Vanta
VantaExternal reviews
2,335 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Streamlined SOC 2 Compliance, Easy to Use
What do you like best about the product?
I like how Vanta keeps us organized with really clear action items and allows us to collaborate among teammates on complex and long timelines for projects involving many people. It's really the backbone for everything we do, ensuring that we stay compliant and our policies are up to date. Also, the initial setup was incredibly easy, very much plug and play.
What do you dislike about the product?
It's on the higher end of the market price wise. Functionally it's great, but sometimes it's a little unclear which collaborator should take which task, you can get a little bit of notification overload for your collaborators vs folks who are living out of Vanta for SOC 2
What problems is the product solving and how is that benefiting you?
I use Vanta to keep organized with files and compliance, providing clear action items. It supports collaboration on complex projects, essential for SOC 2 compliance. We switched from task managers as it was hard to organize without Vanta’s specialized functions.
Simplifies Compliance for Small Teams
What do you like best about the product?
I like that Vanta is really easy to use. The UI makes a lot of sense, and everything just works, making it incredibly easy for our small team to manage things required for SOC 2 audits. Vanta gives us a checklist and the steps needed to achieve compliance, and I particularly like how it provides the Terraform code for infrastructure changes, making compliance much easier. The initial setup was incredibly easy, just involved receiving an email and signing in. Overall, it's really helpful for ensuring that things like hard drive encryption and screen lock are set up, making our work much simpler.
What do you dislike about the product?
One thing that's annoying is that almost every day, new vulnerabilities pop up that are not fixable, and Vanta still flags them. We have to manually click and acknowledge them when a fix is available, which could be made easier with an automatic triage feature. Also, when we run the job to check for vulnerabilities, it can take a long time without proper feedback on the progress. Sometimes it feels like we click the button and have to check back hours later, which isn't a great user experience if we're trying to get quick feedback on the state of our vulnerabilities.
What problems is the product solving and how is that benefiting you?
Vanta makes it incredibly easy for our small team to manage the SOC 2 audit process, providing a checklist and steps to follow. It offers Terraform code for compliance changes, drastically reducing the time and effort needed, which would be overwhelming otherwise.
Streamlined GRC Control with Effortless Automation
What do you like best about the product?
I like the automation in accessing clients' systems and gathering evidence because it makes my job easier through quicker harnessing of evidence. The initial setup of Vanta was straightforward.
What do you dislike about the product?
Nothing at the moment
What problems is the product solving and how is that benefiting you?
I use Vanta for automated evidence gathering, which makes my job easier by quickly accessing clients' systems and evidence.
Streamlined Compliance, Needs Audit View Improvements
What do you like best about the product?
I use Vanta for compliance automation and find it extremely useful for compliance management. I appreciate the 'single pane of glass' to manage compliance requirements and audits. I also like the security awareness training, policy automation, and both automated and manual tests to ensure compliance is met. Integrating some third-party platforms into Vanta to evaluate access levels and security is another feature I find useful. The initial setup of Vanta was easy.
What do you dislike about the product?
The 'audit view' experience needs some work. Some tests or reports are not available to the auditors that should be. Periodically, the audit team would let us know they did not have access to the results of an automated test. One example is the access reviews completed test, which included the results of Vanta's automated access review process, was allegedly not accessible to the auditors in the platform. We had to send them the .csv output of the access review test results manually.
What problems is the product solving and how is that benefiting you?
Vanta simplifies compliance management with a 'one pane of glass' for managing requirements and audits, offers security awareness training, and automates policy checks and tests for compliance.
Easy to Use with Straightforward Policy Compliance
What do you like best about the product?
Ease of use, straight forward policy following.
What do you dislike about the product?
So far I haven’t discovered any downsides or dislikes.
What problems is the product solving and how is that benefiting you?
Vanta is helping our business keep track of our security policies and procedures.
Streamlined SOC 2 Compliance with Robust Integrations
What do you like best about the product?
I like Vanta's UX, the idea of a centralized platform, and the integrations, especially the one with our cloud provider GCP. The integrations save time because they put all related checks in one place, so I don't have to collect information outside Vanta through PDFs, screenshots, etc. It automates all the required SOC2 tests and gives a holistic view of the certification status, making it easier to know when we are ready to get audited.
What do you dislike about the product?
Some integrations with Vanta are not fully baked and need more work. For example, with the Kandji integration, there were some tests that were never fixed on the Vanta side, even though they were resolved on Kandji.
What problems is the product solving and how is that benefiting you?
Vanta makes getting all the paperwork and tests ready on one platform, automates all required SOC2 tests, and provides a holistic view of our certification status. It makes it easier to know where we are and when we're ready for an audit.
Automated Tests & Compliance Tracking That Save Us Time
What do you like best about the product?
The automated features are a time-saver! My favourite ones are the automated tests (with integrations), policy acceptance, and tracking to compliance.
What do you dislike about the product?
Some things change without advance notice (or at least I don't see any notifications that change are happening).
What problems is the product solving and how is that benefiting you?
The biggest problem this solves for me is saving time compared with using manual spreadsheets and other documents that are stored in different places and are hard to track. Having an all-in-one repository also helps me keep all of my documentation organized and easy to find in one place.
Streamlined SOC2 Management, Confusing UI
What do you like best about the product?
I like that Vanta has a way to show third parties our progress towards SOC2. Having the ability to share a link with our partners is very valuable. I also like how Vanta can assign people to certain tasks, especially as people offboard. Additionally, the initial setup was very easy.
What do you dislike about the product?
I find the Vanta UI can be quite confusing to navigate. It's hard to get people set up who have not been familiar with the platform. If the UI was scoped to just what a person owns (non-admins), it would be very helpful.
What problems is the product solving and how is that benefiting you?
Vanta helps manage our SOC2 audit by organizing the entire policy set and testing. It also lets us share progress with third parties and assign tasks effectively, especially useful during offboarding.
Well-Organized and Easy Uploads, but Integrations Can Be Fragile
What do you like best about the product?
Well presented, easy to find sections and uploading documents is simple.
What do you dislike about the product?
Integrations seem to break easily, which creates more work.
What problems is the product solving and how is that benefiting you?
Vanta is helping us achieve iso 27001 accreditation.
Streamlines Compliance but Needs Better Integration Design
What do you like best about the product?
I appreciate how Vanta helps make the compliance journey, like for ISO 27001, more manageable and less of a hassle compared to my past experiences with other companies. I like the manageable workload it provides, which helps me prioritize and see the progress I'm making. The integrations with various systems are also good from a user's point of view, and the tests and online audits are highlights of using Vanta.
What do you dislike about the product?
The HubSpot integrations are kind of useless because I always have to do so much manual work when doing the audit. Also, as an integrator with their API, it's one of the most baffling bad designs we've ever seen, according to my developers. The initial setup was harder than I feel it could have been.
What problems is the product solving and how is that benefiting you?
I use Vanta for compliance and ISO27001, making the journey less difficult compared to previous experiences. It helps me maintain a manageable workload, prioritize tasks, and track progress.
showing 141 - 150