Drata provides a clean and easy to use interface that makes compliance management less overwhelming. I like that it continuously monitors and send alerts when someone needs attention. Review collected by and hosted on G2.com.

One thing I don't like about Drata is that some integration requires additional setup, and troubleshooting them can take longer than expected Review collected by and hosted on G2.com.

I like that Drata is easy to use. It sends emails to our employees properly, which is really handy. It helps our team get things done quickly, much faster than doing things manually. I also find the portal pretty intuitive. Review collected by and hosted on G2.com.

I think their desktop software is not compatible with all the Windows versions that we have. So we ran into some challenges with that. Review collected by and hosted on G2.com.

I really like the automation and integrations that Drata provides. They help me manage information security and privacy much more easily, especially since we have limited resources. Drata significantly reduces manual effort and provides easy, actionable insights into areas that need fixing. The initial setup was pretty straightforward, and I also appreciate its seamless integration with tools like GitHub, Heroku, and Google Workspace. Review collected by and hosted on G2.com.

There's a few bits of clunky user flow - e.g. when a control is marked as 'not ready' it's not always clear why it's not ready. It would be better if there was a clear button that showed a step-by-step guide on how to fix something. Review collected by and hosted on G2.com.

I use Drata for my GRC program including ISO27001, SOC2, GDPR, and Cyberessentials. I appreciate having better visibility of my controls and risks all in a single console. I like the ability to integrate with my tech stack with automated evidence collection. I don't have to log into AWS and Google Workspace to check compliance as everything is visible from Drata connections. The automation of evidence collection for SOC2 is what made us switch from Rubiq. Review collected by and hosted on G2.com.

The asset management module could be improved to generate a consolidated report. It currently doesn’t display device serial numbers and make, which are useful identifiers for an asset list. The serial numbers can only be seen when downloading a report for an individual, not for the entire company. I’d prefer Drata to have out-of-the-box modules like incident management to avoid purchasing a separate solution. Having an incident management report and a business continuity flow would greatly enhance Drata. Also, the integrations with Zoho Desk have been buggy since last year, and the issue remains unresolved despite logging a ticket about it. Review collected by and hosted on G2.com.

The most valuable feature for us is the continuous monitoring and real-time alerts, which provide reassurance that our controls are consistently effective. Drata also simplifies evidence collection and audit preparation, helping us save time and reduce the risk of errors. As a result, we are able to maintain compliance proactively and dedicate more attention to strategic security improvements instead of getting bogged down by administrative work.

In terms of usability, the platform is highly intuitive and user-friendly, making it easy for even new team members to navigate and complete tasks. The implementation process was smooth and quick, thanks to clear instructions and minimal disruption to our existing workflows. Drata’s integration with our current tools and systems is seamless, which cuts down on manual work and keeps our data consistent across platforms. The customer support team is always responsive, knowledgeable, and eager to help, which greatly enhances our overall experience. We rely on Drata daily for monitoring and compliance activities, and it has become an essential part of our security operations. Review collected by and hosted on G2.com.

It would be great to have more available integrations, for example with popular observability tools such as Grafana. Review collected by and hosted on G2.com.

Drata offers strong visibility into compliance readiness across frameworks and significantly reduces the manual effort required for evidence collection, control tracking, and audit coordination. Having a centralized view of controls, integrations, and audit status makes it much easier to manage ongoing compliance work and keep teams aligned. Review collected by and hosted on G2.com.

Nothing to add—overall, we’re very pleased with Drata. Review collected by and hosted on G2.com.

It’s honestly one of the best tools to help you maintain security, and not just to complete certifications. It helps you stay genuinely secure, instead of only checking off tasks when they’re needed. Review collected by and hosted on G2.com.

Sometimes the tasks and controls aren’t very easy to read, and I’ve had to upload evidence manually even when the case isn’t correct. Cases that the control is off and is not actually needed Review collected by and hosted on G2.com.

how it automates compliance tasks like SOC 2 and ISO 27001, saving a lot of manual effort.

It also gives real-time monitoring and clear dashboards, making audits much faster and less stressful. Review collected by and hosted on G2.com.

it can feel expensive, especially for small teams or startups.

Also, initial setup and integrations can be a bit complex and time-consuming if your systems aren’t already well organized. Review collected by and hosted on G2.com.

I find Drata easy to track my compliance status, and it helps me identify compliance gaps. I also appreciate the automated monitoring that integrates with my existing tools, making real-time tracking possible. Setting up Drata was easy, which was a definite plus for me. Review collected by and hosted on G2.com.

The user review process is a bit tedious as it does not allow you to remove offboarded users directly from products. Right now, we do not have a way to exclude users directly in integrations, so you have to manually exclude them on each review which is a tedious process. Review collected by and hosted on G2.com.

I appreciate Drata because it helps me standardize policies in areas like data use and direct control, which is really crucial for my work with my tech lawyer. I find it fun to work with, and it's very helpful in ensuring that our policies are up to date. My team and the cybersecurity architecture team use it to understand how the technology framework is evolving. The initial setup was great and very smooth, without any issues. Review collected by and hosted on G2.com.

I think one thing that could be improved is having scheduled data control measures fortnightly or a timeline that we could set. That would generally help. Review collected by and hosted on G2.com.