Stop vendor security reviews going out of date
Every Monday, WebRun opens Drata, walks the vendor list, checks each vendor's review date, risk level, and security documents, posts the ones due or overdue to Slack with the named owner, and opens a Trello card for each review that has to be refreshed.
- No credit card
- Under $0.01 per run
- Cancel anytime
How do I keep vendor security reviews from going out of date?
Every Monday, WebRun opens Drata, reads your vendor list, and finds the security reviews that are due or already overdue, along with vendor documents that have expired. It posts the list to Slack with the risk level and the vendor owner, and opens a Trello card per review, so nothing ages past its date.
- Vendor reviews are refreshed before an auditor samples them
- High-risk vendors are always at the top of the list
- Vendors with no assigned owner get flagged and claimed
Built for compliance leads · security teams · GRC managers · startups preparing for audit
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
app.drata.comin a real browser with your saved login - no setup, no API keys. -
1
Drata - check vendor review dates
drata.com
WebRun opens Drata to check vendor review dates. - Open Drata and go to your vendor list
- Read each vendor's risk level, review date, and assigned owner
- Flag every vendor whose review is overdue or falls due in the next 30 days
- Check the security documents held against each vendor and note any that have expired or are missing
- Flag high-risk vendors first, then medium, then low
- Note any vendor with no owner assigned at all
Done when Every vendor due for review is listed with its risk level, owner, and document status.
-
2
Slack - post what is due and who owns it
slack.com How to Automate Slack
WebRun opens Slack to post what is due and who owns it. - Post the due and overdue vendor reviews to your compliance channel
- Order them by risk level, then by how overdue each one is
- Show the vendor, the review date, the owner, and which document is missing or expired
- Call out any vendor with no owner assigned so it can be claimed today
Done when The compliance channel has this week's vendor review list.
-
3
Trello - open a card per review
trello.com How to Automate Trello
WebRun opens Trello to open a card per review. - Open a Trello card for each vendor review that has to be refreshed
- Put the vendor name, risk level, and due date in the card title
- Assign the card to the vendor owner named in Drata
- Leave the review itself to a person. WebRun never marks a review complete or uploads a document
Done when Each due vendor review has a Trello card assigned to its owner.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Will it mark a vendor review as complete?
No. WebRun reads Drata and reports. It never marks a review done, changes a risk level, or uploads a document. The review itself stays a human judgement recorded by your compliance lead.
How far ahead does it warn me?
It flags reviews due in the next 30 days as well as anything already overdue, so a refresh can be scheduled before an auditor samples the vendor.
What if a vendor has nobody assigned?
It calls that out separately in the Slack post, because an unowned vendor is the one most likely to age out. The Trello card is left unassigned so someone can claim it.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.