Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

    Listing Thumbnail

    Vanta

     Info
    Sold by: Vanta 
    Vendor Insights
    Vanta helps thousands of fast-growing companies simplify and centralize compliance and security workflows so they can build trust.

    Overview

    Play video

    Vanta is the creator and global leader in Trust Management. Today, more than 4,000 AWS customers trust Vanta to streamline their security and compliance programs.

    With more than 300 third-party integrations, Vanta is able to automate the testing and collecting of evidence for frameworks ranging from SOC 2 to FedRamp to NIST AI.

    For companies with self-hosted or custom-built solutions, Vanta also offers the ability to quickly create custom automated tests in the platform, or through the Vanta API.

    Vanta is the only multi-product vendor in the Trust Management category and also offers AI-powered Third Party Risk Management and Trust Center solutions.

    Vanta has three unique packages for customers based on the complexity of their security and compliance programs. Those packages are also based on company headcount.

    A preview of pricing for companies with 1-20 employees can be found below. More details on Vanta pricing and packaging can be found at: vanta.com/pricing.

    AWS customers interested in private offers should email awsmarketplace@vanta.com .

    Highlights

    • Vanta goes beyond checklists and point-in-time audits with continuous monitoring that keeps you secure and compliant at all times. If issues arise, you can receive alerts and guidance via email and Slack or use Vanta's task-tracker integrations to stay on top of fixes.
    • Vanta unifies security program management by bringing together key compliance and security workflows, like access reviews, vendor risk management, and more, saving you time and giving you better contextual insight for prioritizing and managing risk.
    • Build trust in your organization and demonstrate a commitment to security by proactively sharing your Trust Center with customers and prospects.

    Details

    Sold by

    Delivery method

    Features and programs

    Vendor Insights

     Info
    Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
    Security credentials achieved
    (2)

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.

    12-month contract (6)

     Info
    Dimension
    Description
    Cost/12 months
    AWS FTR
    AWS FTR Module
    $7,500.00
    Core Package
    Starting cost for 1-20 employees
    $11,500.00
    Growth Package
    Starting cost for 1-20 employees
    $22,675.00
    Scale Package
    Starting cost for 1-20 employees
    $48,970.00
    Trust Center
    Starting cost for 1-20 employees
    $6,000.00
    Vendor Risk Management
    Up to 50 vendors managed
    $11,200.00

    Vendor refund policy

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Resources

    Support

    Vendor support

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Monitoring
    Top
    25
    In IT Business Management
    Top
    10
    In Centralized Risk Management, Monitoring, Security

    Customer reviews

     Info
    AI generated sentiment from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Continuous Monitoring
    Continuous monitoring that keeps the organization secure and compliant at all times, with alerts and guidance for addressing any issues that arise.
    Unified Security Program Management
    Unification of key compliance and security workflows, such as access reviews and vendor risk management, to save time and provide better contextual insight for prioritizing and managing risk.
    Trust Center
    Ability to proactively share the organization's security and compliance posture with customers and prospects to build trust.
    Automated Testing and Evidence Collection
    Automation of testing and evidence collection for a range of security and compliance frameworks, including SOC 2, FedRAMP, and NIST AI.
    Custom Automated Tests
    Capability to quickly create custom automated tests within the platform or through the API for self-hosted or custom-built solutions.
    Automated Evidence Collection
    Automated collection of audit evidence through more than 100+ integrations with core services such as AWS, Asana, Azure, G Suite, Google Cloud, Github, Gusto, JAMF, Okta and Slack
    Customizable Security Policies
    Prebuilt security policy templates that can be edited to meet the organization's specific needs and ensure they meet the high standards of an auditor or regulatory framework
    Scalable Platform
    Ability to support unique setups with multiple cloud service providers and hundreds of instances, scaling with the business
    Machine Learning-powered Questionnaires
    Secureframe's machine learning-powered solution that makes it fast and easy to respond to RFPs and security questionnaires by pulling the best answer for each question based on approved past responses
    Dedicated Compliance Expert
    Every customer is assigned a dedicated compliance expert, an ex-auditor who can help answer complicated and specific questions that come up, especially during the audit process
    Continuous Monitoring
    Continuously monitors security controls and alerts customers when controls are not operating effectively to remediate and stay secure
    Automated Evidence Collection
    Automatically collects evidence needed for audits to streamline the audit process
    Compliance Framework Integration
    Integrates with over 20 compliance frameworks, standards, and regulations such as SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR
    Application and System Integration
    Integrates with over 200 applications and systems to continuously monitor security controls
    AWS Integration
    Integrates with 45+ AWS services and is an AWS Security Competency partner with an AI engine built on AWS Bedrock

