Vanta
VantaExternal reviews
2,110 reviews
from
and
External reviews are not included in the AWS star rating for the product.
A bit difficult to navigate but very helpful
What do you like best about the product?
Very details and helpful because it has checklist
What do you dislike about the product?
A bit difficult to navigate, can't do bulk email send
What problems is the product solving and how is that benefiting you?
SOC-II certifications, helping with checklist
Vanta helped us get to SOC2 Type2 quickly
What do you like best about the product?
Vanta's approach to automation as a default really impressed us. Their default way of ensuring compliance is to automate the compliance check with very minimal work on your part, often just integrating them with your cloud service, hr system or the like. That allowed us to minimize the amount of work we had to build a bespoke SOC2 system and let our engineers focus on building end customer value while still ensuring we had the correct controls in place to handle our customer's data in a secure way.
What do you dislike about the product?
We've run into a number of technical issues, some of which have been slow to resolve. We've also noticed that when you don't want to achieve compliance the exact way that Vanta has automated the check, it can be difficult to get the system setup for that. For an example of the latter, we had very good tagging but Vanta couldn't use our existing cloud tags, we had to go in and add an additional tag to every resource in question.
What problems is the product solving and how is that benefiting you?
We engaged with Vanta to minimize the upfront and ongoing costs of getting to and staying SOC2 compliant. We achieved SOC2 Type 2 in a very short amount of time compared to what it would have taken doing it on our own.
Recommendations to others considering the product:
If you are looking at getting SOC2 for the first time, Vanta should be a platform you consider helping you on your journey.
I think it is a centralized place for tracking compliance
What do you like best about the product?
I like the tasks allocation the best easy to follow up.
What do you dislike about the product?
The interface on the can be a more user friendly
What problems is the product solving and how is that benefiting you?
We need to get SOC 2 compliant achieved
Software Engineer
What do you like best about the product?
Simplest way to achieve continuous automated SOC 2 & ISO compliance.
What do you dislike about the product?
The onboarding experience and overall desktop application.
What problems is the product solving and how is that benefiting you?
We are securing medical health records for numerous clients. We benefit from automated compliance workflow testing.
Useful tool for prepping for security audits!
What do you like best about the product?
The vanta interface and notifications are intuitive to use and make it easy to improve the things we need to fix rapidly.
What do you dislike about the product?
I've been very happy with vanta overall!
What problems is the product solving and how is that benefiting you?
We're using vanta for helping us get our Soc II Type 1 and Type 2.
Okay for speeding up a “check the boxes” audit
What do you like best about the product?
Has a lot of the checks you need for a SOC 2 built in. For example, it auto tracks all employees and installs an agent on their machine to make sure you have malware protection and encrypted hard drives.
What do you dislike about the product?
A lot of the checks are not necessary. Things like the Vanta agent “check the box”, but they don’t actually add a lot of security.
It’s not super configurable. You can link Datadog, but when it looks for monitoring on certain things, it only looks at CloudWatch. Why even allow to link Datadog?? When linking your ticketing system, it assumes the `Security` label means p0. If that’s not the convention you use, tough luck!
It’s not super configurable. You can link Datadog, but when it looks for monitoring on certain things, it only looks at CloudWatch. Why even allow to link Datadog?? When linking your ticketing system, it assumes the `Security` label means p0. If that’s not the convention you use, tough luck!
What problems is the product solving and how is that benefiting you?
SOC 2, continuous monitoring. It’s nice to be alerted when things go out of compliance or when new servers pop up without monitoring, or when vulnerabilities pop up.
Makes SOC2 approachable
What do you like best about the product?
Checklist with step-by-step instructions for SOC2
What do you dislike about the product?
Still requires a lot of manual work on engineering behalf
What problems is the product solving and how is that benefiting you?
Knowing what is needed to complete our SOC2
Vanta was useful in setting us on the path to reach SOC II compliance.
What do you like best about the product?
I found the Trust Report and boilerplate policy packets most useful.
What do you dislike about the product?
I have lost trust in Vanta's agent and user compliance tracking features. They have reported false negatives too many times.
What problems is the product solving and how is that benefiting you?
Vanta was very useful in orienting us on the path to compliance. We entered our first audit period very well prepared, and received praise from our auditor.
showing 91 - 98