What do you like best about the product?

Vanta's ability to simplify and break down complex concepts like compliance into manageable steps is what I find most appealing about it. We no longer need to manually update spreadsheets or search for screenshots thanks to the automated evidence collection. The platform's ability to clearly display what is finished, what is pending, and what requires urgent attention is another feature I truly value. The integrated security training and task checklists make it incredibly simple to onboard new hires into compliance workflows. It seems as though Vanta considered the actual problems and designed around them.

What do you dislike about the product?

One thing I don't like about Vanta is that some of the integrations can be a little picky, especially when you're first setting it up. A few services required multiple reconnects, and occasionally the sync status lags or doesn't update right away, which can be confusing. The platform is also excellent for structured frameworks like SOC 2, but if you have unique controls or custom internal processes, it feels a little rigid. It's not always simple to modify the flow to suit your particular setup. Finally, there is room for improvement in the reporting section with regard to exporting customized summaries for leadership updates.

What problems is the product solving and how is that benefiting you?

The chaos of manually tracking compliance and gathering evidence is being resolved by Vanta. Prior to utilizing it, we prepared for audits using spreadsheets, dispersed emails, and screenshots, which was stressful, time-consuming, and prone to errors. By continuously monitoring our systems, gathering audit-ready evidence, and providing us with real-time task updates, Vanta automates a large portion of that work. With automated security training, policy acknowledgments, and employee onboarding, it also keeps our team accountable. In addition to saving us a great deal of time, this has greatly increased our sense of readiness and confidence when interacting with auditors.