Skip to main content
Drata logo

Is Drata Down?

No — Drata is up
Drata's status page
Operational · no open incidents
FlareWarden checks
Blocked · drata.com turns our checks away

Right now

We cannot measure Drata directly, so the verdict follows its status page. How we decide

Drata's status page

status.drata.com · read · checked every 3 minutes

Operational
Drata's components, as its status page reports them
ComponentStatus
Web ApplicationOperational
Trust Center PagesOperational
Trust Center Admin PageOperational
AIQAOperational
15 locations All operational

FlareWarden checks

drata.com from 8 regions · every 6 hours

Blocked

Why there is no uptime figure on this page

The last time we fetched Drata's page directly, the origin answered and turned our client away rather than serving the page. That answer tells us the origin was reachable and responding, but it is a response about our automation, not about whether Drata works for you.

A percentage built from those checks would measure our own access, so we do not publish one. What this page does show is each region's most recent result and Drata's own status feed, which you can weigh yourself.

By region · checked

  • Amsterdam Edge responded
  • Dallas Edge responded
  • Frankfurt Edge responded
  • Newark Edge responded
  • Paris Edge responded
  • Stockholm Edge responded
  • São Paulo Edge responded
  • Toronto Edge responded

Edge responded means a static asset loaded. That proves the edge is up, not that the site works.

We can reach drata.com's edge, not measure the site. Test it yourself

History

Incidents Drata reported

Since Oct 22, 15 days · from status.drata.com

Incidents
0
Major or critical
0
Median to resolve
—

No incidents reported in this window.

Drata website availability

Measured by FlareWarden · drata.com

No availability figure: a percentage built from our checks of Drata would measure our own access, not Drata.

Last 30 days

Oct 7: blocked from automated checks
Oct 8: blocked from automated checks
Oct 9: blocked from automated checks
Oct 10: blocked from automated checks
Oct 11: blocked from automated checks
Oct 12: blocked from automated checks
Oct 13: blocked from automated checks
Oct 14: blocked from automated checks
Oct 15: blocked from automated checks
Oct 16: blocked from automated checks
Oct 17: blocked from automated checks
Oct 18: blocked from automated checks
Oct 19: blocked from automated checks
Oct 20: blocked from automated checks
Oct 21: blocked from automated checks
Oct 22: blocked from automated checks
Oct 23: blocked from automated checks
Oct 24: blocked from automated checks
Oct 25: blocked from automated checks
Oct 26: blocked from automated checks
Oct 27: blocked from automated checks
Oct 28: blocked from automated checks
Oct 29: blocked from automated checks
Oct 30: blocked from automated checks
Oct 31: blocked from automated checks
Nov 1: blocked from automated checks
Nov 2: blocked from automated checks
Nov 3: blocked from automated checks
Nov 4: blocked from automated checks
Nov 5: blocked from automated checks
Oct 7 Today
No downtime Partial Downtime Not measurable No data

What Drata does

Drata automates security compliance evidence for frameworks such as SOC 2 and ISO 27001. It pulls configuration and control data from cloud accounts, identity providers and employee laptops, then presents it to auditors and to customers through a hosted Trust Center. Companies rely on it during audit windows and while answering security questionnaires from prospects.

What an outage looks like

The web application fails to load or sign-in stalls. Evidence collection is the quieter failure: incoming webhooks and the agent reporting path stop, so control checks show stale or missing data without any obvious error. Drata also hosts customer-facing Trust Center pages, so an incident there breaks a public page linked from your own marketing site and sales emails.

What to do about it

Open status.drata.com and read your own region. Drata reports US, EU and APAC as separate groups, each with its own API, Agent API, Public API, Auditor API and Incoming Webhooks. Trust Center Pages and the Trust Center Admin Page are listed apart from the Web Application, so confirm which is affected before telling a prospect your compliance page is fine. Postpone audit exports rather than retrying them.

Is it down for everyone, or just you?

If this page says Drata is up but it is not loading for you, the problem is between you and them. Run a check against any URL from up to 17 cities across three regions to find out where it breaks.

Test it yourself

Related services

Drata outage FAQ

Does a Drata outage put my SOC 2 compliance at risk?
An outage interrupts evidence collection and reporting, not the underlying controls. Your cloud configuration, access policies and endpoint settings are unchanged by Drata being unreachable. The practical risk is a gap in the collected record during an audit window, which is a documentation question for your auditor rather than a control failure, and is usually resolved once collection resumes.
Is my public Trust Center down too?
Check separately. Drata lists Trust Center Pages and the Trust Center Admin Page as components distinct from the Web Application, so the page prospects visit can be broken while your internal console works, or the reverse. This matters more than it looks: a Trust Center is normally linked from sales material, so an outage there is visible to people outside your company.
Which region am I on?
Drata operates US, EU and APAC as separate component groups on its status page, each with its own API, Agent API, Public API, Auditor API and Incoming Webhooks rows. An incident affecting the EU group leaves US accounts working normally. Reading the wrong group is the usual reason a status page appears to contradict what you are seeing.
My controls suddenly show as failing. Is that real?
Not necessarily during an incident. Control status is derived from collected evidence, and the Agent API and Incoming Webhooks components are the paths that evidence arrives on. When those are degraded, checks can report stale or absent data rather than a genuine configuration change. Confirm against the source system before treating a newly failing control as a real finding.
Can auditors still access my evidence?
Drata reports an Auditor API for each region as its own component, separate from the main API and the web application. During an incident scoped to that component, auditor access can be affected while your own console works. If an audit is in progress, tell the auditor what the status page reports rather than leaving repeated failed access attempts unexplained.

How we measure this

  • We request Drata's public endpoint every 6 hours from Fly.io regions across six continents — the most recent check ran from 8 of them.
  • A region counts as down only when it gets no usable HTTP response. A 403 or 429 means the origin answered and refused us, which we report as blocked, never as an outage.
  • A single failing region is treated as probe noise. Our checks only change their verdict when two consecutive cycles agree.
  • Response times average only the regions that actually served the page, so a timeout never inflates the number.
  • Where Drata publishes an official status feed we read it too, and the verdict is the worse of what it reports and what our checks see: a major outage of Drata itself is Down, trouble with one part of it is Degraded, problems at a few of a provider's many locations change nothing, and a security notice that marks nothing down is shown but changes nothing either. We check the feed every 3 minutes and read it again within minutes of any change to its incidents or components; a reading counts for 45 minutes after the last check that found nothing changed, and when Drata blocks our checks entirely, we report the vendor's own status directly. The availability figures above are our measurement alone.

Get alerted when Drata goes down

This page refreshes every 6 hours. Your own monitors run as often as every 30 seconds, from up to 17 cities across three regions, and tell you the moment something breaks.

Start Free Monitoring
Free plan available No credit card required