Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Drata is an agentic trust management platform for automating governance, risk, compliance, security assurance, and third-party risk management processes. Its Enterprise GRC capabilities bring controls, risks, policies, and evidence into a centralized system while allowing organizations to map controls across multiple frameworks and reuse compliance work. Continuous compliance automation collects evidence, monitors controls, identifies issues, and provides guided remediation to help teams remain audit-ready as their environments change. Drata's Trust Center provides a secure location where prospects, customers, and other stakeholders can review an organization's security posture, request documents, and obtain answers to trust-related questions. AI-powered questionnaire automation supports the questionnaire lifecycle from intake and triage through processing and response generation, using an evolving knowledge base to draft consistent answers. Third-party risk management uses AI agents to create assessment criteria from existing questionnaires, collect documents from vendor Trust Centers, perform risk assessments, and conduct vendor follow-ups. Drata also provides AI Agent Governance capabilities designed to discover AI agents within an enterprise, enforce organizational policies before agent actions execute, and produce records of agent decisions for auditing. The platform supports frameworks and regulations including SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, PCI DSS, DORA, FedRAMP, CMMC, and custom frameworks. Drata is designed to support organizations ranging from startups establishing their first compliance programs to enterprises managing governance, risk, compliance, and trust requirements across multiple business units and regions.

Description

Over 1,000 organizations worldwide depend on Resolver’s security, risk and compliance software. From healthcare and hospitals to academic institutions, and critical infrastructure organizations including airports, utilities, manufacturers, hospitality, technology, financial services and retail. For security and risk leaders who are looking for a new way to manage incidents and risks, Resolver will help you move from incidents to insights.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Asana Yes 
Okta Yes 
5X Yes 
Adaptive Security Yes 
Blink Yes 
Certn Yes 
Computer for Counsel Yes 
DigitalOcean Yes 
Everbridge 360 No 
Fallax Yes 
Heroku Yes 
Iru Yes 
Microsoft 365 Yes 
Microsoft Azure Yes 
Microsoft Intune Yes 
NXT1 LaunchIT Yes 
Rippling Yes 
Shortcut Yes 
Wing Security Yes 
Workers by Delos Yes 

Integrations

Asana Yes 
Okta Yes 
5X No 
Adaptive Security No 
Blink No 
Certn No 
Computer for Counsel No 
DigitalOcean No 
Everbridge 360 Yes 
Fallax No 
Heroku No 
Iru No 
Microsoft 365 No 
Microsoft Azure No 
Microsoft Intune No 
NXT1 LaunchIT No 
Rippling No 
Shortcut No 
Wing Security No 
Workers by Delos No 

Pricing Details

$10,000/year
Free Trial No 
Free Version No 

Pricing Details

$10,000/year
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Drata

Founded

2020

Country

United States

Website

drata.com

Vendor Details

Company Name

Resolver

Founded

2000

Country

Canada

Website

www.resolver.com

Product Features

Audit

Alerts / Notifications Yes 
Audit Planning Yes 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management No 
Issue Management No 
Mobile Access Yes 
Multi-Year Planning Yes 
Risk Assessment Yes 
Workflow Management Yes 

Cloud Security

Antivirus No 
Application Security No 
Behavioral Analytics No 
Encryption No 
Endpoint Management No 
Incident Management No 
Intrusion Detection System No 
Threat Intelligence No 
Two-Factor Authentication No 
Vulnerability Management No 

Compliance

Archiving & Retention No 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking Yes 
Controls Testing Yes 
Environmental Compliance No 
FDA Compliance No 
HIPAA Compliance No 
ISO Compliance No 
Incident Management No 
OSHA Compliance No 
Risk Management Yes 
Sarbanes-Oxley Compliance No 
Surveys & Feedback No 
Version Control Yes 
Workflow / Process Automation Yes 

GRC

Auditing Yes 
Disaster Recovery No 
Environmental Compliance No 
IT Risk Management Yes 
Incident Management No 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

Integrated Risk Management

Audit Management No 
Compliance Management No 
Dashboard No 
Disaster Recovery No 
IT Risk Management No 
Incident Management No 
Operational Risk Management No 
Risk Assessment No 
Safety Management No 
Vendor Management No 

Product Features

Audit

Alerts / Notifications Yes 
Audit Planning Yes 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management Yes 
Issue Management Yes 
Mobile Access Yes 
Multi-Year Planning Yes 
Risk Assessment Yes 
Workflow Management Yes 

