Helps us maintain compliance with standards like SOC 2 and various data policies, but the customer support needs improvement
What is our primary use case?
In our Vanta infrastructure, there's a mix of on-prem and cloud data. The cloud data is stored under WPH Cloud, which is why we can't access it directly as it's dedicated to CyberArk. We have component clusters and some BDIs on the cloud, and remote users need to access these resources for their DHL-related work. Managing this infrastructure involves using HCP Energy as the hypervisor, and hosting multiple Windows AM VMs, all running on version 22.04.
What is most valuable?
It helps us track the compliance of the components listed in our partner's directory. We can also check if the password manager, XML, and three log policies have been properly implemented on the desktop. We use JEM Cloud, which is a SaaS solution, and sometimes it experiences access issues. With Vanta, we can work on resolving these issues and ensuring policy compliance. Vanta also helps us maintain compliance with standards like SOC 2 and various data policies, which are essential for our documentation and communication requirements, ultimately ensuring enterprise software policy compliance.
In my role, which primarily involves IT responsibilities, I often deal with various policies. There are instances where specific policies, especially those related to quality, may not be implemented correctly. This primarily occurs with mainframes and devices owned by particular users. In such cases, Vanta helps us enable these policies on the devices and assign them to the relevant users. It also highlights when certain policies, such as version 86.x, are not assigned through SAP. Vanta provides guidance on configuring and mitigating these issues. Additionally, it helps us with GitHub account provisioning and deprovisioning, as well as managing GitHub and Google Workspace Flex. We also use the 1Password password manager, which Vanta assists in overseeing.
What needs improvement?
For how long have I used the solution?
I have been working with Vanta for two years.
How are customer service and support?
There is a delay with customer support and they are unsure of the answers we need. It could be because they're the first point of contact. But I comprehend the situation, and we're handling the process of receiving messages more swiftly. However, there might still be some occasional difficulty, possibly influenced by geographical factors or varying support response times. In general, I think the service is good.
How would you rate customer service and support?
How was the initial setup?
It's rather straightforward. Initially, when I set it up, I configure it, and then I test it. We have specific commands to troubleshoot issues. We can use OktaNet to check performance or errors. Additionally, there's an agent prospecting feature. They also offer a unit ID from my address, making installation quite simple. It's manageable through monitoring tools.
What's my experience with pricing, setup cost, and licensing?
I can't determine if it's more expensive or cheaper, but I will advise you to explore the options and go with what aligns with what they offer and the prevailing market standards.
What other advice do I have?
I would rate the solution a seven out of ten.
This is particularly important because for certifications like HIPAA and authorized certificates, if there's no dedicated team, the responsibility falls on individual people to regularly oversee all aspects. However, if we integrate all these steps, it becomes much easier to understand our requirements and what needs to be addressed. Therefore, it's a good solution to have a single platform like Vanta for integration and resolution by following all the necessary steps.
I've used Vanta for some time, and initially, we configured it, but the reflection isn't accurate. In such cases, we need to investigate. We've integrated it through JumpCloud, and we should examine the JumpCloud prospecting. If there are any issues, we can get in touch with JumpCloud support. In terms of management, if we rely solely on one platform, it might take more time. Typically, it takes almost a day before the changes reflect as expected.
Reliable way to keep us compliant!
What do you like best about the product?
Vanta is continually improving to ensure our software and company practices are secure and compliant, making the auditing process very easy. I love how it provides steps for remediation of non-compliance. I check in on Vanta several times a day to keep up to date. We're REALLY loving Vanta AI, and are excited to see what's added to that next.
What do you dislike about the product?
While the list of integrations is growing, there are still integrations we'd love to see (Mosyle is one we've been waiting for a while, though we do auto deploy the Vanta agent to those machines).
What problems is the product solving and how is that benefiting you?
As stated earlier, Vanta ensures compliance for us. The increased automation in vulnerabilities, monitoring, and compliance frees up a lot of time. Notifications for things that need attention are great.
A stable solution that provides continuous compliance automation and monitoring
What is our primary use case?
Vanta is a GRC platform with continuous compliance automation and monitoring. Some things normally take us hours to do in terms of pulling screenshots and configuration. Vanta is continuously plugged into an API and reports back to us so that we can save time, effort, and FTE hours.
How has it helped my organization?
Vanta primarily helps our organization with the SOC 2 and the PCI audits, ensuring we're in compliance full-time without having us do internal audits as frequently.
What is most valuable?
The most valuable feature of Vanta would be the time savings from the automation and the continuous compliance monitoring once set up.
What needs improvement?
Currently, Vanta's user access review module is still in development, and we've been giving them continuous feedback to help them improve that.
