Vanta
VantaExternal reviews
2,426 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Streamlined SOC 2 Compliance, Easy to Use
What do you like best about the product?
I like how Vanta keeps us organized with really clear action items and allows us to collaborate among teammates on complex and long timelines for projects involving many people. It's really the backbone for everything we do, ensuring that we stay compliant and our policies are up to date. Also, the initial setup was incredibly easy, very much plug and play.
What do you dislike about the product?
It's on the higher end of the market price wise. Functionally it's great, but sometimes it's a little unclear which collaborator should take which task, you can get a little bit of notification overload for your collaborators vs folks who are living out of Vanta for SOC 2
What problems is the product solving and how is that benefiting you?
I use Vanta to keep organized with files and compliance, providing clear action items. It supports collaboration on complex projects, essential for SOC 2 compliance. We switched from task managers as it was hard to organize without Vanta’s specialized functions.
Simplifies Compliance for Small Teams
What do you like best about the product?
I like that Vanta is really easy to use. The UI makes a lot of sense, and everything just works, making it incredibly easy for our small team to manage things required for SOC 2 audits. Vanta gives us a checklist and the steps needed to achieve compliance, and I particularly like how it provides the Terraform code for infrastructure changes, making compliance much easier. The initial setup was incredibly easy, just involved receiving an email and signing in. Overall, it's really helpful for ensuring that things like hard drive encryption and screen lock are set up, making our work much simpler.
What do you dislike about the product?
One thing that's annoying is that almost every day, new vulnerabilities pop up that are not fixable, and Vanta still flags them. We have to manually click and acknowledge them when a fix is available, which could be made easier with an automatic triage feature. Also, when we run the job to check for vulnerabilities, it can take a long time without proper feedback on the progress. Sometimes it feels like we click the button and have to check back hours later, which isn't a great user experience if we're trying to get quick feedback on the state of our vulnerabilities.
What problems is the product solving and how is that benefiting you?
Vanta makes it incredibly easy for our small team to manage the SOC 2 audit process, providing a checklist and steps to follow. It offers Terraform code for compliance changes, drastically reducing the time and effort needed, which would be overwhelming otherwise.
Streamlined GRC Control with Effortless Automation
What do you like best about the product?
I like the automation in accessing clients' systems and gathering evidence because it makes my job easier through quicker harnessing of evidence. The initial setup of Vanta was straightforward.
What do you dislike about the product?
Nothing at the moment
What problems is the product solving and how is that benefiting you?
I use Vanta for automated evidence gathering, which makes my job easier by quickly accessing clients' systems and evidence.
Streamlined SOC 2 Compliance with Robust Integrations
What do you like best about the product?
I like Vanta's UX, the idea of a centralized platform, and the integrations, especially the one with our cloud provider GCP. The integrations save time because they put all related checks in one place, so I don't have to collect information outside Vanta through PDFs, screenshots, etc. It automates all the required SOC2 tests and gives a holistic view of the certification status, making it easier to know when we are ready to get audited.
What do you dislike about the product?
Some integrations with Vanta are not fully baked and need more work. For example, with the Kandji integration, there were some tests that were never fixed on the Vanta side, even though they were resolved on Kandji.
What problems is the product solving and how is that benefiting you?
Vanta makes getting all the paperwork and tests ready on one platform, automates all required SOC2 tests, and provides a holistic view of our certification status. It makes it easier to know where we are and when we're ready for an audit.
Streamlined SOC2 Management, Confusing UI
What do you like best about the product?
I like that Vanta has a way to show third parties our progress towards SOC2. Having the ability to share a link with our partners is very valuable. I also like how Vanta can assign people to certain tasks, especially as people offboard. Additionally, the initial setup was very easy.
What do you dislike about the product?
I find the Vanta UI can be quite confusing to navigate. It's hard to get people set up who have not been familiar with the platform. If the UI was scoped to just what a person owns (non-admins), it would be very helpful.
What problems is the product solving and how is that benefiting you?
Vanta helps manage our SOC2 audit by organizing the entire policy set and testing. It also lets us share progress with third parties and assign tasks effectively, especially useful during offboarding.
Streamlines Compliance but Needs Better Integration Design
What do you like best about the product?
I appreciate how Vanta helps make the compliance journey, like for ISO 27001, more manageable and less of a hassle compared to my past experiences with other companies. I like the manageable workload it provides, which helps me prioritize and see the progress I'm making. The integrations with various systems are also good from a user's point of view, and the tests and online audits are highlights of using Vanta.
What do you dislike about the product?
The HubSpot integrations are kind of useless because I always have to do so much manual work when doing the audit. Also, as an integrator with their API, it's one of the most baffling bad designs we've ever seen, according to my developers. The initial setup was harder than I feel it could have been.
What problems is the product solving and how is that benefiting you?
I use Vanta for compliance and ISO27001, making the journey less difficult compared to previous experiences. It helps me maintain a manageable workload, prioritize tasks, and track progress.
Effortless Auditing with Intuitive Integration
What do you like best about the product?
I find Vanta's GUI really easy to work through. It's pretty easy to understand and integrate. It makes going through audit items much easier, compared to other auditing products where it's just text and framework definitions.
What do you dislike about the product?
I find the comment section a little difficult to get to. It's not too bad, but it would be easier if comments were more easily visible and easier to get through. Right now, it takes like two or three clicks to get to the right comment if you're going through the GUI. It would be faster if we could access it a lot quicker, maybe by having a section for updated comments and treating those as a task list.
What problems is the product solving and how is that benefiting you?
I use Vanta to track what's needed during audits and make sure everything is kept on the same page. It also helps track vulnerabilities, ensuring our tools leverage the same telemetry effectively.
Keeps Me on Task with Standards and Expirations
What do you like best about the product?
It helps keep me on task regarding standards and what is expiring
What do you dislike about the product?
Coming from a very large institution where one or two individuals are generally assigned to use the product full time and manage it. It is a difficult lift when you're only able to work in it part time
What problems is the product solving and how is that benefiting you?
It helps me identify standards that I've missed or overlooked
Efficient Security Compliance with Auto Solutions
What do you like best about the product?
I think Vanta is great because it automatically gives suggested fixes for issues. Since we have our stuff connected with AWS and Terragrunt, it provides solutions to issues without us having to dig in and find the answers ourselves for how to fix a security problem.
What do you dislike about the product?
It's frustrating that when we turn off a test and open something else, it triggers that test to open even if it was already turned off for a different one. It would be nice if it could automatically understand and dismiss any related issue.
What problems is the product solving and how is that benefiting you?
I use Vanta for security compliance and it helps automate policy management for different frameworks. It assigns and auto-creates tickets for security checks, and suggests solutions to fix security issues, saving us from digging for answers.
Simple UI and Strong Test Automation
What do you like best about the product?
Test automation and very simple UI. The Issues/POA&M tracker could be better.
What do you dislike about the product?
Creating reports could be more impactful. No way to escalate coming due tests or noncompliant controls to GRC team as oversight without changing control ownership
What problems is the product solving and how is that benefiting you?
Audit management, security Compliance
showing 141 - 150