Vanta
VantaExternal reviews
2,335 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Great for Organizing Audit Policies and Evidence, Though Price Can Be a Hurdle
What do you like best about the product?
organizing policies, procedure, evidence for different audit at one place
What do you dislike about the product?
Some of my clients can't afford it because of price. But overall, it is a good tool
What problems is the product solving and how is that benefiting you?
The GRC and audit problem.
Simple, Great-Looking Compliance Tool That Saves Us Time
What do you like best about the product?
Simplicity. The overall look is better than other compliance tools. Vanta has saved my work time by allowing me to go to a place to observe our ISO, SOC 2 status.
What do you dislike about the product?
All these add ons that comes with Vanta is not the best option for me. I want to try out something and it is extra. But I understand that we need to pay more money to get some extra features we want.
What problems is the product solving and how is that benefiting you?
Vanta is solving Engieering, product, GRC, Security, HR, etc. depts' time by allowing to plug Compliance requirements evidence/documents to a single platform. We do not need to set up walkthrough to take screenshots, collect evidence, review, etc. Vanta tells me everything.
A Single Platform That Keeps All Our Compliance in One Place
What do you like best about the product?
Single platform to see our compliance things. One Place.
What do you dislike about the product?
i do not have any dislike to share at this time.
What problems is the product solving and how is that benefiting you?
Most of manual work of collecting, storing, etc. It has saved my time.
Effortless Compliance and Integration with Vanta
What do you like best about the product?
I like the integrations available for continuous control monitoring and the dashboards that enable compliance for automated tests. The customer trust center questionnaire, which leverages AI for customer vendor inquiries, is very efficient. The setup was very easy working with Vanta's product engineers, and the UI is very intuitive. With the knowledge base and tagging options, we are able to upload customer questionnaires and use machine learning to save manual effort and time.
What do you dislike about the product?
I don't like the audit features where the external auditors have access to our environment. Last fall, during our SOC2 and ISO27001 external engagements, the auditors had historical access to every single automated test. Even if one cloud account failed out of 100,000, it would show up as failed. This led to a lot of false positives and gave the auditors issues that were truly not design or operating issues.
What problems is the product solving and how is that benefiting you?
I use Vanta to resolve our governance and oversight issues, improve efficiencies for audits, and ensure compliance with laws, regulations, and industry best practices.
Streamlined Compliance, Needs Better Integration
What do you like best about the product?
I find Vanta's compliance section very helpful as it makes it easy to understand where we stand in terms of security frameworks like SOC2 and HIPPA. The subsections on controls and policies/documents offer easy visibility into the gaps in our environment. I also appreciate the vendor discovery feature as it provides visibility into third-party vendors used by employees and helps mitigate Shadow IT risk.
What do you dislike about the product?
Vanta doesn't integrate with Mosyle MDM solution, which means I need to deploy VDM on our employee laptops. Also, VDM doesn't always work correctly as it doesn't auto-update to check-in regularly on some devices.
What problems is the product solving and how is that benefiting you?
I use Vanta for compliance monitoring and identifying security gaps. It helps map controls to security frameworks and offers a centralized place for evidence collection, aiding in proof submission to external auditors.
Central Administration with Excellent Support
What do you like best about the product?
I find the integration into various tools very useful, as well as the assignment of different tasks to different people so that they also feel responsible. I also find the customer support very good.
What do you dislike about the product?
Some things, such as merging profiles, cannot be done manually or by the end user, but must be resolved by support.
What problems is the product solving and how is that benefiting you?
Vanta centralizes our information flows and helps us manage ISMS-related tests and audits. The integration into various tools and the assignment of tasks are very useful.
Effortless Integration and Robust Risk Management
What do you like best about the product?
I like the easy integration with our internal tools and apps that Vanta offers. It provides auto and better risk management across the organization, which is a huge plus. I also appreciate the improved quality and visibility on our supply chain risk management. The Vendor Risk Modules and the smooth initial setup stand out as well.
What do you dislike about the product?
AI initiatives can be improved, particularly in the Vendor Risk and Support function.
What problems is the product solving and how is that benefiting you?
I use Vanta for Information Security Governance and Compliance. It reduces manual work, integrates easily with our tools, enhances risk management, and improves supply chain risk visibility.
Overpriced with a Steep Learning Curve
What do you like best about the product?
Not much
What do you dislike about the product?
The system is not very intuitive, and the cost/benefits do not match, especially for small companies. It's way too expensive for those that are not large corporations or enterprises. There are too many complex elements to handle something that shouldn't add to the complexity. We thought the audit process would be faster, easier, and cheaper, but that was not true. The initial setup took a long time.
What problems is the product solving and how is that benefiting you?
I use Vanta for compliance documentation, but find it not intuitive and too costly, especially for small companies, without matching the benefits.
Efficient Integration, Needs Contextual Refinement
What do you like best about the product?
I like how Vanta centralizes records across platforms, teams, and OUs, which makes compliance record-keeping for SOC2 more manageable. Its ease of integration with technology tools and platform services like the hyperscalers is also a big plus. I find Vanta efficient in reporting compliance gaps, with it taking about 24 hours to see when a rule is breached in a system. Additionally, updating policies and linking to exceptions is easy. The initial setup was super easy, which made getting started a breeze.
What do you dislike about the product?
There's an element of checkbox security theater with Vanta, like requiring all logs to be kept for a specific number of days. This approach feels lazy and can be expensive. I think Vanta could improve by discerning context rather than applying rules superficially. For example, it could determine the relative importance of logs in a production account compared to a developer sandbox, as no company views them as equivalent.
What problems is the product solving and how is that benefiting you?
I use Vanta for compliance record-keeping for SOC2. It centralizes records across platforms and teams, integrates easily with technology tools, and efficiently reports compliance gaps. I can update policies and link to exceptions easily, making it user-friendly for managing compliance.
End-to-End Compliance Automation That Keeps Us Audit-Ready Year-Round
What do you like best about the product?
What I like best about Vanta is how it automates compliance end-to-end. It significantly reduces manual evidence collection, provides real-time monitoring, and makes frameworks like SOC 2 much more manageable for growing teams. The integrations are seamless and the platform is intuitive, which saves time and keeps everything audit-ready year-round.
What do you dislike about the product?
Some controls can be a bit difficult to navigate at first. While the platform is powerful, certain sections and workflows could be more intuitive, especially when trying to locate specific controls or understand how they connect across frameworks.
What problems is the product solving and how is that benefiting you?
Vanta solves the problem of not knowing where to start or how to stay on track with compliance. It provides a clear framework and step-by-step guidance, so we’re not guessing what controls to implement or what evidence to collect.
showing 11 - 20