Vanta
VantaExternal reviews
2,107 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Not perfect but makes compliance easy
What do you like best about the product?
The policy manager works well and does a good job of managing controlled documents, acknowledgements and review. The links between controls, documents and automated tests is logical and intuitive.
It's fast moving, they're thoughtfully introducing useful new features regularly.
It's fast moving, they're thoughtfully introducing useful new features regularly.
What do you dislike about the product?
Risk manager doesn't support asymmetric risk management scales. There's no option to integrate with third party compliance tools to automate tests (unless they comes OoTB).
Permissions management is very weak, although I believe that's a problem they're actively working on.
Permissions management is very weak, although I believe that's a problem they're actively working on.
What problems is the product solving and how is that benefiting you?
Vanta keeps track of our security obligations and maintains the mapping between control requirements and evidence. It automates evidence collection in numerous ways and keeps track of when a refresh is due for stuff that needs to be collected manually.
Vanta: Your Smart Shortcut to Compliance, Though Not Without Its Quirks
What do you like best about the product?
What I like most about Vanta is its powerful ability to transform a difficult and complex process, like achieving SOC 2 compliance, into a clear, manageable, and largely automated workflow. The platform's excellent number of features and ease of integration into our core tech stack—from Kubernetes, User Laptops, and GitHub to our HR and device management systems—replace the soul-crushing manual work of evidence collection with continuous monitoring. This provides a single source of truth and a structured roadmap that demystifies security requirements, effectively turning a potential months-long headache into a guided sprint. The interface is also very easy to use and navigate, which helps us enforce compliance daily within our organization. Additionally, the customer support is quite helpful, and it was pretty straightforward to set up and start working with Vanta. It's this automation-powered clarity that truly sets Vanta apart and delivers the most value. We use it daily for enforcing compliance in our organisation.
What do you dislike about the product?
What I dislike most is the platform's inherent rigidity when dealing with anything outside its well-defined, automated paths. Vanta is highly prescriptive and works best with a modern, standardised tech stack. If your company uses legacy systems, homegrown tools, or services without a native integration, the experience becomes significantly more clunky. You are forced to fall back on manual evidence uploads and frequently have to explain away "false positive" failures from automated checks that don't understand your unique setup. This creates a noticeable friction point where the seamless automation breaks down, introducing a layer of administrative noise and manual work that detracts from the otherwise elegant experience.
What problems is the product solving and how is that benefiting you?
Vanta is primarily solving the immense challenge of achieving and maintaining security compliance, specifically SOC 2. Before Vanta, this meant a daunting, manual process involving endless spreadsheets, chasing down evidence, writing policies from scratch, and coordinating constantly with auditors. It was a massive drain on our engineering and operations teams.
Vanta Integration for SOC 2 & ISO Readiness
What do you like best about the product?
I like how Vanta simplifies security compliance and keeps everything organized in one place. It saves me a lot of time.
What do you dislike about the product?
The automated checks are helpful but sometimes flag things that aren’t actually issues
What problems is the product solving and how is that benefiting you?
It automates a bunch of the busywork, so I don’t have to stress about missing something important. That saves me time.
Vanta accelerated our compliance journey!
What do you like best about the product?
The clear mapping to controls, reminders and risk libraries.
What do you dislike about the product?
The Vanta agent needs an update.
Also the screen lock only picks up when the screen saver is enabled on Windows - it should pickup the native screenlock.
Also the screen lock only picks up when the screen saver is enabled on Windows - it should pickup the native screenlock.
What problems is the product solving and how is that benefiting you?
Automates and coordinates compliance tasks and keeps track of compliance scores while providing guidance on managing risks and executing on compliance goals.
Acts as a central document repository and risk register as well as keeping track of PC's and device compliance.
Acts as a central document repository and risk register as well as keeping track of PC's and device compliance.
Straightforward process, makes compliance management much easier
What do you like best about the product?
The easy process, with lots of connections to our systems to collect evidences, and well as the supplier management tool that helps saving a lot of time.
What do you dislike about the product?
The pricing is higher than competitors' one.
What problems is the product solving and how is that benefiting you?
Management of security frameworks and certifications. Vanta makes it possible to make this process much more efficient.
