4 ms·
> Drata is a vendor that helps a company navigate your SOC2 compliance process, by organizing all the controls and helping you gather evidence that you have don
by formerly_proven 5y ago
> Drata is a vendor that helps a company navigate your SOC2 compliance process, by organizing all the controls and helping you gather evidence that you have done so. For instance, they'll connect with Github and make sure everyone with access to your repos is a company employee.
In other words, Drata is a CYAaaS.
> The Drata agent is a pretty innocuous thing. It checks you have done things like turn on disk encryption, have updates enabled, and that the screen locks if you walk away.
Guessing it is privileged and self-updating.
- cure 5y ago> Guessing it is privileged and self-updating. And closed source, of course. Must be totally free of bugs too, like all software.
- nyir 5y agoAt least it's using some OSS, like osquery, c.f. <https://cdn.drata.com/agent/osquery/queries.json https://cdn.drata.com/agent/osquery/queries.json>, so you can easily see quite a bit of what it's going to gather.
- neonnomad 5y agoIt is based on osquery and we are happy to share any information including our third party security validation of the agent with prospects/customers. Source: I am the Drata CISO