Drata

Compliance automation continuously monitoring controls for SOC 2, ISO 27001, and other frameworks.

Drata connects to a company's systems to collect evidence and continuously test controls across frameworks including SOC 2, ISO 27001, GDPR, and HIPAA, with risk management and trust center features layered on top. It targets companies that treat compliance as an ongoing state rather than an annual scramble. Founded in 2020.

Category

GRC & Third-Party Risk

Founded

2020

Funding

$328M raised (Series C, 2022)

Website

https://drata.com

Seen at Black Hat USA 2026 (Silver Plus sponsor, booth 5335).

Outbound clicks are tokenized for directory analytics.