Vanta
VantaExternal reviews
2,339 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Good experience for starting a ISO 27001 and SOC 2 certification without previous experience
What do you like best about the product?
The integrations and automations it has to help with the certification processes.
What do you dislike about the product?
I don´t think I can give feedback about what I dislike until I go further in the process.
What problems is the product solving and how is that benefiting you?
Vanta is helping us to comply with ISO 27001 and SOC 2 certifications for client compliant prospects
Using Vanta for GRC activities
What do you like best about the product?
Vanta is so user-friendly. It enables us to perform bulk actions at a time. It also allows us to customize our policy pack from already existing policies. Tracking compliance is always a plus when using this platform.
What do you dislike about the product?
In some areas (Like integrations), it is a bit limited as we do not have all integrations. Would be a great plus when you have integrations with more tools widely used in the market.
What problems is the product solving and how is that benefiting you?
Vanta allows us to track internal and external compliance. It integrates with our HRMS, Antivirus and Background verification tool (for the US) only, there by making life easier for our internal audits and evidence gathering
The best platform to help with compliance
What do you like best about the product?
Vanta helps with automating all the tasks connected with the security compliance. The process is seamless and it makes it very easy to track all automated tests and documents needed to be compliant
What do you dislike about the product?
I have not experienced any downsides while using the application, all the workflows are very easy to understand.
What problems is the product solving and how is that benefiting you?
Vanta helps companies automate compliance for several different standards. In our case, we have used it to get SOC 2 type II and GDPR compliance. The process was seamless and the platform makes it very easy to understand the current status of compliance.
Great tool if you want to implement ISO or SOC2 efficiently
What do you like best about the product?
We love how easy is to get through the process of setting up your security and data protection practices. Definitely, a must-have solution for Startups and larger companies that want to showcase their security posture to their clients.
What do you dislike about the product?
Nothing! The tools is just amazing if you want to implement ISO and SOC2 efficiently.
What problems is the product solving and how is that benefiting you?
Structures ISO certifiction process and requirements related to security, risk and data protection. Facilitates communication with customers in relation to security vendor assessments.
Shortcut to SOC 2 and ISO 27001 compliance
What do you like best about the product?
Very detailed and easy to follow path to compliance with SOC 2 and ISO 27001 (and others). Lots of integrations available. Great auditor network at reasonable price.
What do you dislike about the product?
Some of the integrations have had bugs in the past, most of them fixed now. Our HRIS integration is supported only through a third-party so we don't want to connect it. Multi-product/multi-entity is not yet supported (but upcoming)
What problems is the product solving and how is that benefiting you?
Our company has achieved SOC 2 Type 2 compliance in 6 months and maintained it very easily thanks to Vanta. ISO 27001 certification is progressing really quickly through Vanta as well
An Efficient and User-Friendly Solution for Automating Security and Compliance
What do you like best about the product?
I appreciate the ease of use and the user-friendly interface of Vanta's platform. The ability to connect my tools to Vanta and fix gaps on the dashboard made it simple to keep track of my security and compliance status. I also appreciate the ability to work with a Vanta-trained auditor to complete my security audit in a timely manner. Overall, Vanta has been an efficient solution for automating my security and compliance needs.
What do you dislike about the product?
The pricing of the platform may be too high for some small businesses.
What problems is the product solving and how is that benefiting you?
Vanta is solving the problem of automating security and compliance for businesses. By using Vanta's platform, I am able to continuously monitor my people, systems, and tools to improve my security posture and ensure compliance with industry standards such as SOC 2, ISO 27001, HIPAA, and GDPR. This has been extremely beneficial for my business as it saves me time and resources that would have otherwise been spent on manual security and compliance tasks. Additionally, being able to work with a Vanta-trained auditor to complete my security audit in a timely manner has made the process much more manageable and streamlined.
Compliance Controls Require Automation
What do you like best about the product?
