Drata Reviews

Name: Drata
Brand: Drata
Rating: 3.8 (9 reviews)

Vendor: Drata

3.8 out of 5

9 reviews
88% willing to recommend

What is Drata?

Drata is a powerful tool for automating compliance processes, effectively reducing audit preparation time and continuously monitoring security controls. It is highly valued for its ability to integrate seamlessly with existing tech stacks and manage security for remote teams, ensuring adherence to standards like SOC 2 and HIPAA. Drata enhances organizational efficiency, improves workflows, and supports real-time compliance monitoring, making compliance management less stressful and more accurate.

Get the Drata Buyer's Guide and find out what your peers are saying about Drata, Wiz, Microsoft Defender for Cloud and more!

Drata is the #4 ranked solution in top Compliance Management solutions. PeerSpot users give Drata an average rating of 7.6 out of 10. Drata is most commonly compared to Wiz: Drata vs Wiz. Drata is popular among the large enterprise segment, accounting for 47% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 22% of all views.

Helped 861,524 peers since 2012

Featured Drata reviews

Johnny Chen

SecOps Engineer III at FINIX PAYMENTS, INC

There is room for improvement in Drata. The core features are solid, but some new features are in a very MVP (Minimum Viable Product) stage. They work, but the user experience isn't always smooth. While the core features are well-developed compared to the market, the new features need more polish. They could benefit from more user feedback and iterations to make them more useful. Some of these new features look promising buthave flaws, so we can’t fully adopt them or justify paying extra for them now. The user interface is clean and intuitive. However, you'll need some specific knowledge if you're a security policy manager or need to set updifferent integrations.

Read full review

LindaBrown

Founder at Viridis Security

Drata helps eliminate evidence gathering and makes assigning different activities to different team members easier, simplifying compliance and audit processes. In Pennsylvania, we're putting in thousands of hours. Drata improves our security posture by reducing extra work, allowing us to focus on other security directives. I like the control editing and task management features the most. It's easy to use, but it's also easy for people to think they don't need security experts if they have it.

Read full review

Juan Esteves

Cyber Security Engineer at Rather Labs

Impact of the product on your company's security posture management has been great because we had a team of three people in the security part, and I was their technical leader. In our company, we have a CIO and an operations team. We have only three people on the team, and Drata helps us to increase and enhance the maturity of our controls and evidence for future auditing and other compliance assessments. With the automated evidence feature of the product, we connected all our platforms, like Amazon, and then we connected with GitHub Enterprise to get information about the outbound application. Data has a control panel for third parties so that they can read or know what controls are working and how, which is a breaking advantage for such a tool. The product is 100 percent friendly to use. I rate Drata's integration capabilities as an eight out of ten. If I have ten people with Excel and fully commit to write the controls, then maybe we won't require Drata. If you have a small team, and you want to hurry up with things in your company, Drata is the perfect solution. I rate the tool an eight out of ten.

Read full review

Drata mindshare

As of July 2025, the mindshare of Drata in the Compliance Management category stands at 6.7%, down from 17.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Compliance Management

PeerResearch reports based on Drata reviews

Type	Title	Date
Category	Compliance Management	Jul 14, 2025	Download
Product	Reviews, tips, and advice from real users	Jul 14, 2025	Download
Comparison	Drata vs SentinelOne Singularity Cloud Security	Jul 14, 2025	Download
Comparison	Drata vs Wiz	Jul 14, 2025	Download
Comparison	Drata vs Vanta	Jul 14, 2025	Download

Title	Rating	Mindshare	Recommending
Wiz	4.5	30.1%	95%	22 interviews Add to research
Microsoft Defender for Cloud	4.0	18.1%	94%	78 interviews Add to research

Valuable Features

Drata provides comprehensive integration within ecosystems like cloud services and HR systems enhancing compliance management automation. Its key features include specializing in security posture management, control editing, task management, and proactive audit processes. Users appreciate automated evidence generation and security scans. DCF mapping links controls effectively to frameworks like SAST and HIPAA. AI suggestions for infrastructure-as-code improve error resolution. Organizations find the platform valuable for InfoSec program building, despite some inflexibility in monitoring setup requirements.

"My experience with customer support was good; they were responsive, but they didn't ever get us to a solution that worked."
"Drata offers APIs for every clause so that it can integrate into various platforms."
"Drata keeps adding new features, allowing us to build our entire InfoSec program within it. Adding new components and evidence for different audits is easy. Drata also integrates with various software, like ticketing systems, source code control, and cloud platforms, continuously pulling evidence from these integrations. Without a GRC tool with these integrations, we used to gather evidence from different software during audits manually.Drata has a significant impact on our security posture management. Previously, Drata had features for security posture management, primarily through integration with AWS. For example, it would scan AWS for specific security requirements, like ensuring all S3 buckets are private. It will be reported on the Drata platform if it finds a public bucket.Recently, Drata introduced a new feature that uses an infrastructure-as-code approach. This feature detects issues and provides AI-generated suggestions for fixing them. If an organization uses infrastructure-as-code solutions like Terraform, Drata will suggest changes to the Terraform code to address the issues. You can then review and apply these changes to fix the problems. This is particularly useful when dealing with many topics, as it helps automate and speed up the process of implementing fixes. However, this AI-generated code feature is part of Drata’s upsell options. The basic version of Drata offers limited capabilities compared to the advanced features available with a paid upgrade.Even without this new feature, Drata's security posture management is valuable, as it scans cloud environments for deviations from defined security baselines. Many tools offer similar capabilities, but Drata’s new feature that translates issues into actionable fixes is a notable advancement. This benefits teams with the capability and resources to use this tool effectively."

