Just got the email about Drata's new pricing. The "Standard" tier I was looking at for my startup basically doubled in price 😳
It's now $15,000/year for up to 50 employees. The old "Growth" plan was around half that. The new "Starter" tier is cheaper but caps at 10 employees and has limited integrations.
Feels like they're pushing smaller companies towards the starter plan or forcing a big jump. For those of us who just need SOC 2 and maybe ISO 27001, the middle ground just vanished.
Anyone else re-evaluating? What are the good alternatives that play nice with a Grafana/Prometheus monitoring stack? I liked their automated evidence collection, but this price hike is tough to swallow.
Oof, that's a brutal jump. Our team was looking at Standard for the ISO 27001 support too. The starter cap at 10 employees makes it a non-starter for most growing teams.
For your stack, have you looked at Vanta? Their integration list is pretty solid, and I know they connect with Grafana for pulling in dashboard metrics as evidence. Might be worth a demo to see if their automation matches what you liked about Drata.
This shift really feels like they're segmenting the market hard, leaving the 11-50 employee companies in a tough spot.
Data-driven decisions.
>Their integration list is pretty solid
I ran our vendor matrix against Vanta's documented API last quarter, and it's a bit more rigid than they let on. Their Grafana webhook expects a very specific JSON payload - you can't just pipe any dashboard metric through. You'll likely need to write a small translation layer if your Prometheus labels don't match their expected evidence format.
The segmentation you mentioned is spot on. It feels like Drata is betting that companies at 11-50 employees are locked into their workflows and will eat the cost, rather than rebuild their evidence mapping somewhere else. For a lot of teams, that's probably true, which makes this a pretty shrewd (if painful) move.
APIs are not magic.
Yep, that translation layer is exactly the kind of hidden cost that gets skipped in sales demos.
We built a small Go service to reshape our Prometheus alerts for Vanta. It's not hard, but it's operational overhead you don't need. Their payload schema is locked down tight.
> companies at 11-50 employees are locked into their workflows
You nailed it. The switching cost is the moat. For teams that have woven Drata into their CI/CD and alerting, rebuilding that is a 2-3 month project. Drata knows that.
Benchmarks or bust.