External reviews
External reviews are not included in the AWS star rating for the product.
Okay for speeding up a “check the boxes” audit
What do you like best about the product?
Has a lot of the checks you need for a SOC 2 built in. For example, it auto tracks all employees and installs an agent on their machine to make sure you have malware protection and encrypted hard drives.
What do you dislike about the product?
A lot of the checks are not necessary. Things like the Vanta agent “check the box”, but they don’t actually add a lot of security.
It’s not super configurable. You can link Datadog, but when it looks for monitoring on certain things, it only looks at CloudWatch. Why even allow to link Datadog?? When linking your ticketing system, it assumes the `Security` label means p0. If that’s not the convention you use, tough luck!
It’s not super configurable. You can link Datadog, but when it looks for monitoring on certain things, it only looks at CloudWatch. Why even allow to link Datadog?? When linking your ticketing system, it assumes the `Security` label means p0. If that’s not the convention you use, tough luck!
What problems is the product solving and how is that benefiting you?
SOC 2, continuous monitoring. It’s nice to be alerted when things go out of compliance or when new servers pop up without monitoring, or when vulnerabilities pop up.
- Leave a Comment |
- Mark review as helpful
Made the SOC2 process painless and easy
What do you like best about the product?
The entire process from creating and reviewing the policies, monitoring our cloud environment, code repository& addiotnal systems, together with collecting the evidence automatically was a huge offload. Bundled with great support before we started the process by Ashley and after we started it with Taylor was a great help.
What do you dislike about the product?
We experienced some minor issues with some cloud monitoring metrics, but they have all been addressed within days.
What problems is the product solving and how is that benefiting you?
We were able to get ready to the SOC2 audit within 6 weeks with significant less effort while still focusing on the business and customers, otherwise it could have been a full time work for a few months.
Vanta accelerated Klaus' path to SOC2 compliance
What do you like best about the product?
As a small organization we were able to really leverage automated integrations and guidance regarding best practices and guardrails for many if not most of our used technology platforms including Google Cloud Platform, Github, GSuite etc. The fact that Vanta makes the controls and checks transparent allowed us to go through the process much faster than we would have without them.
If you are new to the field of SOC2 then Vanta has solid policy templates (that they have recently improved) to be used as base and can also solve asset tracking using their Vanta Agent (osquery based lightweight tool).
As a positive highlight I would also like to bring out Vanta's customer support — whenever we had any hiccups these got solved quickly and the team was transparent around what had happened.
If you are new to the field of SOC2 then Vanta has solid policy templates (that they have recently improved) to be used as base and can also solve asset tracking using their Vanta Agent (osquery based lightweight tool).
As a positive highlight I would also like to bring out Vanta's customer support — whenever we had any hiccups these got solved quickly and the team was transparent around what had happened.
What do you dislike about the product?
There is always room for improvement and we do know Vanta is already tackling many of these. Initially we were faced with few UI/UX glitches and have faced some early integration problems but these have always been solved quickly or there have been ways around the issues.
If to highlight something that we would like to see tackled in the future then it would be improved facilitation of periodic processes (like access review etc.) and enhancement of tasks handling.
If to highlight something that we would like to see tackled in the future then it would be improved facilitation of periodic processes (like access review etc.) and enhancement of tasks handling.
What problems is the product solving and how is that benefiting you?
Vanta helps organizations to get aligned and meet the requirements to become SOC2 compliant and then continue to keep the controls in check by continuous monitoring. Their strong relationship with auditors helps to accelerate the process by assisting in evidence collection etc.
Recommendations to others considering the product:
Vanta is worth considering especially if new to the world of SOC2 compliance as their integrations and relations with auditors ease the complexity of the whole process.
Best way to automate a lot of the SOC-2 work
What do you like best about the product?
First, you have a dashboard for most of your SOC-2 requirements.
Integrates well with GCP, GSuite, Slack, GitHub - essentially covering almost all requirements.
Good policy templates.
Audit prices drop too because of the automation.
Integrates well with GCP, GSuite, Slack, GitHub - essentially covering almost all requirements.
Good policy templates.
Audit prices drop too because of the automation.
What do you dislike about the product?
The only rough edges we noticed were around supporting many different GCP projects, but support is very helpful in working on fixing this.
What problems is the product solving and how is that benefiting you?
