Drata has so many tools to help with policy creation and real-time compliance monitoring. It's more that just a GRC tool, it provides live data when policy, process, and assets fall out of compliance so you can quickly reign them back in. Review collected by and hosted on G2.com.

There have been issues with rolling out new features. Support responsiveness has slowed lately, especially after the introduction of the chatbot. Review collected by and hosted on G2.com.

Drata provides a clear dashboard view of the frameworks we work towards, clear connections to controls, the capabilities of ownership and maintenance of our ISMS and risk management.

The supplier management section is also super helpful!

Implementation was easy and using the connections and integrations we were set up and running within two weeks.

The ability to be part of the roadmap and feedback to Drata using customer support really makes you feel part of a family.

When I log on to our system, Drata is one of the first applications I open and it stays with me all day. Review collected by and hosted on G2.com.

The downside of Drata for me personally, is that it is that efficient, the moment any part of ISMS falls out of review I see the percentage score drop and this messes with my OCD! Review collected by and hosted on G2.com.

It's always audit-ready: I can literally look at the dashboard and see our real-time compliance status for SOC 2 or ISO 27001. If a control fails, I get an alert immediately, not six months later during a review.

Massive time savings: It has seriously automated 90% of the manual evidence collection. I no longer spend days or weeks before an audit compiling screenshots and documentation.

The Audit Hub is a game-changer: When the auditor shows up, everything they need is centralized in one place. Communication and evidence requests are streamlined, which makes the entire audit process so much smoother and faster. Review collected by and hosted on G2.com.

Limited Niche Integrations: We use a few niche tools, and Drata either doesn't have an integration for them or the pre-built connection is very limited in the evidence it can pull. This forces us back to the manual process for those specific controls, which defeats the whole purpose of the automation.

Lack of Flexibility in Control Mapping: For standard frameworks (like SOC 2), it's great. But if your organization has unique workflows, internal policies, or needs a less common framework, customizing or mapping your controls to fit those needs can be rigid and challenging. It can feel like it's a "my way or the highway" platform. Review collected by and hosted on G2.com.

Intuitive - you don't need to read a manual

Was easy to implement

New features added

Great Customer Support during initial set up Review collected by and hosted on G2.com.

In the audit section there are a few tweaks that need to be made however I have no doubt the Drata team are on this Review collected by and hosted on G2.com.

I love how Drata has transformed the way I handle compliance by digitizing everything, eliminating the hassle of maintaining spreadsheets. The detailed and descriptive nature of Drata is incredibly helpful; it's well-labeled and grouped, which simplifies the setup process and makes it easier to ensure compliance. The initial setup was very easy, and I appreciate how it integrates seamlessly with other tools I use, such as Jumpcloud, AWS, GitHub, and Jira. The comprehensive nature of Drata makes my compliance tasks more manageable and efficient, offering a user-friendly experience that truly stands out. Review collected by and hosted on G2.com.

The cost of using Drata is a concern for me. While the cost might be justified, the annual fee of $30,000 may not be affordable in countries other than the US. Review collected by and hosted on G2.com.

Comprehensive controls and lots of integrations to simplify auditing, evidence gathering. Review collected by and hosted on G2.com.

The built in policy editor is a bit limited and doe snot make it easy to add corporate branding. Review collected by and hosted on G2.com.

Drata has taken what used to be a complex, manual process and turned it into a seamless, automated workflow. The integrations with HR systems, cloud providers, and security tools (like Google Workspace, AWS, and Jira) make evidence collection nearly effortless. I particularly love the continuous monitoring feature — it gives real-time visibility into control status and alerts when something falls out of compliance.

The user interface is clean and intuitive, making it easy for both technical and non-technical stakeholders to navigate. The risk assessment and policy management modules are also well-structured, helping us align with auditors’ expectations without juggling multiple spreadsheets. Review collected by and hosted on G2.com.

While the platform covers most use cases perfectly, some integrations (like HR background checks and certain people-data syncs) occasionally require reauthentication or manual validation. Their support team, however, is responsive and proactive in resolving such issues. Review collected by and hosted on G2.com.

I like that Drata is intuitive and serves as a central repository for connecting platforms and collecting audit-ready information. The platform is easy to set up, which is really helpful for someone like me who doesn't know what I’m doing. Also, the team is good and helpful, which I find really useful. I also have many tools integrated into Drata. Review collected by and hosted on G2.com.

An audit is a heavy lift, maybe a little more hands-on offerings? Review collected by and hosted on G2.com.

I think one of Drata's key strengths is its ability to perform framework mapping across compliance frameworks, which greatly reduces redundant work and duplicate work. I also appreciate its monitoring capabilities. Drata provides timely system updates on governance risk and compliance processes, making them more efficient and significantly less burdensome. Review collected by and hosted on G2.com.

I would like to be able to manipulate their dashboards a little better, just so I could cater it specifically to what our company needs to see, especially for generating reports to leadership. Review collected by and hosted on G2.com.

Drata is easy to use, and the user experience is pretty slick in terms of the downloaded app for Mac and the web browser version as well Review collected by and hosted on G2.com.

What I didn't like about Rata sometimes the multi factor authentication email doesn't arrive on time. That's really frustrating because you keep on waiting. Review collected by and hosted on G2.com.