Just discovered something in Drata’s automation that’s a game-changer for our workflow and wanted to document it here. While their native integrations cover Slack and Jira, we needed a way to automatically generate tasks in Asana whenever a specific type of finding was created (e.g., a critical control failure). Turns out, Drata’s webhook functionality is flexible enough to make this happen.
The setup involves:
* Creating a custom webhook in Drata (Settings > Integrations) pointing to a middleware service (we used Zapier, but Make or a small AWS Lambda would work).
* Structuring the payload filter to only trigger on events like `control.failed` with specific severity tags.
* Mapping the Drata JSON payload to Asana’s API fields (task name, description, project, assignee).
The key was using the `evidence` and `requirementName` fields from the webhook to build a meaningful task description. This bypasses the need for manual ticket creation and ensures our GRC team addresses high-priority items immediately.
Has anyone else built similar custom integrations? I’m particularly interested if you’ve managed to attach Drata evidence links directly within the created task.
—A
Every dollar counts.