Why Vanta Works So Well for Our Compliance Needs
What do you like best about the product?
I’m very satisfied with Vanta overall. The platform is straightforward to use, and you’re well guided throughout the process. Vanta offers excellent support and is always available for any questions that come up. I also really appreciate the additional resources provided, such as training materials and onboarding processes — they’re very well done and helpful.
What do you dislike about the product?
One minor suggestion for improvement would be better support for multi-language companies. Currently, policies created in different languages can only be reviewed one after another, rather than being compared side by side. It’s a small detail, but enhancing this could further streamline the process for international teams.
What problems is the product solving and how is that benefiting you?
Main Goal was to archive the ISO27001 certification. Therefor we needed an ISMS.
Some great features but don't underestimate the work you will have to do
What do you like best about the product?
Easy platform to use. The company are always making updates - continual improvement of the system. Very easy implementation and easy integrations.
What do you dislike about the product?
They state it does most of the work for you, but it really doesn't. There is a lot of work to o outside of the system. There is no way to add in justification for inclusions or exclusions for a SOA. The editing pages on vendors are not as good as they used to be - think there may still be some bugs
What problems is the product solving and how is that benefiting you?
it has centralised a location for managing risk and vendors. Algining tasks to frameworks has made tracking compliance much easier
Effective SOC2 and ISO27001 Compliance Management for Small Teams
What do you like best about the product?
Vanta has been instrumental in helping our 10-person team achieve SOC2 Type 1 and ISO27001 certifications efficiently. The interface is exceptionally well-designed and user-friendly, making complex compliance tasks manageable. The onboarding process was smooth and helped us get started quickly. What impressed us most was the seamless integration capabilities with various tools, which streamlined our security monitoring. The customer support system works well - the chatbot provides immediate responses, followed by detailed email support from the team. Overall, Vanta significantly improved our compliance workflow efficiency, transforming what could have been an overwhelming process into a structured, manageable system.
What do you dislike about the product?
While Vanta is powerful, there are areas for improvement. Initially, we faced challenges with limited support for Japan-specific tools and integrations, though this has since been addressed. The lack of Japanese document templates at the beginning made the setup process more time-consuming for our team. For newcomers to compliance, the platform can feel overwhelming - it's not always clear what the optimal sequence of tasks should be or which steps to prioritize first. More structured guidance on the recommended workflow would be helpful. From a startup perspective, the pricing could be more accessible for smaller companies just beginning their compliance journey. However, these issues haven't significantly impacted the overall value we've received from the platform.
What problems is the product solving and how is that benefiting you?
Vanta has solved several critical business challenges for our growing startup. Before Vanta, managing SOC2 and ISO27001 compliance manually was overwhelming and time-consuming - we struggled with tracking complex requirements, collecting evidence, and maintaining consistent security practices across our organization. The compliance process was opaque, making it difficult to know what steps to take and when. Vanta automated our compliance monitoring, centralized our security management, and provided clear guidance on certification requirements. As a result, we successfully achieved both SOC2 Type 1 and ISO27001 certifications, which significantly enhanced our credibility with enterprise customers and accelerated our sales process. The platform has saved our small team countless hours of manual work while ensuring we maintain robust security practices. This has allowed us to focus on our core business while confidently meeting our customers' security expectations.
Great partner for a growing tech company
What do you like best about the product?
Vanta really simplifies the process of achieving and maintaining SOC2 certification.
The Vanta Trust Centre stores all our policies, security audits and certifications and makes them easy to share with prospective clients.
The Vanta Trust Centre stores all our policies, security audits and certifications and makes them easy to share with prospective clients.
What do you dislike about the product?
Some templates in Vanta are US-centric, but it hasn't been a big problem and will no doubt improve over time.
What problems is the product solving and how is that benefiting you?
Vanta helps automate monitoring and compliance that otherwise takes many hours of manual work. Our team can focus on the most important information security strategies rather than pesky manual evidences that used to be part of compliance.
Awesome
What do you like best about the product?
Good SLA, good support, good quality name
What do you dislike about the product?
Slightly more expensive then some newer optinos
What problems is the product solving and how is that benefiting you?
HIPAA & soc 2 needed for our business
showing 211 - 220