Vanta
VantaExternal reviews
2,426 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Vanta Simplifies Compliance, But Needs More Flexibility and Robust Integrations
What do you like best about the product?
Vanta makes compliance management actually manageable. The automation around evidence collection, integrations with AWS, GitHub, and HR systems, and the continuous monitoring significantly reduce manual effort.
What do you dislike about the product?
The integrations, while extensive, can sometimes be brittle or slow to update when underlying systems change. Customization options for controls and evidence collection could be more flexible. Reporting is functional but limited if you want deeper analytics or export options.
What problems is the product solving and how is that benefiting you?
Vanta streamlines our SOC 2 compliance process by automating evidence collection, tracking controls, and maintaining continuous monitoring. It eliminates the need for manual spreadsheets and ad-hoc document gathering, which saves a huge amount of time during audits. Having everything centralized also improves visibility across the team and ensures we stay audit-ready year-round, not just before deadlines.
Effortless Compliance Automation with Excellent Security Insights
What do you like best about the product?
It’s easy to use, automates compliance, and gives great visibility into our security posture
What do you dislike about the product?
Some integrations can be a bit limited, and reporting could be more flexible
What problems is the product solving and how is that benefiting you?
Vanta helps us stay audit-ready by automating evidence collection and monitoring security controls, saving time and reducing manual effort.
Streamlined Compliance and Audit Savings, Despite Lengthy Initial Setup
What do you like best about the product?
Several things:
A. Vanta provides an organized approach to assist in completeness of our small business compliance needs and documentation
B. Ability to automate many of the necessary steps
C. SOC-2 auditors can be provided direct access and are able to complete many of the audit steps directly from our Vanta information that has significantly reduced the cost of the SOC-2 audits.
A. Vanta provides an organized approach to assist in completeness of our small business compliance needs and documentation
B. Ability to automate many of the necessary steps
C. SOC-2 auditors can be provided direct access and are able to complete many of the audit steps directly from our Vanta information that has significantly reduced the cost of the SOC-2 audits.
What do you dislike about the product?
It can take quite a bit of time to get Vanta set up initially, but that may be lack of full understanding of compliance needs prior to having our first SOC-2 completed.
After the initial setup, the continued use is very simple and saves a lot of time overall.
After the initial setup, the continued use is very simple and saves a lot of time overall.
What problems is the product solving and how is that benefiting you?
On top of assisting with SOC-2 audits, the Trust Center function has been extremely valuable to reduce the time that we used to spend completing questionnaires for prospective customers.
Trustworthy Compliance Tool with a Straightforward Setup
What do you like best about the product?
I appreciate how Vanta has made it incredibly easy to keep track of what we need to do to achieve SOC 2 compliance. It simplifies the process by keeping everything organized and centralizing all necessary information, which is very helpful and makes it easy for our organization to manage compliance requirements. The dashboard feature is particularly useful as it provides clear guidance on the next steps, ensuring we always stay on top of compliance tasks. Additionally, Vanta's reputation and trust in the SOC 2 space convinced us of its reliability, a sentiment echoed by many familiar with Vanta. Furthermore, the integration with our internal tools is seamless, allowing us to maintain the security and processing of those tools with ease. Overall, my experience with Vanta has been positive, and based on this, I feel confident in choosing it again for our compliance needs.
What do you dislike about the product?
I believe the pricing could be better.
What problems is the product solving and how is that benefiting you?
I use Vanta to track SOC 2 certification requirements, keeping everything organized and accessible, which simplifies compliance management for our organization.
Simplest way to make your company compliant
What do you like best about the product?
Tell you how to solve a failing test / control ... (the 'How to ' button)
Super easy to use.
Super easy to use.
What do you dislike about the product?
None. It cold be faster, but it is faster than similar products
What problems is the product solving and how is that benefiting you?
We need to pass the SOC2 audit, and we did it. We are using Vanta for the next year
Simple Setup, Helpful Integration
What do you like best about the product?
