rocketkind
Security

Drata

Drata is a security compliance platform: it holds a company's controls, the evidence filed against them, the monitoring tests that watch infrastructure continuously, and the vendors, risks, policies and personnel an auditor asks about.

Authentication

  • API key

Actions

Generic API request. Call any Drata public API v2 endpoint on this connection, for the case where no shipped action covers it yet — an audit, an asset, a device, a control note or a custom data record. The connection supplies the base URL, the authentication and the egress route, so only the path, query and body are yours to fill.

  • Create evidenceFile a new item in a workspace's Drata evidence library, with one or more artifacts and an optional renewal schedule.
  • Create taskOpen a Drata compliance task in a workspace, optionally assigned to somebody and linked to the controls, risks or policies it is about.
  • Create vendorAdd a third party to Drata's vendor inventory, with its category, risk rating and what data it touches.
  • Get companyRead the Drata account's own company record — legal name, primary domain, and which providers back its security training, HIPAA training and background checks.
  • Get controlFetch one Drata control in full — its description, the question it answers, its readiness flags and, with Expand, the framework requirements and evidence mapped to it.
  • Get personnelFetch one Drata personnel record — employment status, start and separation dates, and optionally that person's compliance checks.
  • List controlsList a workspace's Drata controls with their readiness flags.
  • List evidenceList a workspace's Drata evidence library items and their status.
  • List frameworksList the compliance frameworks a Drata workspace is working towards — SOC 2, ISO 27001 and the rest — with how many of their requirements are ready.
  • List monitoring test failuresList the individual resources currently failing one Drata monitoring test — the cloud security groups, repositories or accounts behind a red check, with their provider, region and ARN.
  • List monitoring testsList a workspace's Drata monitoring tests and their current result.
  • List personnelList the people Drata tracks for compliance — employees, contractors, future hires and service accounts — with their employment status.
  • List policiesList the account's published Drata policies with their current version and renewal date.
  • List risk registersList the account's Drata risk registers — the books a risk can live in.
  • List risksList the risks inside one Drata risk register, with their inherent and residual scores and treatment plan.
  • List tasksList a workspace's Drata compliance tasks, filtered by status, assignee, type or due date.
  • List vendorsList the third parties in Drata's vendor inventory, with their risk rating, impact level and review status.
  • List workspacesList the Drata workspaces on this account — the products or business lines that keep separate compliance scopes.

Product names, logos and brands are the property of their respective owners and are used here for identification only. Their use does not imply endorsement by, or affiliation with, those owners.