Drata: cybersecurity software

Drata had the advantage of starting after Vanta, and they quickly built a greater depth of automation. They were less focused on their endpoint solution, and more focused on powerful evidence automation. That said, these tools have struggled providing the depth needed for enterprise risk teams.

What Drata is

Drata had the advantage of starting after Vanta, and they quickly built a greater depth of automation. They were less focused on their endpoint solution, and more focused on powerful evidence automation. That said, these tools have struggled providing the depth needed for enterprise risk teams. The vendor site is drata.com. This profile is an entry in the oneNorma directory, not a vendor landing page.

What Drata covers

Drata is in the catalog for these capabilities. Categories: GRC Automation. Catalog tags: Hands-on, Best for Startups, and Best for MidMarket.

How to evaluate Drata in a security program

Use Drata as a stack candidate, not as diligence evidence. The oneNorma score for Drata is 6/10 (percentile 83). If the real gap is in GRC Automation, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what drata.com publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

GRC Automation

Tags

Hands-onBest for StartupsBest for MidMarket

Capabilities by category

GRC Automation

Outcome FocusedAutomated

Frequently asked questions

What is Drata?

Drata had the advantage of starting after Vanta, and they quickly built a greater depth of automation. They were less focused on their endpoint solution, and more focused on powerful evidence automation. That said, these tools have struggled providing the depth needed for enterprise risk teams. Site: drata.com.

Which categories does Drata fall into?

Drata appears in the oneNorma directory under GRC Automation. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement Drata?

No. The Drata profile (drata.com) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.