Skip to main content

Test Library (New experience)

Updated over a week ago

💡 Still using the classic Drata experience? Refer to Test Library for the original UI.

Overview

The Test Library is your central hub for discovering compliance tests and adding them to your monitoring program. It helps you understand which tests are available, which are already in use, and which may be relevant to your compliance scope.

When you open the Test Library, you see a summary that shows:

  • The total number of available tests

  • How many tests are already in use in your program

  • How many tests are not yet in use

Below the summary, a table lists all available tests, allowing you to review, filter, and add tests based on your needs.

Go to Library > Tests to view all available tests.

Test library page

Understand test usage and status

Each test in the library represents a test template. Adding a test from the library creates an active copy of that test in your program, which you then manage from Monitoring.

  • In use: The test has already been added to your program.

  • Not in use: The test is available but has not yet been added.

  • Draft tests: Do not affect readiness.

  • Published tests: Run automatically and contribute to control and framework readiness.

If a test is already in use, you can access and manage its active copies directly from Monitoring.

Find and filter tests

You can use filters and search to quickly find relevant tests.

Available filters include:

  • Usage: In use, not in use, or new

  • Rating: Essential or Recommended

  • Category: For example, identity, infrastructure, or device

  • Framework and requirement mappings

  • Connections: Active and inactive connections are clearly indicated

If you select an infrastructure connection, you can further filter by resources associated with that provider (for example, filtering AWS tests by database resources).

Note: You can only add tests that have an active connection.

Test ratings

Tests in the library are assigned ratings to help guide prioritization:

  • Essential: Commonly expected for organizations starting with baseline compliance (such as SOC 2 fundamentals)

  • Recommended: Valuable for broader coverage or more mature programs

Ratings are guidance, not requirements. Always review the scope of each test and work with your auditor to determine what is appropriate for your organization.

Add tests to your program

You can add one or more tests from the Test Library to your program.

  1. Select one or more tests, or use bulk selection.

  2. Choose Add tests, then select whether to add them as Draft or Published.

  3. Drata verifies that all required connections are active before adding the tests.

Once added, tests appear on the Monitoring page, where you can:

  • Enable or disable them

  • Review results

  • Map them to controls

  • Manage findings and exclusions

Workspace awareness

The Test Library is workspace-aware. When adding tests, you select the workspace where the test should run. This helps ensure monitoring aligns with how your organization structures compliance across environments.

Best practices

  • Review tests before adding them to confirm relevance to your environment.

  • Use Draft tests to validate behavior before impacting readiness.

  • Periodically review unused tests to identify gaps in monitoring coverage.

  • Coordinate with your auditor to confirm which tests are in scope.

Did this answer your question?