My main use case for Vanta is evidence collection and audit readiness. A specific example of how I use Vanta for evidence collection and audit readiness is that Vanta interfaces with internal environments and is also configured towards regulatory frameworks. My role is to pull the evidence in accordance with the framework requirements and use it in audits.
Vanta
VantaExternal reviews
2,318 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Efficient Integration, Needs Contextual Refinement
What do you like best about the product?
I like how Vanta centralizes records across platforms, teams, and OUs, which makes compliance record-keeping for SOC2 more manageable. Its ease of integration with technology tools and platform services like the hyperscalers is also a big plus. I find Vanta efficient in reporting compliance gaps, with it taking about 24 hours to see when a rule is breached in a system. Additionally, updating policies and linking to exceptions is easy. The initial setup was super easy, which made getting started a breeze.
What do you dislike about the product?
There's an element of checkbox security theater with Vanta, like requiring all logs to be kept for a specific number of days. This approach feels lazy and can be expensive. I think Vanta could improve by discerning context rather than applying rules superficially. For example, it could determine the relative importance of logs in a production account compared to a developer sandbox, as no company views them as equivalent.
What problems is the product solving and how is that benefiting you?
I use Vanta for compliance record-keeping for SOC2. It centralizes records across platforms and teams, integrates easily with technology tools, and efficiently reports compliance gaps. I can update policies and link to exceptions easily, making it user-friendly for managing compliance.
Streamlined audit evidence collection has saved time but ongoing alignment with new tech is needed
What is our primary use case?
What is most valuable?
Great reporting, metrics, and KPIs are unique aspects of my main use case with Vanta.
The best features Vanta offers in my experience include the reporting features and the integration with internal environments. When I mention integration with internal environments, the interface is very smooth as it interfaces with different clinical information systems, HR related systems, third-party management systems, and legal systems in order to store contractual information.
Vanta has impacted my organization positively by helping streamline evidence collection and audit readiness. It streamlines those processes by saving time with evidence collection because I do not have to go around and ask team members and various stakeholders for evidence artifacts for regulatory compliance criteria. Instead of having to follow up with people, the evidence is already there in a repository because of the interface.
What needs improvement?
Vanta can improve by continuing to evolve with changing technology.
For how long have I used the solution?
I have been using Vanta for two years.
What do I think about the stability of the solution?
Vanta is stable.
What do I think about the scalability of the solution?
Vanta's scalability is very good because it can be configured towards different frameworks depending on the scope.
How are customer service and support?
The customer support for Vanta is good.
How would you rate customer service and support?
Positive
What was our ROI?
I have seen a return on investment because time is saved as evidence collection is reduced since the evidence is there due to the interface and not having to chase down different stakeholders and team members to retrieve evidence. This saves a lot of time.
Which other solutions did I evaluate?
Before choosing Vanta, I did not evaluate other options.
What other advice do I have?
I would tell others looking into using Vanta that it is a very good platform to use. I give this review a rating of 7.
End-to-End Compliance Automation That Keeps Us Audit-Ready Year-Round
What do you like best about the product?
What I like best about Vanta is how it automates compliance end-to-end. It significantly reduces manual evidence collection, provides real-time monitoring, and makes frameworks like SOC 2 much more manageable for growing teams. The integrations are seamless and the platform is intuitive, which saves time and keeps everything audit-ready year-round.
What do you dislike about the product?
Some controls can be a bit difficult to navigate at first. While the platform is powerful, certain sections and workflows could be more intuitive, especially when trying to locate specific controls or understand how they connect across frameworks.
What problems is the product solving and how is that benefiting you?
Vanta solves the problem of not knowing where to start or how to stay on track with compliance. It provides a clear framework and step-by-step guidance, so we’re not guessing what controls to implement or what evidence to collect.
Powerful Compliance Management Made Effortless
What do you like best about the product?
I appreciate that Vanta keeps all our documentation and policies in one place, which makes management simpler. I like having templates for a lot of the policies, and the ability to see and assess vendors is very useful. I find the ability to remote check PCs quite beneficial. It's also great that I can review the progress of other frameworks like SOC 2 or ISO 42001, which we plan to do in the future. Setting up Vanta was very easy, and our tech guys find it easy to use. It's a very powerful tool.
What do you dislike about the product?
Nothing
What problems is the product solving and how is that benefiting you?
