External reviews
External reviews are not included in the AWS star rating for the product.
A fantastic GRC tool for budding companies
What do you like best about the product?
Vanta is continually and productively improving the platform - it's a no-brainer when you look at how many controls, documents, and tests you'd have to track and maintain without this tool. You earn you money back in just people-hours alone.
It's also a great way to get some solid visibility into your integrations and access points.
The unsung benefit of Vanta is how it's simultaneously a training tool for GRC in many ways. The extensive templates, descriptions, and cross-references within a certification and cross-certifications is invaluable.
It's also a great way to get some solid visibility into your integrations and access points.
The unsung benefit of Vanta is how it's simultaneously a training tool for GRC in many ways. The extensive templates, descriptions, and cross-references within a certification and cross-certifications is invaluable.
What do you dislike about the product?
It is pricey for small companies but also less expensive than other products out there.
What problems is the product solving and how is that benefiting you?
We initially pursued Vanta as a way to organize our efforts towards a major provider certification, and ended up bundling 2 other certs.
- Leave a Comment |
- Mark review as helpful
Compliance made easy through Vanta
What do you like best about the product?
Vanta has accelerated our SOC-2 Type I/II certification with their platform. Specifically, the controls, tests, and trust reports are amazing.
It was exceptional at integrating with our multiple platforms to maintain high level of compliance and automated alerting.
It was exceptional at integrating with our multiple platforms to maintain high level of compliance and automated alerting.
What do you dislike about the product?
I do wish it was easier to enter people in the system prior to their start date and not trigger an alert until they start.
Also, sending automated notifications to people that are not compliant outside of the administrators.
Also, sending automated notifications to people that are not compliant outside of the administrators.
What problems is the product solving and how is that benefiting you?
Vanta helps setup all of the controls for SOC 2 compliance and it automates the testing to maintain compliance after initial setup
SOC 2 Compliance Review
What do you like best about the product?
The platform utilized for compliance was intuitive and user-friendly, making the experience stress-free and straightforward. Furthermore, the support team associated with this platform was exceptional, providing timely and helpful assistance throughout the process.
What do you dislike about the product?
I would remove the "sell up" features such as assets management / review that is a small feature but an hassle to do outside of the sytem
What problems is the product solving and how is that benefiting you?
SOC2 complince managment
Compliance made easy
What do you like best about the product?
The platform is easy to use and allows us to be self-sufficient in ensuring we are always in compliance. Policy creation is a breeze. It is also helpful to have open lines of communication with a Vanta team member and auditors.
What do you dislike about the product?
It's expensive, but you get great value.
What problems is the product solving and how is that benefiting you?
Vanta allows us to prep for a SOC Type I and Type II audit and certification and helps us ensure we are always in compliance. It allows us to instill confidence in our customers.
Vanat helps a lot with SOC 2 pre-audit and audit stgaes.
What do you like best about the product?
Relatively easy to use. Even if some features are not apparent, there are a lot of instructions and valuable materials online for free. On top of that, Vanta's support team is fast and helpful. Another good point is that once you complete your first-year audit with Vanta, the pre-audit stage of every subsequent year is significantly quicker because you only need to renew the data uploaded last year.
Vanta also suggests various auditor firms that understand how Vanta works, making the audit process more manageable.
Vanta also suggests various auditor firms that understand how Vanta works, making the audit process more manageable.
What do you dislike about the product?
I would only mention that the description of a few SOC 2 tests in Vanta is not precisely what the auditor wants to see. It is quite a minor issue because the audit will highlight it anyway, but it would be better to know the exact regulatory requirements and the context of such requirements.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance
Vanta review
What do you like best about the product?
People are great to work with and respond to inquiries. Contract negotiation process went very smoothly.
What do you dislike about the product?
Vanta requires more manual use and is not as automated as we thought. The software needs to be updated to be more user friendly and have more automation to be of more value to clients.
What problems is the product solving and how is that benefiting you?
Security Compliance, Vendor Management, Vendor Security and Privacy Assessment
Quick to get started, easy to use, ever growing integrations and features
What do you like best about the product?
Automated compliance monitoring of any kind is excellent for visibility and accountability. Vanta made it easy to integrate with AWS, and the number of system integrations for access tracking is growing rapidly, particularly with the recent launch of the custom integration framework. Compared to previous experiences with SOC2 audits, it significantly accelerated and reduced stress.
I haven't needed much customer support, but when I or a colleague did, the response was prompt, and they were receptive to feedback and product feature requests. Engaged customer success managers have been a valuable asset.
Integrations with platforms like Slack and Email mean that I don't need to log into the Vanta platform often, which is beneficial. This allows the team assigned to specific items or tests to respond quickly to changes and resources that require attention.
While not unique to compliance automation platforms, Vanta's partnerships with accredited and well-renowned auditing companies have improved the audit process. Working with auditors familiar with the platform enhances efficiency in locating monitoring and report functionalities.
I haven't needed much customer support, but when I or a colleague did, the response was prompt, and they were receptive to feedback and product feature requests. Engaged customer success managers have been a valuable asset.
