AI agents for Drata

List workspaces

Lists the account's workspaces (one per product or compliance program), as data: each with its id, name, description, whether it is the primary one, and its frameworks (SOC 2, ISO 27001 …).

List controls

Lists a workspace's controls, filtered by whether they are ready, have evidence, a policy, a monitor or a passing test, or are archived.

List monitoring tests

Lists a workspace's automated monitoring tests, filtered by result (PASSED, FAILED, ERROR, READY, PREAUDIT), state (ENABLED, DISABLED, TESTING …) or type.

List a test's failing resources

Lists the resources that fail one monitoring test (cloud resources, accounts, repositories), as data.

Search personnel

Finds people tracked by Drata across all workspaces, by free text (name, email, job title) and by compliance.

List policies

Lists published policies, optionally by part of the name or by status (ACTIVE, OUTDATED, ARCHIVED, REPLACED, UNACCEPTABLE).

Search risks

Searches risks across every risk register, by free text (title, description, risk ID, vendor name), status (ACTIVE, CLOSED, ARCHIVED), treatment plan, or a minimum residual score.

List vendors

Lists third-party vendors (needs Drata's vendor risk management plan), filtered by status, risk (NONE, LOW, MODERATE, HIGH), impact level, or whether action is required (a review due soon or overdue).

Re-run a monitoring test

Runs one monitoring test now instead of waiting for its schedule, after a fix.

Create a task

Creates a task in a workspace with a title, due date, optional description, type, assignee (a Drata user ID) and linked controls, risks or policies, so remediation work is tracked in Drata.