Product Updates

Drata

New Integration: Upwind for Vulnerability Scanning

Drata now integrates with Upwind, a leading vulnerability scanning provider for enterprise environments. Click here to learn more!

February 13, 2026

Drata

Bitbucket (Version Control Integration): API Endpoint Updates

We’ve updated the Bitbucket integration to align with upcoming changes to Atlassian’s Bitbucket Cloud REST APIs. Click here to learn more!

February 6, 2026

Drata

New Integration: Orca Security for Vulnerability Scanning

Drata now integrates with Orca Security, a leading vulnerability scanning provider for enterprise environments. Click here to learn more!

January 30, 2026

Drata

Group Scoping Now Required for Identity Provider (IdP) Connections

Group scoping is now required when setting up the following Identity Provider (IdP) connections: Microsoft 365, Microsoft 365 GCC High, Okta, and Google. Click here to learn more!

January 3, 2026

Drata

Microsoft 365 User Identity Mapping Selection (UPN or Email)

We have updated both the Microsoft 365 Identity Provider and the Microsoft 365 GCC High Identity Provider connection drawers to give customers explicit control over which field is used for user identity mapping. Instead of always defaulting to the User Principal Name (UPN), customers can now choose between Primary Email or UPN to map personnel identities. Click here to learn more!

December 20, 2025

Drata

ISO/IEC 27018:2025 Now Supported

Drata enables you to adopt ISO 27018:2025 immediately by delivering the updated control set, pre‑mapped to other frameworks and powered by continuous monitoring—so your team can protect PII, demonstrate compliance, and scale trust‑worthy cloud services faster. Click here to learn more!

December 20, 2025

Drata

TISAX (Trusted Information Security Assessment Exchange) Now Supported

Drata accelerates TISAX readiness by centralizing evidence, automating control monitoring, and mapping ISO 27001 controls directly to the VDA ISA requirements. For organizations already aligned to ISO 27001, Drata covers the remaining automotive-specific 30% and streamlines audit readiness. Click here to learn more!

December 20, 2025

Drata

Custom Workflows

Managing a GRC program often requires repetitive, manual tasks—tracking events in Drata, identifying important changes, and following up with the right people. Custom Workflows removes that friction by letting you automate these steps through workflows you design. Click here to learn more!

December 5, 2025

Drata

Email Notifications on Evidence Assignment

Evidence Owners. Click here to learn more!

December 5, 2025

Drata

Drata supports NYDFS Part 500

Drata now supports NYDFS Part 500 (23 NYCRR 500)—New York State’s cybersecurity regulation for financial services organizations. Click here to learn more!

November 22, 2025