Drata
On a Mission to Build Trust Across the Cloud.
Project Overview
When Drata was in its earliest days, led by the founding team, SpaceDev joined as a strategic development partner to accelerate feature delivery and strengthen the platform’s core capabilities. With a product foundation already in place, our team integrated seamlessly to co-develop key features like the compliance agent and secure audit workflows.
Our contributions helped reinforce Drata’s technical architecture and supported its rapid evolution into one of the most trusted compliance automation platforms on the market today.
Industry
[CYBERSECURITY] [COMPLIANCE TECH]
Headquarters
USA
Year
2024
Project Goals
Automate Compliance: Build the foundation for continuous, automated validation of compliance across various standards.
Streamline Security: Enable secure data collection and management for audit evidence.
Manage Risk: Support companies in proactively identifying gaps in their security posture via automated controls and clear framework tracking.
SpaceDev’s contributions
Drata Agent (macOS, Linux, Windows)
SpaceDev rebuilt and improved the Drata Agent, a cross-platform tool that runs on users' devices and collects critical compliance-related data. Designed to be secure and lightweight, the Agent continuously monitors system information, providing key evidence that feeds directly into Drata’s automation engine.
Secure Audit Hub Architecture
SpaceDev also supported the development of the Audit Hub—a feature that allows external auditors to access relevant, permissioned data securely. By enabling granular access control, this system ensures that auditors can evaluate compliance without compromising sensitive company information.
Technologies used
NodeJs
NestJs
ReactJs
ElectronJs
MySQL
The Bottom Line
What began as a collaboration during Drata’s earliest stage evolved into a long-term partnership that has spanned over four years. SpaceDev has continued to support Drata across multiple phases of growth, contributing to key components of their compliance automation platform—from device-level agents to secure audit workflows.
Our role has been to empower their technical team with scalable, high-impact development—ensuring the platform evolves alongside the complex needs of modern security and compliance. Today, we’re proud to remain a trusted engineering partner to one of the most influential players in the GRC space.
