knowledge required to effectively use Drata. I wish there were more accessible and responsive chat support, similar to the experience I have with Gusto, to quickly answer questions.","I believe Drata would benefit from having chat support available 24/7 to address issues and learning curves more efficiently."} Review collected by and hosted on G2.com.

Drata makes creating policies and following frameworks easy and straight forward. Security is necessary at all companies now and so many companies are trying to re-invent the wheel. Why? Drata gives you what you need to pass your audits and do it right, without trying to re-invent what security is. Its a one stop shop for security professionals to keep their companies in the green in all senses of the word. We will continue to use Drata and it will enable us to grow without worrying about if we are doing it right. We know we are because we use Drata. Review collected by and hosted on G2.com.

I wish there were even easier way to fill out the templates for the policies. Allow more boxes to fill in the "stuff" that matters to your company. Review collected by and hosted on G2.com.

I primarily use Drata for training, which is extremely convenient for me. I really appreciate how it helps me stay on top of compliance, especially given how busy we are. The setup process was straightforward and easy when I initially installed it, which was a pleasant surprise. Additionally, Drata appears to effectively manage important functions like antivirus and hard drive encryption, which adds to its value. Overall, it operates better than I had initially expected, and I'm quite satisfied with its performance, as reflected in my high likelihood of recommending it to others. Review collected by and hosted on G2.com.

Nothing comes to mind right now. I've only been using it for about a year. Review collected by and hosted on G2.com.

Simple to use and get set up with the different connections to automate some of the controls. Good policy templates that passed our audit. Drata agent was simple to install across our devices and helped with the automation as well.

Advice on each control evidence was extremely useful to speed up evidence gathering.

Good recommendation for audit partner in the UK who specialised in earlier stage companies.

Support seems very good, even at the lower price tiers. Review collected by and hosted on G2.com.

There were a couple of additional policies that I would have liked some guidance on or basic examples of. The balance of integration audit partners is heavily to the US (to be expected) but would like some more options for UK / EU based providers in the future. Review collected by and hosted on G2.com.