Compliance

Archiving & Retention No 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking Yes 
Controls Testing No 
Environmental Compliance No 
FDA Compliance No 
HIPAA Compliance No 
ISO Compliance Yes 
Incident Management Yes 
OSHA Compliance No 
Risk Management Yes 
Sarbanes-Oxley Compliance No 
Surveys & Feedback No 
Version Control No 
Workflow / Process Automation Yes 

Content Moderation

If you lack oversight and proactive measures on intricate, multi-page, and multilingual social media platforms and campaigns, harmful and negative user interactions will persist, jeopardizing your online communities, driving away customers, and negatively impacting your revenue. Ensure the safety of your audiences across both owned channels and paid initiatives to enhance brand engagement and maximize your return on advertising spend, fostering a welcoming and secure brand community. Our dependable moderation precision ensures that your online presence remains inviting, efficient, and protected. We take preemptive steps to shield your campaigns by providing insights into both owned accounts and paid efforts, while clearly differentiating between organic and paid audience engagement. With cutting-edge detection methods and thorough analytics, we protect your paid return on investment and bolster customer relationships.

Artificial Intelligence No 
Audio Moderation No 
Brand Moderation No 
Comment Moderation No 
Customizable Filters No 
Image Moderation No 
Moderation by Humans No 
Reporting / Analytics No 
Social Media Moderation No 
User-Generated Content (UGC) Moderation No 
Video Moderation No 

GRC

Auditing Yes 
Disaster Recovery No 
Environmental Compliance No 
IT Risk Management Yes 
Incident Management Yes 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

Incident Management

Audit Trail Yes 
Corrective Actions (CAPA) Yes 
Disaster Recovery No 
IT Incident Management No 
Incident Reporting Yes 
OSHA Compliance No 
Root-Cause Diagnosis No 
Safety Management No 
Task Management Yes 
Ticket Management No 

Incident Response

Attack Behavior Analytics No 
Automated Remediation No 
Compliance Reporting No 
Forensic Data Retention No 
Incident Alerting Yes 
Incident Database Yes 
Incident Logs Yes 
Incident Reporting Yes 
Privacy Breach Reporting No 
SIEM Data Ingestion / Correlation No 
SLA Tracking / Management No 
Security Orchestration No 
Threat Intelligence Yes 
Timeline Analysis Yes 
Workflow Automation Yes 
Workflow Management No 

Integrated Risk Management

Audit Management Yes 
Compliance Management Yes 
Dashboard Yes 
Disaster Recovery No 
IT Risk Management Yes 
Incident Management Yes 
Operational Risk Management Yes 
Risk Assessment Yes 
Safety Management Yes 
Vendor Management Yes 

Investigation Management

Contact Management Yes 
Data Management Yes 
Incident Management Yes 
Reporting & Statistics Yes 
Subject Profiles Yes 

PCI Compliance

Access Control No 
Compliance Reporting Yes 
Exceptions Management No 
File Integrity Monitoring No 
Intrusion Detection System No 
Log Management No 
PCI Assessment Yes 
Patch Management No 
Policy Management Yes 

Physical Security

Checkpoint Tracking No 
Customer Management No 
Data Collection Yes 
Event Management Yes 
Incident Management Yes 
Investigation Management Yes 
Multiple Alarm Queues Yes 

Risk Management

Alerts/Notifications No 
Auditing Yes 
Business Process Control No 
Compliance Management Yes 
Corrective Actions (CAPA) No 
Dashboard Yes 
Exceptions Management No 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management No 
Mobile Access No 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management No 
Response Management No 
Risk Assessment Yes 

Vendor Management

Audit Management Yes 
Contact Management No 
Customer Database No 
Self Service Portal Yes 
Supplier Master Data No 
Transaction History No 
Vendor Maintained Profiles No 
Vendor Managed Inventory No 
Vendor Performance Rating Yes 
Vendor Qualification Tracking No 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization Yes 
Risk Management Yes 
Vulnerability Assessment Yes 
Web Scanning No 

Whistleblowing

Access Controls / Permissions No 
Automated Routing No 
Compliance Management No 
Customizable Branding No 
Multi-Language Support No 
Real-Time Chat No 
Reporting / Analytics No 
Workflow / Process Automation No 

Alternatives

Alternatives

GOAT Risk Reviews

GOAT Risk

GOAT Risk™
Onspring Reviews

Onspring

Onspring GRC Software