Very quick ramp up to getting ready for SOC-2 Type 2.
SOC 2 Process for Virtual Power Plant Company using Customer Energy Data
What do you like best about the product?
The ability to integrate with our stack. There are a lot of common tools used that hook into Vanta very easily, making it clear what areas need to be addressed to become SOC 2 compliant.
What do you dislike about the product?
Vanta's interface doesn't change based on the level of SOC2 compliance. Depending on the Trust Service Criteria, not every feature is needed. Being able to turn off features/fixes based on the Trust Service categories being sought would be helpful.
What problems is the product solving and how is that benefiting you?
Getting out in-house security practices reviewed and, if needed, updated or changed to be SOC2 compliant. We expect the third-party vendor cybersecurity review process with our clients to be expedited, allowing for faster contracting.
Hit the ground running with SOC2 and HIPAA
What do you like best about the product?
Vanta's policy generator really saved our small team a lot of time at the beginning, to cover all our bases for SOC2 and HIPAA, especially as we're not experts in writing policies. It provides a solid foundation with a lot of options and the ability to fully customize them as needed. I also find the email notifications regarding inventory items deviating from our controls really useful, so that I know every day if something needs my attention.
What do you dislike about the product?
I think the People's section on managing employees could use some attention. They have been iterating on it (in a positive way) since we started using Vanta, but there's a lot more I'd like to see in that area. The ability to merge accounts, or accounts being part of multiple groups / roles, as this would currently require creating a new group for each set of requirements.
What problems is the product solving and how is that benefiting you?
Vanta has brought us a lot of expertise regarding SOC2 and HIPAA that we didn't have on our team, and has saved us a lot of time to become and remain compliant.
Recommendations to others considering the product:
If you don't have a compliance expert in-house with deep knowledge and understanding of organization processes and requirements for business, infrastructure and application security, and the idea of spending weeks (or months) working through all the requirements, alone or with a consulting firm doesn't appeal to you, then Vanta will take care of all the heavy lifting and guide you through the process and provide auditors most of the evidences they'll need to certify your organization.
Vanta made security a breeze!
What do you like best about the product?
Vanta had a very tech forward platform and their continuous monitoring made going with them a simple decision. As Assembly is now Soc2, Vanta is a key part in our security journey. Their team was also amazingly kind, prompt and helpful every step of the way!
What do you dislike about the product?
I'll let you know when I find something I don't like.
What problems is the product solving and how is that benefiting you?
We are an HR platform and every time we went out for new business, we'd be asked if we were Soc2 compliant. Not having compliance was a show stopper. Working with Vanta was fast, efficient and now we're winning business left and right thanks to Vanta.
Recommendations to others considering the product:
Vanta is a no brainer. They are the best in the game. Why else would they be growing so fast!
Vanta Review
What do you like best about the product?
One of the challenges of SOC 2 is coming up with the checklist of things that need to be accomplished. Vanta does this for you.
What do you dislike about the product?
Vanta does not integrate with enough services yet.
What problems is the product solving and how is that benefiting you?
Making the SOC 2 process easy to accomplish and track. It allows for you to have a centralized location to track your compliance and receive alerts when something is out of compliance.
Recommendations to others considering the product:
If you are just beginning your compliance journey Vanta will set your company up for success. This allows you to gain a strong grasp on what is expected as well as insight into your organization that you have not had previously.
Vanta has streamlined our Soc 2 Compliance.
What do you like best about the product?
Manages and presents all our actionable items regarding security
What do you dislike about the product?
Some of the reports and organization of the application is not intuitive. There are reports / actions to be taken on Company Settings for example. It is not easy to navigate and remember where the different sections are
What problems is the product solving and how is that benefiting you?
Soc 2 Compliance and Security auditing.
Amazing experience.
What do you like best about the product?
Vanta helps in seamlessly covering all security requirements for a SOC2 evaluation in very little time. They have excellent Customer Support and they are constantly adding new technological partners to make the process a lot easier.
What do you dislike about the product?
It is a great platform, no complains so far
What problems is the product solving and how is that benefiting you?
Maintaining compliance with security requirements is extremely easy and Vanta provides a quick overview of the whole security posture to perform changes where necessary.
Recommendations to others considering the product:
Make sure you add all infrastructure services to the platform when possible and check if they have partnered with other services to meet your needs.
showing 1,311 - 1,320