Drata
Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.
Average Rating: 4.7/5.0
Total Reviews: 1,386
Who Is the Company Behind Drata?
- Seller: Drata
- Company Website:
- Year Founded: 2020
- HQ Location: San Francisco, CA
-
Twitter: @DrataHQ
1,525 Twitter followers -
LinkedIn® Page: www.linkedin.com
4,534 employees on LinkedIn®
Who Uses This Product?
- Who Uses This: CTO, CEO
- Top Industries: Computer Software, Information Technology and Services
- Company Size: 47% Medium, 47% Small
What Do G2 Reviewers Say About Drata?
AI-generated summary from verified user reviews
Pros
- Users appreciate the round-the-clock customer support of Drata, which significantly enhances their experience and satisfaction.
- Users appreciate the intuitive design of Drata, making it easy to set up and integrate various tools effectively.
- Users appreciate the automated compliance monitoring of Drata, which significantly reduces manual effort and enhances security.
- Users value Drata for its time-saving automation, streamlining compliance tasks and making audits manageable and efficient.
- Users value Drata's easy integrations with various tools, streamlining the compliance process and enhancing usability.
Cons
- Users express a need for more native integrations with third-party tools to enhance Drata's monitoring capabilities.
- Users face integration issues with Drata, finding transitions and customizations challenging and requiring unexpected manual efforts.
- Users find improvements needed in Drata's configurability and auditor experience, affecting seamless transitions from other platforms.
- Users find the lack of clarity in Drata's UI can lead to confusion and difficulty in task management.
- Users find the UX sometimes confusing, making it hard to track tasks and fix issues effectively.
What Are Recent G2 Reviews of Drata?
"Great framework for information security audits and overall compliance"
Rating: 4.5/5.0 stars
— Emre Utku S.
"Clear Compliance Visibility That Keeps Audits Organized Year-Round"
Rating: 4.5/5.0 stars
— Marc M.
What Are G2 Users Discussing About Drata?
- How are others coping with slower support, chatbot inconsistencies, and login / chat issues? - 1 comment, 1 upvote
- Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks? - 1 comment, 1 upvote
- What’s your workaround when Drata’s integrations and automation do not go deep enough? - 1 comment, 1 upvote
- How are you all dealing with confusing navigation and policy / control relationships in Drata? - 1 comment, 1 upvote
- Complex setup and overloaded templates slow down my first audit cycle - 1 comment, 1 upvote

