All templates

Automated Drata Compliance Readiness Scorecard

Every Monday, WebRun opens Drata, checks the status of controls and evidence tasks against your compliance framework, schedules a Google Calendar deadline for anything falling behind, and posts a readiness scorecard to Microsoft Teams so the team knows where things stand.

Runs on WebRun · Strict Lockdown policy
Every Monday at 9:00 AM WebRunorchestrates each step
1 Drata check control and evidence status
2 Google Calendar schedule catch-up deadlines
3 Microsoft Teams post the readiness scorecard
In short

How do I know if we're falling behind on SOC 2 controls before the audit?

WebRun checks Drata every Monday for the status of your compliance controls and evidence tasks, schedules a Google Calendar deadline for anything falling behind, and posts a readiness scorecard to Microsoft Teams with counts of passing, failing, and needs-evidence controls. It never uploads evidence or fixes a control itself.

  • Falling-behind controls get a deadline the same Monday they're spotted
  • The team sees one readiness scorecard instead of digging through Drata
  • Nothing leaves the internal Teams channel, so audit status stays private

Built for compliance teams · security teams · startups pursuing SOC 2 · GRC managers

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens app.drata.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    Drata - check control and evidence status
    drata.com
    WebRun in Drata: check control and evidence status
    WebRun opens Drata to check control and evidence status.
    • Open Drata and review the status of controls and evidence tasks
    • Note which controls are passing, failing, or need fresh evidence
    • List the control owner for anything falling behind

    Done when Every control's status and owner are listed for the week.

  3. 2
    Google Calendar - schedule catch-up deadlines
    calendar.google.com
    WebRun in Google Calendar: schedule catch-up deadlines
    WebRun opens Google Calendar to schedule catch-up deadlines.
    • Open Google Calendar and check for existing catch-up deadlines
    • Add a deadline event for each control that is falling behind, assigned to its owner
    • Set a reminder ahead of the deadline

    Done when Every falling-behind control has a deadline on the calendar.

  4. 3
    Microsoft Teams - post the readiness scorecard
    microsoft.com
    WebRun in Microsoft Teams: post the readiness scorecard
    WebRun opens Microsoft Teams to post the readiness scorecard.
    • Post the readiness scorecard to the compliance channel in Microsoft Teams
    • Show counts of passing, failing, and needs-evidence controls
    • Highlight any control that has been behind for more than a week

    Done when The compliance channel has this week's readiness scorecard.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
app.drata.com
ScheduleRuns automatically on this cadence
Every Monday at 9:00 AM
DeliveryHow each run's result reaches you
Readiness scorecard · Microsoft Teams
OutputWhat each run produces - A weekly scorecard of control readiness, with calendar deadlines set for anything falling behind.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Does WebRun upload evidence or fix a failing control?

No. WebRun only reads control status and reports it. Uploading evidence or remediating a failing control is done by the control owner in Drata.

Will it schedule anything without checking first?

It only adds a calendar deadline for controls already falling behind, and checks for an existing event first so it doesn't create duplicates.

Who sees the readiness scorecard?

It posts to your internal compliance channel in Microsoft Teams. WebRun never shares control status with your auditor or anyone outside the team.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.