External reviews
External reviews are not included in the AWS star rating for the product.
Vanta really helped us be compliant
What do you like best about the product?
Vanta made it super easy to take us from 0 to SOC2 Type 2 in a small tech startup of 30 people.
Their security policy templates were a very good starting point for our business type (unlike other document templates we've seen before, which were obviously for companies with very different products or in different stages).
They provided a lot of support and patiently answered all of our questions.
Their security policy templates were a very good starting point for our business type (unlike other document templates we've seen before, which were obviously for companies with very different products or in different stages).
They provided a lot of support and patiently answered all of our questions.
What do you dislike about the product?
I'm a bit afraid of the lock-in long term. So far we're happy with the platform and the team, but I imagine that changing a vendor in the future might be prohibitively hard.
What problems is the product solving and how is that benefiting you?
It continuously monitors our compliance with security policies, making audits a breeze.
- Leave a Comment |
- Mark review as helpful
Vanta brings clarity to achieve certification objectives
What do you like best about the product?
We are using Vanta on a day to day to monitor any discrepancies within our environments, and to ensure constant compliance with SOC2 objectives. The implementation of Vanata was quick, all integrations could be done internally using the application user interface which guide the user through the process. Vanta offers a multitude of integrations that simplify the capture of the information required to achieve certification. We use it to measure the compliance of our processes and technological environment in achieving SOC2 certification. In addition to the automation aspect of capturing evidences, Vanta offers several auditing firms the ability to access our evidence in order to accelerate
audits. We are then able to select an audit firm specialized in SOC2 and also to use Vanta in their audit process. We are able to obtain support rapidely and a variety of training is available on the training portal.
audits. We are then able to select an audit firm specialized in SOC2 and also to use Vanta in their audit process. We are able to obtain support rapidely and a variety of training is available on the training portal.
What do you dislike about the product?
Currently, Vanta offers everything we need and is easy to use by our technical and non-technical team involved in our SOC2 audit process.
What problems is the product solving and how is that benefiting you?
Vanta provides a single glass pane of risks and compliance, simplifying the effort related to information research and validating it.
Simple set up process that allowed us to complete our ISO27001 audit quickly and efficiently
What do you like best about the product?
The fact that it creates templates for policies and insures that those policies are applied across the organisation. Also the automated alerts for changes or issues within your organisation to be proactive on your ISO accreditation.
What do you dislike about the product?
In the UK, the connection to the auditors was not automated, and our auditors have not been trained on Vanta
What problems is the product solving and how is that benefiting you?
Ensuring that we maintain compliance with ISO standards and streamlining the audit process
Compliance Made Easy
What do you like best about the product?
My cofounders and I had no background whatsoever when navigating the compliance space, it was a daunting task that none of us wanted to go near. However Vanta made securing the certification we needed a breeze, with a couple of installs it told us exactly what we needed and how to get them. They provided great user experience with speedy customer support for any of our questions. We are still using Vanta to this day to ensure that our systems are compliant.
What do you dislike about the product?
There nothing that particularly stands out as a glaring negative about Vanta from my use cases.
What problems is the product solving and how is that benefiting you?
We needed to be compliant to sell our services to business customers, and Vanta made that dead easy to do.
Vanta works
What do you like best about the product?
Vanta Integrates with most SAAS systems to pull in the information needed to get certified. It offers templates to get you started on your policies as well as easy to follow starter guide that shows your progress through the ISO certification. They even offer an add on trust service for creating a website that shows your progress in the certification process and it can be shared with potential clients. It also provides the necessary security trainging for your personnel.
What do you dislike about the product?
Only thing I didn't like was that the platform will start sending out reminders to end users as soon as you start the process. I had to located the settings to turn this off. I beleive the default setting for notifications should be set to off. Then have a point in the process that tells you to turn the notifications on.
What problems is the product solving and how is that benefiting you?
We are in the process of becoming ISO27001 certified. Vanta makes it easy to see where we are in the process, what we have to accomplish next and all in a centralized location. This makes the already daunting task of becoming certified so much easier and convenient.