I find the setup of Vanta very simple, which allows for a smooth start. The pre-made templates for individual documents, guidelines, and policies are particularly helpful as they save a lot of time and make organization easier. I also appreciate the automated reminders for tests, which keep me constantly updated and ensure that nothing is overlooked. The ability to upload spreadsheets, especially Google Spreadsheets, and links as evidence is very practical and supports seamless documentation. Additionally, I like the automatic integration with our software like GitLab or Personio and other tools, as this makes working more efficient. Everything seems very sleek and modern, which provides me with a pleasant user experience.
What do you dislike about the product?
I would have wished for different scopes for small, medium, and large companies. What I really miss is a kind of calendar where you can enter all review dates or other data to automatically receive reminders and have a better overview.
What problems is the product solving and how is that benefiting you?
The most helpful are the templates for documents, guidelines, and the reminders for tests. The ability to upload spreadsheets and links facilitates the verification process.
Head of Architecture
What do you like best about the product?
It is a product that is always evolving. New features introduced monthly
What do you dislike about the product?
It can be challenging to determine who is responsible for failing tests when the underlying resources are managed by different teams.
What problems is the product solving and how is that benefiting you?
Managing isms in a semi-automated way offers a balance between manual oversight and automated processes. This approach allows for greater efficiency while still maintaining control over important aspects.
Centralized Security Made Easy, Though Interface Can Be Overwhelming at First
What do you like best about the product?
This tool is useful for consolidating all our important security information in a single location. The real-time monitoring of our services and the intuitive dashboard make it easy to keep track of everything. Additionally, it assists with offboarding procedures, which is a valuable feature.
What do you dislike about the product?
Sometimes, I get a bit lost navigating the interface. Even though my background is in IT engineering rather than security, I have to say that the explanations provided are generally clear and helpful.
However, I do wish that the requested apps were added more quickly.
However, I do wish that the requested apps were added more quickly.
What problems is the product solving and how is that benefiting you?
This tool is very helpful for keeping track of the most important aspects related to hardware, software, and third-party vendors who have access to our accounts. It also assists in monitoring security measures on our hardware, such as password managers, screen locks, drive encryption, and malware protection. Additionally, it plays a crucial role during personnel offboarding by tracking all essential data and reminding us if anything is overlooked.
Efficient in ISO 27001 Automation, User-Friendly Interface
What do you like best about the product?
I like the number of integrations and how they cover the different controls of the ISO 27001 framework. It makes everything very simple. Also, the interface is very user-friendly and the artificial intelligence agent it has is very useful for answering questions related to the framework and the application.
What do you dislike about the product?
Yes, the part of policy management currently in the formula that we configured is by uploading the policy to the application, but we thought that having a system with established policies, we could add them there, that it would handle the versioning part, but it's not like that, we have to download the policy, update the version manually, upload it, and once there, approve it again. So the in-band approval process is a second step that doesn't end up being very useful, it's doing the work twice.
What problems is the product solving and how is that benefiting you?
I use Vanta to automate the collection of evidence in the ISO 27001 program. It also centralizes many tasks, which is good for managing our workload.
Perfect Compliance Tool for Small Teams, But May Not Scale for Complex Org Structures
What do you like best about the product?
In my experience, this tool greatly streamlines the process of tracking and managing compliance. It also makes it much easier to provide auditors with the necessary evidence for various controls. This is especially valuable for smaller organisations like mine, where we often lack the manpower to continuously oversee policies, controls, and evidence.
What do you dislike about the product?
While this solution works well for smaller companies, I have found that it may not always address the specific requirements that larger organisations have in their audit processes.
What problems is the product solving and how is that benefiting you?
Vanta plays a central role in our compliance process. We rely on it to monitor our compliance status, manage risks, conduct security assessments, oversee vulnerability management, handle MDM, and address many other needs.
showing 201 - 210