In San Diego, California, during a time of disruption caused by the COVID-19 pandemic, Drata was founded by three individuals who had previously worked together and co-founded a digital portfolio startup. Their common pain point was ensuring compliance with regulations and standards for software developed by engineers. Drata’s vision is to democratize access to trust-building tools for companies.
Automating Compliance Checks:
Rather than waiting until software is written to evaluate compliance, Drata aims to automate the process in real-time while engineers are programming. To achieve this, Drata recently acquired oak9, a Chicago-based startup known for its “infrastructure-as-code” approach. This approach allows developers to manage datacenters through machine-readable definition files, ensuring adherence to security and compliance standards across any cloud platform. Oak9’s technology has been integrated into Drata’s platform, enabling GRC teams to scan infrastructure code, identify discrepancies, and take corrective action before deployment.
Compliance as Code:
Drata’s new platform, called “Compliance as Code,” offers real-time, automated testing and adjustments to code strings to meet compliance standards set by customers even before coding begins. Similar to Grammarly’s suggestions for writers, Drata’s platform detects non-compliant code and suggests remediation at the code level. The platform is currently in beta and will be showcased at the upcoming RSA conference in San Francisco.
Benefits of the oak9 Acquisition:
The integration of oak9’s technology into Drata’s platform allows for comprehensive compliance automation throughout the software development life cycle (SDLC). Drata now covers critical stages such as the code repository and the continuous integration and deployment pipeline. By scanning infrastructure code, flagging discrepancies, and taking corrective action before deployment, Drata enhances efficiency and confidence in the run-up to audits.
Future Development:
Drata’s Compliance as Code is available through its suite of software-as-a-service (SaaS) subscription offerings. The integration of oak9’s capabilities allows Drata to offer a secure development environment that is efficient and less burdensome for maintaining code compliance. As Drata continues to integrate oak9’s technology, it aims to provide even more innovative solutions for compliance automation.
Conclusion:
Drata’s mission to democratize access to trust-building tools for companies has led to the acquisition of oak9 and the development of its Compliance as Code platform. By automating compliance checks in real-time during software development, Drata streamlines processes and reduces the time required for manual compliance checks. With the integration of oak9’s technology, Drata now covers the entire SDLC, offering a secure development environment that ensures code compliance. As Drata continues to innovate, it aims to provide an even more efficient and less burdensome solution for companies seeking to maintain compliance in their software development processes.