I use Vanta to manage ISO27001 compliance, keeping all documentation in one place, simplifying management, and tracking certification status. It provides templates for policies, vendor assessments, and remote PC checks, and enables reviewing progress on other frameworks like SOC 2.
Vanta Makes Compliance Easy with Time-Saving Automated Monitoring
What do you like best about the product?
What I like most about Vanta is how it simplifies compliance and continuously monitors our environment without heavy manual effort. The integrations with cloud providers and security tools save us a lot of time, and the dashboard makes it very clear what needs attention. Evidence collection that used to take days is now mostly automated.
What do you dislike about the product?
Some configurations and integrations can take time to understand at the beginning, especially if your environment is complex. Occasionally we need manual intervention for edge cases, and deeper customization in reports would be helpful. Pricing can also feel high for smaller teams.
What problems is the product solving and how is that benefiting you?
Vanta helps us stay audit-ready by automating evidence gathering, tracking control effectiveness, and highlighting gaps before auditors do This reduces stress during audit periods and allows the team to focus more on improving security instead of chasing screenshots and documents It has significantly improved our visibility and accountability.
Fast UI Testing Refresh with a Handy Vulnerabilities Section
What do you like best about the product?
UI/testing: you update your code and refresh to see whether the test passes or fails. There’s also a Vulnerabilities section.
What do you dislike about the product?
In the test section, I have to right-click to open something in a new tab. I always use Ctrl + click, which is much faster for me, but the dashboard’s JavaScript check blocks it. Please disable that JS check in the dashboard so Ctrl + click works as expected.
What problems is the product solving and how is that benefiting you?
SOC2: it helps me keep all the documentation in one place, and it’s easy to follow what I need to do.
Effortless Compliance Management, Top-Tier Support
What do you like best about the product?
I really like that Vanta seems to be made by people who understand the compliance space, making it feel like a tool developed by experts for those in my position. Working with Vanta is much clearer and more efficient compared to other vendors, and everything is set up in an efficient way. I appreciate that Vanta provides an organized and easy-to-interact-with system where everything is in one place. The ability to filter by specific frameworks like GDPR or USDP and the structure that links everything together is super helpful. It offers templates and best practices that save us a lot of time in creating policies. The account manager, Lacey, is fantastic, as she answers our questions and seeks out answers when she doesn't have them. The automation of evidence management and the support system provided by Vanta has made compliance much easier to tackle. The initial setup was super easy with additional support from another company, making the start a smooth experience.
What do you dislike about the product?
I get way too many email notifications from Vanta. Maybe that's something that I can customize on my end, but it's not something I've bothered to look at. Also, we've had a lot of questions about best practices in the platform, and if it was more visible, like best practices when using the platform, or if things were simplified so those best practices are entwined in the user experience, that would be helpful.
What problems is the product solving and how is that benefiting you?
I use Vanta to manage and organize compliance evidence efficiently across multiple frameworks like GDPR and SOC 2. It saves time with features like evidence templates and cross-framework application, simplifying complex compliance processes.
Efficient Compliance Management with Room for Cost Improvement
What do you like best about the product?
I like that Vanta simplifies the compliance process and makes everything more organized. The simple dashboard is particularly helpful as it tells us what action items need to be taken and flags us whenever something needs our attention. After the first integration, it becomes easier and faster to maintain compliance in future years.
What do you dislike about the product?
It's more expensive compared to other platforms. The initial setup was somewhat painful the first time, but it gets easier over time.
What problems is the product solving and how is that benefiting you?
Vanta simplifies compliance processes, keeps everything organized, and the dashboard flags necessary action items, making maintaining compliance easier over time.
Easy to Use with Engaging Training Videos, but Backend Structure Could Improve
What do you like best about the product?
Ease of use, easy to sign employees up, create content and the system owned training videos are engaging
What do you dislike about the product?
At times it feels a little disorganized in the backend, lots of flexibility with groups but there could be better structure in place.
What problems is the product solving and how is that benefiting you?
Ensuring we're onboarding employees and contractors in a compliant manner, allowing flexibility where required.
Easy Collaboration, Strong Security, and Excellent Training Videos
What do you like best about the product?
Ease of use, easy to collaborate on. Supports our organizations security posture. The training videos are well done.
What do you dislike about the product?
Relatively high cost, not overly flexible.
What problems is the product solving and how is that benefiting you?
Vanta is supporting our SOC II compliance and audit management.
showing 1 - 10