Integrations with platforms like Slack and Email mean that I don't need to log into the Vanta platform often, which is beneficial. This allows the team assigned to specific items or tests to respond quickly to changes and resources that require attention.
While not unique to compliance automation platforms, Vanta's partnerships with accredited and well-renowned auditing companies have improved the audit process. Working with auditors familiar with the platform enhances efficiency in locating monitoring and report functionalities.
What do you dislike about the product?
It's beneficial to utilize AWS infrastructure tags for specifying monitored resources. However, it would be advantageous to have more granular control, distinguishing between excluding a specific resource for a particular test versus excluding it from all tests.
Since the platform focuses on compliance monitoring, marking resources as out of scope presents challenges. It results in either incomplete tracking of resources or additional work for auditors to filter out what's deemed 'out of scope.' Enhancing the ability to monitor and categorize resources as in scope for specific frameworks would be beneficial.
Initially, some functionalities like risk and asset management, along with their interconnectedness and links to controls, were absent. However, these features are swiftly being introduced and enhanced.
Since the platform focuses on compliance monitoring, marking resources as out of scope presents challenges. It results in either incomplete tracking of resources or additional work for auditors to filter out what's deemed 'out of scope.' Enhancing the ability to monitor and categorize resources as in scope for specific frameworks would be beneficial.
Initially, some functionalities like risk and asset management, along with their interconnectedness and links to controls, were absent. However, these features are swiftly being introduced and enhanced.
What problems is the product solving and how is that benefiting you?
Automated monitoring and reporting of cloud security configurations.
Integration of access management, including onboarding/offboarding processes, with key systems.
Streamlining the audit process through automated reports and partnerships with auditors.
Centralized vendor security reviews, accompanied by reminders for completion and uploading certification records.
Integration of access management, including onboarding/offboarding processes, with key systems.
Streamlining the audit process through automated reports and partnerships with auditors.
Centralized vendor security reviews, accompanied by reminders for completion and uploading certification records.
Fantastic value from Vanta platform for achieving SOC 2 compliance
What do you like best about the product?
Vanta allowed our startup to pass SOC 2 compliant and pass audit with minimal staffing.
What do you dislike about the product?
Some interfaces could be improved, especially around people management.
What problems is the product solving and how is that benefiting you?
As a fintech platform, Lane Healt
h had to pass SOC 2 Type 2 certification. This usually requires a staff of several IT/Ops people and significant project budget. Vanta simplifies this process tramendously
h had to pass SOC 2 Type 2 certification. This usually requires a staff of several IT/Ops people and significant project budget. Vanta simplifies this process tramendously
Streamlines SOC 2 for First Timers
What do you like best about the product?
It lets you see everything that you need to do to meet compliance requirements at a glance, demystifying the process significantly for those who aren't familiar with it.
What do you dislike about the product?
I wish Vanta gave better insight into scenarios when certain listed policies, documents, tests, etc aren't needed, especially for smaller companies where a lot of things don't end up applying.
What problems is the product solving and how is that benefiting you?
It's making it much more straighforward to understand what we need to do to be compliant.
Vanta's indispensable in achieving and maintaining compliance, and best security practices
What do you like best about the product?
The platform's automated processes significantly reduce the manual workload associated with compliance tasks. By automating gap analysis, evidence collection, and policy enforcement, Vanta streamlines the path to compliance, making it more accessible for organizations of all sizes.
Vanta's continuous monitoring feature is crucial for maintaining compliance and reinforcing good security practices over time. Instead of treating compliance as a one-time event, Vanta ensures that organizations remain audit-ready at all times.
Vanta also connects with a wide array of tools and systems that are in use, including cloud providers, project management tools, version control systems and vulnerability management tools to name a few.
By simplify the compliance process across the entire digital landscape, Vanta has proven it's value and become an indispensable tool for us.
Vanta's continuous monitoring feature is crucial for maintaining compliance and reinforcing good security practices over time. Instead of treating compliance as a one-time event, Vanta ensures that organizations remain audit-ready at all times.
Vanta also connects with a wide array of tools and systems that are in use, including cloud providers, project management tools, version control systems and vulnerability management tools to name a few.
By simplify the compliance process across the entire digital landscape, Vanta has proven it's value and become an indispensable tool for us.
What do you dislike about the product?
Some integrations require a SCIM, and that can be extra and unexpected overhead to get setup. 1password for example.
While lots of integrations are supported, not all services provided by those integrations are implemented for continous monitoring by Vanta. Sometimes it is only 'User Access' data is integrated with Vanta, while the actual features/services the platform is being used for is no where to be seen. Some examples are Crowdstrike (should also support vul management) and Bob (should also support policy acceptance)
While lots of integrations are supported, not all services provided by those integrations are implemented for continous monitoring by Vanta. Sometimes it is only 'User Access' data is integrated with Vanta, while the actual features/services the platform is being used for is no where to be seen. Some examples are Crowdstrike (should also support vul management) and Bob (should also support policy acceptance)
What problems is the product solving and how is that benefiting you?
Vanta's continuous monitoring feature is crucial for maintaining compliance and reinforcing good security practices in our organisation.
showing 121 - 130