Vanta automates compliance across disparate applications and collaboration tools to ensure that organizations pass their compliance audits. The interface is fairly simple to use both for organizations and for their auditors.
What do you dislike about the product?
Vanta is priced somewhat higher than some of its competitors and integration can be challenging for an organization's home grown proprietary applications and tools.
What problems is the product solving and how is that benefiting you?
Within an organization using numerous applications and collaboration tools, Vanta is providing a one stop solution to provide governance and meet audit requirements.
Use Vanta for SOC 2 and HIPAA Compliance
What do you like best about the product?
Vanta's software makes monitoring and tracking controls for IT easy, seamless, and collaborative. They have excellent support too!
What do you dislike about the product?
Nothing. They have monthly updates to their software and are always trying to improve.
What problems is the product solving and how is that benefiting you?
Our business can quickly monitor and communicate how well we handle PHI and other protected data.
Professional.
What do you like best about the product?
Vanta application. Support. Application intregration option.
What do you dislike about the product?
There is nothing i can talk about as negative in vanta.
What problems is the product solving and how is that benefiting you?
Vanta is saving time. by providing access to it's application to track compliances.
Incredibly supportive company to work with.
What do you like best about the product?
The support is genuinely fantastic. Often times when something spans a few different cloud services, they're able to grasp the full nature of how those services interact with each other and subsequently how the services work with their automated monitors.
I have used other audit platforms, including Amazon's own FTR check, for example. Vanta's Refresh Test allows for that immediate feedback loop that other audit platforms don't provide. Because of that, I don't have to wait for the nightly refresh to hope that I fixed my problem in a compliant manner. Awesome product
I have used other audit platforms, including Amazon's own FTR check, for example. Vanta's Refresh Test allows for that immediate feedback loop that other audit platforms don't provide. Because of that, I don't have to wait for the nightly refresh to hope that I fixed my problem in a compliant manner. Awesome product
What do you dislike about the product?
This is more of a preferential thing, but the refresh of the frontend to remove the status of the monitors in that colorful graph was actually super helpful to visually see our status. Please bring that back.
I think Vanta should release a suite of infrastructure-as-code components. For example, we've written a few internal Pulumi ComponentResources, one called CompliantBucket, for example. That bucket sets all the necessary bucket tagging and public access blocks that SOC2 requires. I know that when I provision new infrastructure with our components, I will be provisioning in a compliant manner. This could be a massive value add if they worked directly with these IaC companies like Pulumi and Terraform to onboard companies to SOC2 near immediately. We also provision code repositories this way for example. Instead of the manual steps of
- create repo
- add description to repo
- add branch policies to repo
- add owner to repo in the Vanta platform
we just created IaC components that do this for us and it saves us a lot of time. If I had to setup all components the compliant way all the time, I might be less inclined to use Vanta and attempt the SOC2 audit.
I think Vanta should release a suite of infrastructure-as-code components. For example, we've written a few internal Pulumi ComponentResources, one called CompliantBucket, for example. That bucket sets all the necessary bucket tagging and public access blocks that SOC2 requires. I know that when I provision new infrastructure with our components, I will be provisioning in a compliant manner. This could be a massive value add if they worked directly with these IaC companies like Pulumi and Terraform to onboard companies to SOC2 near immediately. We also provision code repositories this way for example. Instead of the manual steps of
- create repo
- add description to repo
- add branch policies to repo
- add owner to repo in the Vanta platform
we just created IaC components that do this for us and it saves us a lot of time. If I had to setup all components the compliant way all the time, I might be less inclined to use Vanta and attempt the SOC2 audit.
What problems is the product solving and how is that benefiting you?
Doing this all by hand and reading through all the requirements would be a nightmare. Having that immediate feedback is great.
I think having policy as widgets is incredibly effective to remove the confusion around policy documents, which often are just scanned over and not necessarily upheld.
I think having policy as widgets is incredibly effective to remove the confusion around policy documents, which often are just scanned over and not necessarily upheld.
showing 1,841 - 1,850