    Security credentials

     Info
    Validated by AWS Marketplace
    FedRAMP
    GDPR
    HIPAA
    ISO/IEC 27001
    PCI DSS
    SOC 2 Type 2
    -
    -
    -
    -
    No security profile
    -
    -
    -
    -

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    5
    2 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    100%
    0%
    0%
    0%
    0%
    2 AWS reviews
    |
    1730 external reviews
    External reviews are sourced from G2  and are not included in the star rating for this product.
    jorge h.

    Vanta a great GRC solution

    Reviewed on Apr 09, 2025
    Review provided by G2
    What do you like best about the product?
    Vanta is a great Governance, Security and compliance tool, it has helped us to achieve ISO27001 certification. Due its friendly and intuitive interface it allow us to demonstrate our information to the auditors easily.
    What do you dislike about the product?
    Even Vanta is a great tool I can include a feature to adapt Vanta to any framework without add ons.
    What problems is the product solving and how is that benefiting you?
    ISO27001 compliance, Third party risk management duties.
    Camilo M.

    Excellent tool to assist with compliance with the different certifying entities.

    Reviewed on Mar 25, 2025
    Review provided by G2
    What do you like best about the product?
    What I like the most is that it keeps me informed about the necessary documentation to comply with SOC2 and HIPAA requirements. I also really like the technical support, it's great.
    What do you dislike about the product?
    What I don't like is that when buying a package, it doesn't allow me to select which regulatory entities I need in the package. For example, if I want SOC2, HIPAA, and Hitrust, I buy a package that includes the first two and also includes ISO 27001, etc., which are already included, but I have to buy another license for Hitrust.
    What problems is the product solving and how is that benefiting you?
    Help keep the information required by SOC 2 and HIPAA up to date, also keep public cloud environments secure.
    Veerapan K.

    Best platform for vendor management and security compliance

    Reviewed on Mar 25, 2025
    Review provided by G2
    What do you like best about the product?
    Vanta have very effective and intuitive interface where we can easily integrate vanta with our organisation server. They are providing secure and reliable infrastructure to manage vendor data and their privacy.
    What do you dislike about the product?
    All Integration and implementation working fine and also they are providing such a great support that handel any tuff situation very easily.
    What problems is the product solving and how is that benefiting you?
    They have number of features and integration like Audit management, security management and vendor management that always full fill our requirements and gives best user experience to us.
    Daniel R.

    Vanta enabled our SOC2 readiness in record time, even without prior experience in this area.

    Reviewed on Mar 24, 2025
    Review provided by G2
    What do you like best about the product?
    Vanta provided us with a well-defined, easy-to-follow process to prepare for the SOC 2 review period. The policy builder was a tremendous help to our team, and integrations with all major systems made the entire process achievable.
    What do you dislike about the product?
    Our team uses both Macs and Linux, but the Vanta client isn’t recognizing the new Mac Passwords app as a password manager, and Linux support remains rudimentary.
    What problems is the product solving and how is that benefiting you?
    Vanta is helping us achieve SOC 2 compliance, which is frequently requested by our customers, thereby enabling new business opportunities for us.
    Julio P.

    Vanta: A Game-Changer for Compliance and Security Management

    Reviewed on Mar 24, 2025
    Review provided by G2
    What do you like best about the product?
    Ease of use. The intuitive interface and seamless integration capabilities allowed for a smooth implementation, enabling our team to quickly adapt and utilize the platform effectively. The dynamic policy builder and extensive integrations have been particularly beneficial in customizing the platform to our specific needs.

    Its comprehensive suite of features, including risk assessment, policy enforcement, and auditing, has streamlined our compliance processes and reduced manual effort.
    What do you dislike about the product?
    Vanta can be expensive for smaller companies, especially those that need compliance but have limited budgets.
    What problems is the product solving and how is that benefiting you?
    Automating Compliance Processes and Streamlining SOC 2, ISO 27001, and HIPAA Compliance
    View all reviews