Drata

1. Complexity and Onboarding Challenges

- **Steep Learning Curve:** Many users report that Drata can be complex and overwhelming for new usersespecially for small teams or those unfamiliar with compliance tools.

Some describe the interface as legit terrible and point to significant challenges during initial setup.

- **Slow and Clunky UI:** Several reviewers have mentioned that the system feels sluggish and the navigation isnt intuitive, which adds to the overall difficulty of onboarding.

2. Integration and Feature Limitations

- **Limited Integrations:** Despite boasting a wide range of connectors, Drata has been criticized for missing key integrationsfor example, it does not support Oracle Cloud Infrastructure (OCI). Users have also reported issues where specific integrations (like CrowdStrike Falcon) fail to pull data as expected.

- **Inflexible Modules:** The risk management module and vendor management questionnaires have been called very limited and not very useful, with users complaining that they cannot customize these tools to fit their organizational structure or specific needs.

- **Confusing Controls:** Basic controls and connections within the platform have been criticized for lacking clarityusers are not always sure what each control does or how it supports compliance efforts. 3.

Pricing and Contract Issues

- **High Cost and Lack of Transparency:** Drata is frequently described as expensive and cost-prohibitive, particularly for startups. Its pricing is custom and ranges widely (from approximately $15k to $100k annually), with many users feeling that the high cost is not justified by the value received.

- **Unexpected Fees and Renewal Hikes:** Customers have reported unexpected add-on fees and price hikes at contract renewal, which can catch organizations off guard and lead to dissatisfaction with the overall cost structure.

- **Poor Return on Investment (ROI):** There is a sentiment among some customers that they are spending a lot of money for little return, with one user describing Drata as a spend-cash-for-little-return solution. 4. Overselling and Unrealistic Expectations

- **Overpromised Capabilities:** Some users feel that Dratas marketing oversells its features, resulting in a product that does not fully deliver on the promised ease and automation.

This has led to disappointment when the tool fails to meet expectations during real audit scenarios.

- **Compliance Theater:** Criticism has been raised that the platform encourages a check-the-box mentalitycreating a false sense of security by implying compliance without delivering the in-depth controls needed for a real audit.

5. Security and Automated Check Concerns

- **Perceived Invasiveness of the Agent:** The installation of a monitoring agent on company devices has raised privacy concerns among some users, with a few fearing that it might be used to collect more data than necessaryeven though this is not the case in practice.

- **Buggy Automated Checks:** There are reports that Dratas automated compliance checks can be unreliableproducing false positives or negatives. Such glitches can lead to situations where compliance issues are either erroneously flagged or missed entirely, necessitating manual verification.

6. Negative Sentiment on Social Media and Community Forums

- **Strong Online Criticism:** On platforms like Reddit, users have been vocal in their dissatisfactionhighlighting the slow performance, clunky interface, and overpriced nature of the tool.

Some even report switching to competitors like Vanta due to these issues.

- **General Frustration:** Discussions frequently mention that Dratas tool creates more work than it saves, with companies forced to rely on manual processes to fill in gaps left by its automation. This has contributed to an overall sentiment that the product does not fully meet the rigorous demands of real-world audits.