What do you like best about the product?

Vanta provides a robust GRC platform that excels at aggregating data and information across various systems, making it particularly well-suited for small and mid-sized businesses.**

The platform integrates seamlessly with existing systems, enabling efficient data collection, task management, and tracking. One of the standout features is its audit automation capabilities, which have significantly reduced the time required to implement audit processes and manage audit schedules.

Additionally, the questionnaire automation functionality is highly effective. The user-friendly interface simplifies the process of collecting, tracking, and maintaining questionnaires and associated knowledge bases. After evaluating several solutions for questionnaire automation, I’ve found Vanta to deliver some of the most impressive results in this area.

Vanta also offers valuable tools for risk management and for managing user onboarding and offboarding processes, including security awareness components. For organisations starting from scratch, Vanta provides a solid foundation for establishing effective compliance and security practices.

What do you dislike about the product?

- There are still a few bugs present in the system. While most are not critical, there is one in the Audit module that I consider to be quite significant. That said, all bugs and improvement suggestions I've submitted to our account manager have been logged, and some have already been addressed.
- Certain automated tests for cloud environments (AWS and GCP) seem somewhat redundant. As a result, meeting Vanta's compliance checks requires additional effort in modifying infrastructure, or alternatively, dismissing the check — which isn't an ideal solution.
- The UI/UX could be improved, particularly in the Personnel module. Enhancements in this area would make the platform significantly more user-friendly.

What problems is the product solving and how is that benefiting you?

We significantly improve the way and time for audits, structure vendor management, aggregate data and information across the systems in more useful way.