Seamless audit and effective management of vulnerabilities
What do you like best about the product?
Ease of Use: offers a user-friendly interface, making it easy to navigate and utilize its features without extensive training.
Ease of Implementation: easy to integrate into existing systems, minimizing disruptions and streamlining the implementation process.
Customer Support: excellent customer support, issues are promptly addressed, smooth user experience.
Ease of Implementation: easy to integrate into existing systems, minimizing disruptions and streamlining the implementation process.
Customer Support: excellent customer support, issues are promptly addressed, smooth user experience.
What do you dislike about the product?
Automation of failing test cases can be improved by identifying the exact line where the issue lies.
eg: JSON files pointing out misconfigurations
eg: JSON files pointing out misconfigurations
What problems is the product solving and how is that benefiting you?
streamline compliance process efficiently by reducing manual efforts, allowing us to concentrate on our core business objectives
Hugely Helpful Cybersecurity platform.
What do you like best about the product?
The number of things the software does. Ease of use.
What do you dislike about the product?
There is no way to invest in the company before a public offering.
What problems is the product solving and how is that benefiting you?
Helped us get our cyber security audit.
Vanta is Awesome!
What do you like best about the product?
Vanta has so many great features but here are my top three that I have gotten the most use out of:
-Risk Management: I love how Vanta not only provides you with an easy to use Risk Register, but also provides you with a library of different but common risk scenarios that you can easily add into your register. I also love how if you have controls already in place in other areas in Vanta it will be able to detect them and automatically add the controls into each risk scenario. Something that used to be time consuming and cumbersome is now done in minutes!
-Security Policy templates: Any security person/team can attest to the gruesome process of dealing with policies and having to create them from scratch. This feature was one of the biggest attractions to me when I first went looking for a security tools for my company. The policy templates they provide are so well written and thought out, they easily help you align your internal security posture with SOC 2/ISO and other security frameworks. The policy templates have really saved me by adding language that I may have missed or forgotten to add entirely.
-Trust Reports: A trust report is a public facing web page that you can easily publish on your website. It's published through a sharable link that you can send to your customers and prospects. What makes this such a big feature for me is having that single source of truth that I can send out to clients or prospects. I used to keep all of our security information in a PDF that I would have to constantly update and send that out to customers and prospects via email. With Trust Reports, it automatically updates from the controls that we have in place in our Vanta instance. Now, all I do is provide a link to our live Trust Report page for our customer and prospects to view. And no matter when they access the link I always have the assurance that they are receiving the most up to date info on our current security posture. A true game changer!
I could go on about many other features but these are definitely my top three and why I always recommend Vanta to anyone looking to stregthen their company's security posture.
-Risk Management: I love how Vanta not only provides you with an easy to use Risk Register, but also provides you with a library of different but common risk scenarios that you can easily add into your register. I also love how if you have controls already in place in other areas in Vanta it will be able to detect them and automatically add the controls into each risk scenario. Something that used to be time consuming and cumbersome is now done in minutes!
-Security Policy templates: Any security person/team can attest to the gruesome process of dealing with policies and having to create them from scratch. This feature was one of the biggest attractions to me when I first went looking for a security tools for my company. The policy templates they provide are so well written and thought out, they easily help you align your internal security posture with SOC 2/ISO and other security frameworks. The policy templates have really saved me by adding language that I may have missed or forgotten to add entirely.
-Trust Reports: A trust report is a public facing web page that you can easily publish on your website. It's published through a sharable link that you can send to your customers and prospects. What makes this such a big feature for me is having that single source of truth that I can send out to clients or prospects. I used to keep all of our security information in a PDF that I would have to constantly update and send that out to customers and prospects via email. With Trust Reports, it automatically updates from the controls that we have in place in our Vanta instance. Now, all I do is provide a link to our live Trust Report page for our customer and prospects to view. And no matter when they access the link I always have the assurance that they are receiving the most up to date info on our current security posture. A true game changer!
