Vanta

What do you like best about the product?

The simple interface that provides easy access into what I need to take care of.

What do you dislike about the product?

Some of the items that need to be fixed tend to have shorter solutions than others. It would be nice if there were more details on certain failed items.

What problems is the product solving and how is that benefiting you?

Vanta is helping our company work through the SOC 2 compliance.

What do you like best about the product?

Seamless integrations, easy to setup, great communication with our account team!

What do you dislike about the product?

non-integrated access reviews aren't fully refined or useful just yet. But they are working on it!

What problems is the product solving and how is that benefiting you?

Our Governance and Compliance team needed a better solution than Drata that has more features and a better price point.

What do you like best about the product?

Vanta's software has significantly streamlined our ISO audit process. The platform allows us to map controls directly to certification requirements, and its process management tools enable us to assign work or evidence-gathering tasks directly to the relevant controls and service owners. This setup also provides comprehensive tracking for the steering committee, making oversight much easier.

Recently, I reached out to Vanta's customer support for assistance with an access review question. My support agent, Paige, was outstanding—she created a video with a screen recording that clearly demonstrated all the possible solutions within my account, which made it very straightforward to identify and resolve the issue.

I'm very satisfied with both the software and the support team, and I would recommend Vanta to others.

What do you dislike about the product?

It has taken me some time to get familiar with how the different tools in Vanta are arranged in the navigation. I would really appreciate a feature that makes it easier to jump to my most recently visited or bookmarked pages within the tool.

What problems is the product solving and how is that benefiting you?

Managing our evidence gather processes for compliance audits, Access and vendor security reviews as well as mandatory staff training programs

What do you like best about the product?

Vanta has truly transformed how we handle security and compliance workflows. The platform excels at making vulnerability management both easy and convenient—something that's rare in the compliance space. What I appreciate most is the intuitive way it allows us to manage and resolve security and compliance action items without the usual headaches.

The standout feature for me is the Linear integration. Being able to seamlessly convert vulnerabilities and security callouts into actionable tasks for our engineering team has been a game-changer. It bridges the gap between security/compliance teams and engineering, ensuring nothing falls through the cracks. Instead of manually tracking items in spreadsheets or bouncing between platforms, we can create tasks directly in Linear, which our engineers are already using daily. This integration alone has significantly improved our response time and accountability.

What do you dislike about the product?

While Vanta is excellent overall, there's definitely room for improvement in how it handles scan management. My main frustration is the lack of an easy way to deactivate scans that aren't relevant to our specific environment. When certain scans become repetitive or don't apply to our infrastructure, it would be incredibly helpful to have a more granular way to turn them off.

Additionally, I wish there was better memory functionality for deactivated action items. Currently, when you deactivate something, your options are limited—you can either deactivate it indefinitely or deal with it repeatedly. What would be ideal is a middle ground: an option for Vanta to "remember" that we've reviewed and dismissed certain items, without having to make permanent deactivation decisions. This would reduce noise and help us focus on genuinely relevant security issues.

What problems is the product solving and how is that benefiting you?

As a startup with limited human resources where everyone wears multiple hats, Vanta has been essential in making compliance manageable without requiring a dedicated full-time team. The platform solves several critical challenges that are particularly acute for small, growing companies:

Centralized Policy Access
Vanta provides a single source of truth for all our security and compliance policies. Instead of hunting through shared drives or outdated wikis, every team member—whether they're in engineering, sales, or operations—can instantly access the policies they need. This is invaluable when you don't have a compliance department and everyone needs to be self-sufficient.

Streamlined Training Management
The platform makes security training accessible and trackable for our entire team. Employees can review training materials on their own schedule, and I don't have to chase people down or manually track completion. For a small team juggling competing priorities, this automation is a lifesaver.

Administrative Efficiency
From the administrator perspective, Vanta gives me easy oversight of all compliance tasks and monitoring without drowning in spreadsheets or manual processes. I can quickly see what needs attention, who's responsible, and what's been completed—all in one dashboard. This is critical when compliance is just one of many responsibilities on my plate.

Reduced Compliance Burden
Ultimately, Vanta transforms compliance from a resource-intensive burden into a manageable, sustainable process. Instead of needing specialists or consultants, our lean team can maintain our security posture and compliance certifications while still focusing on building our product and growing the business. For a startup, this efficiency directly translates to cost savings and faster time-to-market for compliance-dependent deals.

What do you like best about the product?

Streamlined audits, evidence uploads, integrations, and implementation.

What do you dislike about the product?

Lack of evidence reference labels. For example, labeling the "Password Configuration" control PW-1 or something similar will provide an easy way to reference which control we need employees to handle.

What problems is the product solving and how is that benefiting you?

Audit, vendor, and compliance management. Audit readiness.