Product Updates

Drata

New Integration: Orca Security for Vulnerability Scanning

Drata now integrates with Orca Security, a leading vulnerability scanning provider for enterprise environments. Click here to learn more!

January 30, 2026

Drata

Group Scoping Now Required for Identity Provider (IdP) Connections

Group scoping is now required when setting up the following Identity Provider (IdP) connections: Microsoft 365, Microsoft 365 GCC High, Okta, and Google. Click here to learn more!

January 3, 2026

Drata

Microsoft 365 User Identity Mapping Selection (UPN or Email)

We have updated both the Microsoft 365 Identity Provider and the Microsoft 365 GCC High Identity Provider connection drawers to give customers explicit control over which field is used for user identity mapping. Instead of always defaulting to the User Principal Name (UPN), customers can now choose between Primary Email or UPN to map personnel identities. Click here to learn more!

December 20, 2025

Drata

ISO/IEC 27018:2025 Now Supported

Drata enables you to adopt ISO 27018:2025 immediately by delivering the updated control set, pre‑mapped to other frameworks and powered by continuous monitoring—so your team can protect PII, demonstrate compliance, and scale trust‑worthy cloud services faster. Click here to learn more!

December 20, 2025

Drata

TISAX (Trusted Information Security Assessment Exchange) Now Supported

Drata accelerates TISAX readiness by centralizing evidence, automating control monitoring, and mapping ISO 27001 controls directly to the VDA ISA requirements. For organizations already aligned to ISO 27001, Drata covers the remaining automotive-specific 30% and streamlines audit readiness. Click here to learn more!

December 20, 2025

Drata

Custom Workflows

Managing a GRC program often requires repetitive, manual tasks—tracking events in Drata, identifying important changes, and following up with the right people. Custom Workflows removes that friction by letting you automate these steps through workflows you design. Click here to learn more!

December 5, 2025

Drata

Email Notifications on Evidence Assignment

Evidence Owners. Click here to learn more!

December 5, 2025

Drata

Drata supports NYDFS Part 500

Drata now supports NYDFS Part 500 (23 NYCRR 500)—New York State’s cybersecurity regulation for financial services organizations. Click here to learn more!

November 22, 2025

Drata

Evidence Library Upgrades: Larger File Sizes & New File Types

Drata has expanded the Evidence Library to support more file types and larger uploads, helping customers—especially large, complex enterprises—accurately represent their compliance evidence without workarounds or external tools. Click here to learn more!

November 22, 2025

Drata

13 New Provider Integrations

Drata now supports 13 additional Security Training providers. Click here to learn more!

November 14, 2025