Room for Improvement

Drata faces latency and high cost issues, with users experiencing difficulties in accessibility and user interface navigation. There are concerns about integration, real-time monitoring, and the accuracy of compliance readiness metrics. The platform's user experience is perceived as cumbersome, with challenging configurations and false positives. Customers find the new features underdeveloped and costly, while also struggling with API documentation and third-party interactions. Users recommend improvements in providing real-time insights and reducing the complexity of compliance management.

"Drata has impacted our organization negatively, as it made the whole compliance process more complicated and cost me significant time."
"The existing features of Drata are already extensive and costly to integrate."
"There is room for improvement in Drata. The core features are solid, but some new features are in a very MVP (Minimum Viable Product) stage. They work, but the user experience isn't always smooth. While the core features are well-developed compared to the market, the new features need more polish. They could benefit from more user feedback and iterations to make them more useful. Some of these new features look promising buthave flaws, so we can’t fully adopt them or justify paying extra for them now. The user interface is clean and intuitive. However, you'll need some specific knowledge if you're a security policy manager or need to set updifferent integrations."

ROI

Users reported significant benefits from using Drata, noting particularly that it streamlined their compliance processes and significantly reduced the time and resources needed for audit preparations. This efficiency translated into substantial cost savings and enhanced team productivity, which users felt positively impacted their ROI. They appreciated Drata’s automation capabilities for continuous compliance monitoring, which further minimized manual workloads and allowed them to allocate resources to other critical areas of development.

Pricing

Drata's pricing starts around $18,000 and can reach up to $30,000, depending on licensing and chosen frameworks. Many find it on the expensive side, but users emphasize its value if affordable. Small and medium-sized businesses typically find a sweet spot at $20,000. Cost-per-API contributes to its expensive nature. Compared to competitors like Vanta, Drata may be cheaper yet remains a costly tool. Pricing flexibility allows potential discounts through negotiation.

"Drata's pricing is quite reasonable. Compared to other tools in the market, including its biggest competitor, Vanta, Drata is much cheaper. Even compared to other tools like AuditBoard, which aren’t as good, Drata’s price remains competitive."
"I remember that my company used to pay 25,000 USD to use the product...The product's cost is really high, but it is a powerful tool."
"It's one of the more expensive options, but I think it's worth the money if you can afford it."

Popular Use Cases

Drata serves as a comprehensive platform for managing SOC 2 and ISO 27001 compliance, mitigating security vulnerabilities, and streamlining audit processes. Organizations utilize it to integrate seamlessly with cloud services, enhance security infrastructure, and efficiently store and manage audit evidence year-round. It is employed by companies to oversee internal security controls, achieve certifications, and operationalize compliance efforts, reducing reliance on disparate tools and auditors. Drata's integration aids compliance with standards like HIPAA, SOC 2, and PCI.

Service and Support

Drata's customer service has received mixed feedback. Some users praised the support team's technical expertise and quick response times, especially appreciating regular meetings and personal engagement. However, there were complaints about unresolved issues and unmet feature promises. The technical support generally received ratings between six and eight out of ten. TalkShare and auditing support are noted as efficient. Despite positive remarks about responsiveness, there were instances where solutions were not satisfactory.

Deployment

Drata's initial setup is described as user-friendly and accessible, benefiting individuals with security experience. Its integration wizard simplifies policy organization. Although some find accessing auditor permissions challenging, others acknowledge effective AWS integration. Bugs were encountered but resolved, with visibility into Drata's roadmap seen as a positive. Assigning a customer success manager aids in deployment. Five people are typically needed, and the setup process allows easy login through work emails or Google.

Scalability

Drata scores high for scalability, proving effective both for smaller firms and those aspiring for growth. Users appreciate its real-time monitoring, reporting, and task assignment features. It's ideal for small to medium-sized firms with limited employee numbers. While some users express satisfaction across different global locations and roles, others find some features could face challenges at a larger scale due to the lack of batch management capabilities.

Stability

Drata is described as having reliable stability, with ratings around nine out of ten. Users note occasional bugs, particularly after updates and for Mac systems, yet these are resolved swiftly. Minor issues like web UI bugs and an external Trust Center outage were reported. Users appreciate Drata’s speed and the absence of significant downtime or latency. While suitable for startups and medium-sized firms, larger enterprises may face more integration challenges.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Drata Buyer's Guide for additional reliable information.