Drata
Drata automates SOC 2, ISO 27001, and other security compliance monitoring for growing companies.
On the record
Checkpoint: Drata's next funding round, which will show if investors still believe it can close the gap on Vanta
The call
Drata keeps growing and keeps customers locked in through integrations, but Vanta is pulling further ahead on every visible number in the same category.
Drata helps companies prove they follow the rules by automating compliance checks and connecting to hundreds of other business tools. The company has real staying power because switching to a competitor is expensive once you are locked in, and it has built relationships with software resellers who recommend it. But Vanta, a direct competitor doing the same thing, has grown three times faster, raised way more money at a higher valuation, and is pulling further ahead on every measure; the risk is that in a winner-takes-most market like this one, the gap only widens. The key thing to watch is whether Drata can raise new funding at a strong valuation in the next 6 to 12 months, which would show investors still think it can catch up. If it cannot, the company may have to sell itself or go public at a much lower price than its backers hoped.
Why
01
AI pressure: AI-native compliance copilots and agent-based auditors (including Vanta's AI Trust features). AI can auto-generate evidence and policies, shrinking the manual audit-prep work Drata charges for. Could AI do the core job? Unlikely.
02
Bigger players: Vanta. Vanta has tripled ARR to about $300M and hit a $4.15B valuation while Drata sits near $100M and $2B. Could a giant copy it? Probably.
03
What protects it. 300+ integrations, active audit trails, and partner/auditor relationships make ripping Drata out costly mid-cycle.
What would change this call
Drata announces (or fails to announce) a new funding round within 6-12 months. An up-round above $3B suggests Drata is closing the gap; a flat or down round confirms it is losing ground to Vanta.
Vanta and Drata report ARR figures in coming quarters. Whether the ARR gap widens or narrows shows if the compliance category is settling on Vanta.
Drata announces further layoffs or executive departures. Additional cuts would signal deeper financial strain beyond the 2024 workforce reduction.
Vanta and Drata report ARR figures in coming quarters. Whether the ARR gap widens or narrows shows if the compliance category is settling on Vanta.
Drata announces further layoffs or executive departures. Additional cuts would signal deeper financial strain beyond the 2024 workforce reduction.
Key numbers
- Drata ARR crossed $100M
- Vanta ARR reached ~$300M
- Vanta valued at $4.15B vs Drata's $2B
Named risks
- Valuation frozen at $2B since Dec 2022 while Vanta reaches $4.15B, raising down-round or acquisition pressure.
- Two reported rounds of layoffs (Sept 2024 confirmed, Dec 2025 unverified) despite claimed revenue growth.
- SafeBase integration and brand unification (Mar 2026) could cause customer migration friction or churn.
- Vanta's continued fundraising and AI-agent roadmap could erode Drata's product differentiation within months.
- Rapidly evolving AI-governance frameworks (AIUC-1, ISO 42001, EU AI Act phases through Feb 2027) require constant catch-up.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Vanta | losing to | Vanta hit $4.15B valuation (Jul 23, 2025) vs Drata's frozen $2B since Dec 2022 |
| Vanta | losing to | Vanta named Forrester GRC Platforms Wave Leader, Q2 2026, Drata not cited as Leader |
| Secureframe | contesting | Founded same year as Drata (2020), competes on pricing and integration breadth |
| Sprinto | contesting | SMB-focused, lower-cost compliance automation entrant per Sacra analysis, 2025 |
| ServiceNow GRC | gaining on | Enterprise incumbent GRC tooling Drata aims to disrupt as it moves upmarket |
Questions people ask
- Is Drata profitable in 2026?
- Drata has not disclosed profitability figures. It reported crossing $100M ARR with 60% YoY growth and 7,000+ customers on Feb 19, 2025, but remains a privately held, VC-backed company with no public profit or margin data released.
- Who owns Drata?
- Drata is privately held and VC-backed, with no public listing. Its last priced valuation was $2B from a $200M Series C closed Dec 7, 2022, led by ICONIQ Growth and GGV Capital, with backers including Salesforce Ventures and Satya Nadella.
- Is Drata bigger than Vanta?
- No. Vanta raised a $150M Series D at a $4.15B valuation on July 23, 2025, versus Drata's frozen $2B valuation from Dec 2022 and its own reported $100M ARR milestone from Feb 19, 2025, roughly a third of Vanta's estimated scale.
- Could AI replace Drata?
- Unlikely soon. Drata's 300+ pre-built integrations, accumulated audit evidence, and partner channel (about 90% of deals involve partners) create switching costs, and Drata is embedding AI itself via an MCP server released June 12, 2025, rather than being displaced by it.
- Did Drata lay off employees?
- Yes. Drata cut about 9% of its workforce, roughly 40 people, on Sept 26, 2024, according to TechCrunch. An additional workforce reduction was reported for December 2025 by a single aggregator source, though that report remains unverified.
- What did Drata acquire in 2025?
- Drata acquired trust-center and vendor-security-review startup SafeBase for $250M on Feb 12, 2025, adding SafeBase's 1,000-plus customers, including OpenAI, Twilio, CrowdStrike, HubSpot, LinkedIn, and T-Mobile.
Timeline
- 2026-07-16Drata added native support for the AIUC-1 AI-agent assurance framework
- 2026-06-10Drata launched AI Agent Governance product to discover and govern enterprise AI agents
- 2026-03-23Drata rebranded as the Agentic Trust Management Platform
- 2026-02-12Drata opened new San Francisco headquarters, retaining San Diego office
- 2025-07-23Vanta raised $150M Series D at $4.15B valuation, more than double Drata's last valuation
- 2025-06-12Drata released Drata MCP, an experimental Model Context Protocol server for AI tools
- 2025-02-19Drata announced crossing $100M ARR with 60% YoY growth and 7,000+ customers
- 2025-02-12Drata acquired trust-center startup SafeBase for $250M
- 2024-09-26Drata laid off about 9% of its workforce, roughly 40 people
- 2022-12-07Drata closed $200M Series C at a $2B valuation
Revision history
22 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Drata IPO: Investment Opportunities & Pre-IPO Valuations (2023-11-14)
- Drata Celebrates Four Years... Crossing $100 Million ARR (2025-02-19)
- Announcing Drata's Series C (2022-12-07)
- Drata - Headcount, Funding & Open Jobs (2026-07-05)
- Vanta Notches $4.15 Billion Valuation With New Funding Round (2025-07-23)
- $300M Est. ARR, $4.2B Valuation (2026-07-02)
- Vanta Raises $150M Series D (2025-07-23)
- Security compliance unicorn Drata lays off 9% of its workforce (2024-09-26)
- Latest Updates on Job Cuts & Workforce Changes (2025-12-14)
- Employee Count & Headcount Data (2026-06-29)
- Security compliance firm Drata acquires SafeBase for $250M (2025-02-12)
- Drata Brings AI Agent Technology To Vendor Risk Management