Vanta

What do you like best about the product?

I find Vanta easy for compliance. It makes me have to do less work. The initial setup was very easy.

What do you dislike about the product?

Nothing

What problems is the product solving and how is that benefiting you?

Vanta solves my compliance problems, making compliance easier and reducing my workload.

What do you like best about the product?

Human support; sections break down our gaps and priorities, well-defined.

What do you dislike about the product?

Price and excess of repreated emails and alerts

What problems is the product solving and how is that benefiting you?

Helping us to qualify for an ISO certification and finding gaps in our processes, as well as designing new ones in cooperation with different departments.

What do you like best about the product?

What I like most about Vanta is how it simplifies security and compliance without making the process feel overwhelming. the dashboard is easy to navigate, and the automated monitoring saves a lot of time compared to handling everything manually.it also makes it easier to stay organized by keeping compliance tasks, evidence, and integrations in one place. Overall, it has helped our team work more efficiently and maintain better visibility into our security.

What do you dislike about the product?

One thing I think could be improved is the initial setup learning curve. I also feel that a few workflows could be more intuitive, but once you're familiar with the platform, it becomes much easier to use.

What problems is the product solving and how is that benefiting you?

Before using Vanta, keeping track of compliance tasks and security requirements took a lot of manual efforts. Vanta has made the process much more organized by automating routine checks and keeping everything in one place.

What do you like best about the product?

I really like how Vanta helps in centralizing and automating compliance management across the organization. It monitors security controls, collects audit evidence, tracks employee security training, and manages compliance frameworks such as SOC 2, ISO 27001, and HIPAA. It's a relief not having to rely on manual work like spreadsheets and emails. The single dashboard Vanta provides makes it easy to oversee compliance activities, stay audit-ready, improve collaboration with IT and security teams, and reduce the administrative burden of ongoing compliance. The feature I mostly like is the Automated evidence collection as it gathers compliance evidence continuously and works with endpoint management systems without the need for manual reports. This significantly reduces preparation time before audits, minimizes human errors, and makes internal reviews and external audits much more efficient. Plus, the initial setup of Vanta was easy.

What do you dislike about the product?

I find the limited flexibility Vanta offers for organizations with highly customized compliance workflows to be problematic. It would be great to have a more advanced workflow customization builder with drag-and-drop logic, conditional approvals, and configurable compliance rules. This would allow compliance teams to tailor processes to their requirements while maintaining automation and audit readiness.

What problems is the product solving and how is that benefiting you?

I use Vanta to centralize and automate compliance management, reducing manual work and errors in audit preparation. It helps me stay audit-ready by improving collaboration and reducing administrative burdens, while enhancing visibility into security gaps and policy exceptions for proactive issue resolution.

What do you like best about the product?

We specifically like how Vanta is able to be a one-stop shop for our SOC2 compliance and the ability to communicate that with customers through the trust center. It also enables us to be the nerve system for auditing, compliance, and speaking with our compliance partners. Furthermore, it also has really good integrations with our system so that we don't have to do all of the gathering of information ourselves. They also have good templates. We also like that the UI and UX of it are really easy to use, as easy for anyone who's even non-technical to understand what the controls are necessary. We also like how easy it is for us to onboard. We were able to do this self-serve without any additional things, and the performance was really fast.

What do you dislike about the product?

We dislike how the current monitoring offerings for monitoring controls don't have anything that rich. As a result, we can't use it as an exclusive way of handling MDM. Also, the way to deploy this monitoring is very lightweight, and we wish we could integrate it with something like Apple Business Manager.

What problems is the product solving and how is that benefiting you?

Ganta is solving the issue of how we communicate with customers regarding our software compliance, and also working with our auditors and our other compliance partners. That enables us to spend less time on compliance and more time for our engineers to do so.

In fact, one of our engineers is doing all of our software compliance, which is something that would typically be done by a CSO. This enables us to spend more time working rather than doing other stuff.

What do you like best about the product?

It directly links to our cloud apps to pull all the necessary proof automatically, so our dev team never has to manually screenshot settings again.

What do you dislike about the product?

Tuning the initial alerts is super frustrating because it flags literally everything at first, forcing you to spend hours muting false alarms.

What problems is the product solving and how is that benefiting you?

It completely fast-tracks our enterprise deals since we can just hand over our compliance report instead of wasting weeks filling out endless security questionnaires.

What do you like best about the product?

The system is very easy to use, and it’s extremely helpful to be able to see at a glance which items need to be addressed. The integration process was quick and straightforward, without requiring a heavy lift from our engineering group. The update emails that call out what needs to be reviewed and resolved are useful as well, and they help us stay on top of everything in an efficient, organized way. Vanta's pricing was also very competitive compared to the other vendors we evaluated during our RFP process.

What do you dislike about the product?

Several third-party vendors we use didn’t have an integration feature at first. We were able to update and connect those vendors; however, the integration still isn’t fully functional and doesn’t report on all the necessary aspects of the service being used. For example, the system doesn’t seem to recognize when web browser password managers are used. It would be great if these password manager options were visible within the system.

What problems is the product solving and how is that benefiting you?

Vanta is helping us become SOC compliant. It provided a clear gap analysis of what we needed to update in our systems, processes, and related areas to ensure we were meeting the requirements. I also find it very beneficial that the platform offers recommendations on how to address issues, including suggested code and text we can use.

What do you like best about the product?

Vanta covers compliance, TPRM, access reviews, trust centre, and risk management in one platform. As a small InfoSec function, not having to stitch together multiple tools is a genuine force multiplier

What do you dislike about the product?

Some of the newer AI and automation features feel like they're still maturing - useful in principle, but not yet reliable enough to lean on for high-stakes decisions.

What problems is the product solving and how is that benefiting you?

Vanta solves the evidence collection and continuous monitoring problem that makes multi-framework compliance (SOC 2, ISO 27001) so time-consuming for a small InfoSec function. Automated integrations pull evidence continuously, HRIS-driven access reviews flag risky accounts without manual cross-referencing, and TPRM lives natively in the same platform. The benefit is that I can run a mature GRC programme without needing a larger team — audit prep is ongoing rather than a scramble, and I spend more time on actual risk work than on data wrangling.

What do you like best about the product?

It is well organized and offers many different integrations to handle a lot of the heavy lifting for compliance tests.

What do you dislike about the product?

The search isn't great. Can be quite hard to fine where something lives.

What problems is the product solving and how is that benefiting you?

Making compliance easier to stay on top of.

What do you like best about the product?

Ease to get on track for the first cybersecurity certifications, clean navigation between menus, explicit tests and controls for each framework.

What do you dislike about the product?

Some links in between modules are still weak, and some info you enter will never be fully used, like the owners in the Inventory. A few main integrations are not working great when it comes to scoping resources,

What problems is the product solving and how is that benefiting you?

Automate compliance, perform technical tests on connected platforms.