I could go on about many other features but these are definitely my top three and why I always recommend Vanta to anyone looking to stregthen their company's security posture.
What do you dislike about the product?
I don't have many areas that I dislike about Vanta, however, I do see areas of improvement. Here are a few features that I would love to see added:
-Vulnerability scanning: With all that Vanta provides, it kind of surprises me that they have not yet implemented their own in-house vulnerability scanner. Since Vanta is my one-stop-shop for almost everything security it would be great if I could use Vanta for dynamic vulnerability scanning of web apps right inside the console (And also be able to schedule these scans on a regular basis). Having this feature would eliminate my need to go to a third-party vendor for my dynamic vulerability scanning. Also this feature would be able to automatically complete specific controls that are required for certain frameworks. I would love to see this implemented one day!
-Security Policy Templates + AI: I might be jumping the gun on this one since Vanta is now starting to roll out new AI features into the application. This feature would scan your Vanta console and learn about your environment, then when opening new policy templates in the Vanta editor the policy would be able to reflect what it has learned about your environment. So for example: If I specify an SLA in Vanta of 7 days for Critical/High issues, when I open the policy editor for the policy where this is specified it would add that language in for me automatically. Again, this may be something they have in the pipeline and I could be jumping the gun a bit but I would love to see something like this in the future.
-Vulnerability scanning: With all that Vanta provides, it kind of surprises me that they have not yet implemented their own in-house vulnerability scanner. Since Vanta is my one-stop-shop for almost everything security it would be great if I could use Vanta for dynamic vulnerability scanning of web apps right inside the console (And also be able to schedule these scans on a regular basis). Having this feature would eliminate my need to go to a third-party vendor for my dynamic vulerability scanning. Also this feature would be able to automatically complete specific controls that are required for certain frameworks. I would love to see this implemented one day!
-Security Policy Templates + AI: I might be jumping the gun on this one since Vanta is now starting to roll out new AI features into the application. This feature would scan your Vanta console and learn about your environment, then when opening new policy templates in the Vanta editor the policy would be able to reflect what it has learned about your environment. So for example: If I specify an SLA in Vanta of 7 days for Critical/High issues, when I open the policy editor for the policy where this is specified it would add that language in for me automatically. Again, this may be something they have in the pipeline and I could be jumping the gun a bit but I would love to see something like this in the future.
What problems is the product solving and how is that benefiting you?
Vanta is providing me with a single source of truth about the status of the security within my environment. Vanta is solving the issue of overly cumbersome security environments and making everything super fast and easy to get rsults on. Their integrations are quick and easy to use, their features just get better every day, and their support and team is awesome to work with.
Reliable way to keep us compliant!
What do you like best about the product?
Vanta is continually improving to ensure our software and company practices are secure and compliant, making the auditing process very easy. I love how it provides steps for remediation of non-compliance. I check in on Vanta several times a day to keep up to date. We're REALLY loving Vanta AI, and are excited to see what's added to that next.
What do you dislike about the product?
While the list of integrations is growing, there are still integrations we'd love to see (Mosyle is one we've been waiting for a while, though we do auto deploy the Vanta agent to those machines). There are a few random spots of the app where self service could be improved, but overall every update gets better.
What problems is the product solving and how is that benefiting you?
As stated earlier, Vanta ensures compliance for us. The increased automation in vulnerabilities, monitoring, and compliance frees up a lot of time. Notifications for things that need attention are great.
Amazing Compliance Monitoring Tool
What do you like best about the product?
Super easy integration with various tool used withing organizzation. Seemless user flow and proactive alering for any gap in compliance. Great customer support and always ready to help team.
What do you dislike about the product?
I have not found any downside of Vanta. The tool acts as per our requirement.
What problems is the product solving and how is that benefiting you?
Vanta acts as automated and unified compliance monitoring platform. This saves hundreds of colective hours time. Vanta have also built a trust amongst the auditor community which helps us get the audit process completed in very short span of time.
showing 161 - 170