Companies / security
Drata
51incidents since 2025-07-21
34major or critical
8in the last 90 days
0silently edited or deleted
Recent notable changes
| When (UTC) | Change | Kind |
|---|---|---|
| Major incident: Delayed scheduled compliance checks and ticket synchronization in the US region Drata reported a major degradation delaying scheduled compliance checks and ticket synchronization for some US-region customers, including expiration checks, compliance and vendor review reminders, and linked ticket status updates. It started 2026-10-08 13:40 UTC and was resolved 2026-10-09 23:30 UTC, lasting 33 h 49 min. The web application and API remained available; no data loss was reported. | Major incident | |
| Major incident: Some Policy PDF Downloads Missing Appendix Page Drata reported a major incident: some downloaded policy PDFs lacked the “Policy version history” page; policy content remained complete and no data was lost. It ran from 2026-10-05 19:28 UTC to 2026-10-10 00:01 UTC (4 days 4 h). Drata restored pages across all regions for Policy Builder and uploaded PDFs; customers who downloaded or shared affected PDFs should download again. | Major incident | |
| Major incident: Cron service degraded Drata reported major cron service degradation affecting background tasks that flag expired reports, update approval statuses, apply policies, and recalculate control readiness, potentially leaving compliance data stale. It started at 2026-09-24 18:56 UTC and was resolved at 2026-09-25 16:37 UTC, lasting 21 h 40 min; a fix was deployed and monitored. | Major incident | |
| Critical incident: Multiple products unavailable Drata reported a critical outage affecting Trust Center Pages, Trust Center Admin Page, AIQA, and Compliance Monitoring (AI Summary), caused by upstream provider network service degradation. It started at 2026-09-01 15:14 UTC and was resolved at 2026-09-01 19:29 UTC, lasting 4 h 14 min; all impacted services were operational at resolution. | Major incident | |
| Major incident: Public API in US region degraded Drata’s major US Public API degradation caused request failures and potentially incorrect framework/control readiness data from 2026-08-26 13:32 UTC to 2026-08-28 23:58 UTC (2 days 10 h). No data was lost; EU and APAC were initially unaffected. Drata deployed fixes and reported normal operation at resolution, with no customer action required. | Major incident | |
| Critical incident: Brief SafeBase App Request Failures Drata reported critical SafeBase request failures: some requests errored or timed out because edge traffic filtering rules blocked legitimate traffic. Recorded start and resolution were both 2026-08-21 01:00 UTC (computed duration: 0 min), although the vendor described approximately six minutes of failures on August 20. | Major incident | |
| Major incident: Report and export downloads not being delivered to some users Drata reported a major incident affecting in-app completion notifications for some report and export downloads, with no evidence that files failed to generate or were lost. It started 2026-08-11 21:06 UTC and was resolved 2026-08-14 19:44 UTC, lasting 2 days 22 h; a fix was deployed and validated. | Major incident | |
| Major incident: Bulk Actions on Personnel Degraded Drata temporarily disabled the 'Bulk Actions' button on the Personnel page, preventing customers from using that functionality. The vendor rated the incident major; it began 2026-06-22 18:01 UTC and lasted 4 days 3 h, resolving at 2026-06-26 21:18 UTC. Drata reported an edge case during validation and deployed a fix before resolution. | Major incident | |
| Major incident: SafeBase <> Salesforce integration degradation Drata reported major SafeBase Salesforce integration degradation starting 2026-06-08 22:38 UTC, resolved 2026-06-09 22:07 UTC after 23 h 28 min. Salesforce data lookups intermittently failed for a subset of customers due to refresh token expiration at its integration provider; SafeBase remained operational and no customer data was affected. The integration was fully restored. | Major incident | |
| Major incident: Degraded AIQA Performance Drata reported a major incident isolated to AIQA, with elevated errors attributed to degraded performance of an upstream provider. It ran from 2026-06-04 16:22 UTC to 2026-06-04 17:29 UTC, lasting 1 h 7 min. Drata reported that the provider stabilized and a fix was implemented before marking the incident resolved. | Major incident |
Full Drata change timeline, with diffs →
Status incident history
Drata status incidents per year
Data table
| Year | Incidents | Major/critical |
|---|---|---|
| 2025 | 23 | 16 |
| 2026 | 28 | 18 |
Incidents per month, last 36 months
criticalmajorminornonemaintenanceunknown
Data table
| Month | Impact | Incidents |
|---|---|---|
| 2025-07 | major | 1 |
| 2025-08 | major | 2 |
| 2025-08 | minor | 3 |
| 2025-09 | critical | 1 |
| 2025-09 | major | 1 |
| 2025-09 | minor | 2 |
| 2025-10 | major | 5 |
| 2025-11 | critical | 1 |
| 2025-11 | major | 1 |
| 2025-11 | minor | 1 |
| 2025-12 | critical | 3 |
| 2025-12 | major | 1 |
| 2025-12 | minor | 1 |
| 2026-02 | critical | 1 |
| 2026-02 | major | 1 |
| 2026-02 | none | 1 |
| 2026-03 | major | 1 |
| 2026-03 | minor | 1 |
| 2026-03 | none | 1 |
| 2026-04 | major | 2 |
| 2026-04 | none | 2 |
| 2026-05 | critical | 1 |
| 2026-05 | major | 2 |
| 2026-05 | minor | 3 |
| 2026-05 | none | 1 |
| 2026-06 | major | 3 |
| 2026-08 | critical | 1 |
| 2026-08 | major | 2 |
| 2026-09 | critical | 1 |
| 2026-09 | major | 1 |
| 2026-09 | minor | 1 |
| 2026-10 | major | 2 |
Silent edits
No silent edits or deletions detected for Drata yet. We compare every 10-minute snapshot of each incident.
The Weekly Rewind: one short weekly email on what changed at Drata and the other vendors we track, including silent edits. Subscribe →
Pricing, trust and legal pages
| Page | URL | Versions | Last changed | Last fetched OK | History |
|---|---|---|---|---|---|
| Pricingpartial | drata.com/pricing | 0 | none yet |
No changes since the first snapshot. Each change links to its diff: the changed passages with a few words of context, never a full copy of the page.
Incident timeline
Latest 51 of 51 incidents. Full list: last 90 days · JSON · Markdown