For how long have I used the solution?
I have been using Vanta for two to three months.
What do I think about the stability of the solution?
I haven't had any issues with the solution's stability. I rate Vanta a nine out of ten for stability.
What do I think about the scalability of the solution?
I rate Vanta an eight or nine out of ten for scalability.
How are customer service and support?
Vanta’s customer support team is fantastic.
How would you rate customer service and support?
How was the initial setup?
Vanta's initial setup is pretty straightforward, but there are a lot of customizations that you need to tailor to your specific environment. It's not out-of-the-box plug-and-play ready. You need pretty heavy customization.
What was our ROI?
We have seen a return on investment with Vanta.
Which other solutions did I evaluate?
Before choosing Vanta, we evaluated Drata and OneTrust. We chose Vanta because the Vanta team was the most responsive and had the best pricing.
What other advice do I have?
We are using the latest version of Vanta. Vanta is a cloud-based solution.
Users need to ensure they have absolute buy-in from all the stakeholders. You can't deploy Vanta in a vacuum. You need buy-in from IT, HR, engineering, legal, compliance, etc. Otherwise, it's a very expensive tool to sit on the shelf.
Overall, I rate Vanta an eight out of ten.
The Best Guide to Achieving Organizational Compliance Goals
What do you like best about the product?
User Friendly, Continuous Product Updates and Prompt Customer Support
What do you dislike about the product?
Intervals of CSM catch-ups with the customer can be increased
What problems is the product solving and how is that benefiting you?
It's a ready-made book of all the compliance requirements with clear guidelines in user-friendly language.
Following the TODOs of VANTA saves us lots of time and helps us avoid large documentation and groundwork.
Amazing Compliance Monitoring Tool
What do you like best about the product?
Super easy integration with various tool used withing organizzation. Seemless user flow and proactive alering for any gap in compliance. Great customer support and always ready to help team.
What do you dislike about the product?
I have not found any downside of Vanta. The tool acts as per our requirement.
What problems is the product solving and how is that benefiting you?
Vanta acts as automated and unified compliance monitoring platform. This saves hundreds of colective hours time. Vanta have also built a trust amongst the auditor community which helps us get the audit process completed in very short span of time.
The product looks complete and it helps a lot with the automatizations it has.
What do you like best about the product?
The best part is the eassy integration of all of my infraestructure and the detail of the reports about the compliance i have.
What do you dislike about the product?
The pricing by framework.It makes it expensive to apply to another framework that may ask for the same compliance than the one you already have.
What problems is the product solving and how is that benefiting you?
All the manual work of having to implement ISO27001 and having to organize and review all the paperwork.
A simple effective product for a complex boring problem
What do you like best about the product?
Product is beautiful and easy to use. Support team is incredibly helpful, and even if this is my first time in compliance process, I can continue the process relatively easy. It also has direct integration with many of the software we use.
What do you dislike about the product?
I cannot think of anything that I'd dislike.
What problems is the product solving and how is that benefiting you?
Vanta allowed me to create compliance documents easily.
Excellent compliance platform for ease of use and breadth of offering
What do you like best about the product?
Easy to use, comprehensive in its offering, excellent docs/customer success and good add-on selections as you need to expand your security posture/offering
What do you dislike about the product?
Can get pricey as you start to include add ons
What problems is the product solving and how is that benefiting you?
We were tasked with achieving SOC 2 type 2 and Vanta is helping us achieve and maintain that security standard. This assists immensely in the sales process.
Drastically decreased time to certification (with AWS)
What do you like best about the product?
- Good properly designed software
- Lots of good templates and automatic tasks
- Lots of quality integrations which work really well (especially with our stack)
What do you dislike about the product?
- Customer Success varies in quality from time to time
- United States oriented company, and thus templates are sometimes opinionated for the US.
- The interface of the software changed really often.
What problems is the product solving and how is that benefiting you?
- Decrease effort needed to maintain certification
- Monitor systems and ensure correct safety measures are taken
- Device management
- Asset management (50% of our needs)
- People onboarding and offboarding
- Templates and knowledge
Great solution and even better support
What do you like best about the product?
As an HR specialist, I'm in any way an expert in security apart from GDPR-related issues. Vanta allowed me to make sure our employees have all the necessary controls and MFAs in place in an easy way. In case of facing any trouble, the Vanta Support team, especially Paige, was super helpful and quick with their responses. I use Vanta on a daily basis now and I'm satisfied with the controls provided and instructions attached.
What do you dislike about the product?
Some of the features are not clearly addressed in the documentation or in the description. Missing points were quickly caught by the support.
What problems is the product solving and how is that benefiting you?
Vanta helps my company to go through the first and following steps of Security compliance.
