Overview
Drata continuously monitors your controls for SOC 2, ISO 27001, HIPAA and other frameworks. Tierity connects read-only to Drata’s public API, syncs every 6 hours, and turns what needs action (failing tests, incomplete offboarding, people without MFA) into findings in the same queue as the rest of your stack.Prerequisites
- A Drata admin who can create API keys
- Manage access (or higher) in Tierity
Credentials required
Setup
1
Create a read-only API key
In Drata, go to Settings → API Keys, create a key with the All read scope, and copy it.
2
Connect in Tierity
Go to Config → Integrations → Drata, enter the key, choose your region, and click Test connection. The first sync starts straight away.
What gets synced
Findings
Findings close on their own when Drata reports the problem fixed. Findings you’ve accepted or closed are left alone.
Viewing in Tierity
- The Drata page in the sidebar shows framework readiness and tabs for tests, personnel, devices, policies and vendors.
- The Drata Workbench card shows readiness for your top frameworks plus failing tests, incomplete offboarding, people without MFA and vendor reviews due.
Sync schedule
Drata syncs every 6 hours, and straight away when you first connect or click Test connection. Self-hosted instances can change the interval with theDRATA_SYNC_INTERVAL_MINUTES environment variable.