Vanta
VantaExternal reviews
2,335 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Vanta Transformed Our Manual Processes and Saved Us Countless Hours
What do you like best about the product?
Vanta’s greatest strength is its automation capabilities. It continuously monitors our tech stack—including GitHub, Google Workspace, JumpCloud, and Slack—and automatically collects the evidence needed for audits. This has transformed our compliance process from a stressful, manual scramble into a seamless, ongoing state of readiness. As a manager, I value how the central dashboard gives me immediate insight into our security posture, saving my team a significant amount of time.
Vanta also excels at simplifying complex compliance frameworks like SOC 2, , HITRUSTi1 and HIPAA. We frequently use it for SSL audit preparation. The platform provides a clear, actionable roadmap, featuring pre-built policy templates and thorough, step-by-step guidance. Integrating Vanta with our existing tools was straightforward, which made the implementation process easy. Because of this, our team feels confident taking on security responsibilities, even without deep compliance expertise.
Vanta also excels at simplifying complex compliance frameworks like SOC 2, , HITRUSTi1 and HIPAA. We frequently use it for SSL audit preparation. The platform provides a clear, actionable roadmap, featuring pre-built policy templates and thorough, step-by-step guidance. Integrating Vanta with our existing tools was straightforward, which made the implementation process easy. Because of this, our team feels confident taking on security responsibilities, even without deep compliance expertise.
What do you dislike about the product?
The platform does a great job with core compliance, but I would appreciate having more ways to customize the policy templates without having to build them entirely from the ground up. At times, the number of alerts can feel overwhelming until you take the time to fine-tune the notification settings.
What problems is the product solving and how is that benefiting you?
Before we started using Vanta, preparing for our SOC 2, , HITRUSTi1 and HIPAA audits was a disorganized and manual ordeal that dragged on for months. We found ourselves overwhelmed by spreadsheets as we tried to track evidence scattered across numerous systems. Vanta changed this by automating almost all of our evidence collection and offering a centralized source of truth for our compliance status. The most significant advantage has been the dramatic reduction in time and resources required for audits, which now enables us to maintain continuous compliance and respond to customer security inquiries quickly and confidently. Another major problem Vanta addresses for us is the lack of real-time insight into our security risks. By connecting directly to our infrastructure and SaaS tools, Vanta provides ongoing monitoring that alerts us to issues as they happen, rather than only during annual audits. This shift has allowed us to move from a reactive approach to a proactive security strategy, resulting in a much stronger security posture and the ability to demonstrate this to stakeholders and customers whenever needed.
Innovative AI Features Elevate the Experience
What do you like best about the product?
I love how innovative and interactive the tool is. Especially with AI.
What do you dislike about the product?
More support and pricing options would help!
What problems is the product solving and how is that benefiting you?
GRC and framework orgaization.
Efficient, Effective, and Audit-Ready
What do you like best about the product?
I like that Vanta brings all security controls into one place, making collaboration easier and ensuring audits are smoother and quicker.
What do you dislike about the product?
Occasionally, integrations take extra effort to configure, but once they’re set, the platform works smoothly.
What problems is the product solving and how is that benefiting you?
Vanta automates many of the repetitive compliance tasks that would otherwise take hours. It centralizes security controls, reduces manual effort, and makes audits smoother. This saves time and ensures continuous security monitoring.
Comprehensive GRC Integration Makes Information Security a Breeze
What do you like best about the product?
The integration of many aspects of Information Security GRC (Policies, 3rd Party Risk Management, Risk Register, Framework Compliance, Trust Center, etc.)
What do you dislike about the product?
Nothing at this time. We are still learning to use the system.
What problems is the product solving and how is that benefiting you?
Superior 3rd Party Risk Management through AI review, Policy alignment with Security Frameworks, Risk Register and Trust Center.
Efficient Compliance Automation, But Vendor Templates Need Updates
What do you like best about the product?
Vanta’s automation fits our needs perfectly. It automatically collects evidence from all our systems, including AWS, Google Workspace, Okta, and GitHub, so we no longer have to spend time tracking down screenshots or logs. The continuous monitoring feature is especially useful, as it provides immediate alerts whenever something falls out of compliance. Being able to manage both SOC 2 and ISO requirements from a single dashboard has saved us a significant amount of time.
What do you dislike about the product?
Some of the vendor risk templates seem a bit outdated, which occasionally requires us to make customizations outside of the tool.
What problems is the product solving and how is that benefiting you?
Before using Vanta, we managed compliance manually, which was not an efficient use of our time. Now, most of the compliance checks are automated, significantly streamlining our processes. Our audit preparations, which used to take months, now only require a few weeks, and we experience fewer errors. Vanta helps us keep everything organized and provides us with greater control over our security.
Solid Tool with Room for Improvement in Access Review Flexibility
What do you like best about the product?
From a governance framework perspective, the complaints framework provides a strong foundation. I find the offboarding checklist especially helpful, and I value the addition of timestamps for accounts that have been offboarded. Furthermore, the platform supports a broad array of integrations.
What do you dislike about the product?
The access review module lacks flexibility and customization options. Additionally, there is no downstream de-provisioning following user access reviews.
The tests also do not appear to be very customizable. While they work well at a high level, there are times when we need to set up more specific monitoring tests.
The new feature of "Access Requests to systems" is a great addition however, it really lacks the complexity & integration with other IT service management tools.
The tests also do not appear to be very customizable. While they work well at a high level, there are times when we need to set up more specific monitoring tests.
The new feature of "Access Requests to systems" is a great addition however, it really lacks the complexity & integration with other IT service management tools.
What problems is the product solving and how is that benefiting you?
Compliance frame work, Evidence for User Access Reviews, Offboarding monitoring & timestamps of deactivated accounts for access.
Effortless Integration and User-Friendly Test Management
What do you like best about the product?
Seamless integration with third-party tools, immediate linking of documents with tests, and you don't need to be an expert in the framework being evaluated into, to perform the corrective measurements
What do you dislike about the product?
Integrations seem to break a bit too often.
What problems is the product solving and how is that benefiting you?
Vanta has been instrumental in helping us maintain our SOC 2 compliance, which is essential for our business to succeed.
Effortless Compliance Management, Needs Clearer Guidance
What do you like best about the product?
I appreciate Vanta for making it incredibly easy to track personnel, policies, and put controls in place. It's convenient to have everything in one place, where I can quickly make updates and changes. The notifications about policies or controls needing attention keep me well-informed and proactive. I like the templates for policies and other items, as they considerably simplify the process of creating and editing drafts since most of the work is already done. These templates save me a significant amount of time because I don't need to conduct independent research.
What do you dislike about the product?
I find the layout of Vanta a bit confusing and it took me some time to get accustomed to it. When I receive notifications about a control or test needing attention, I'm often uncertain how to address the issue. I believe Vanta should be more explicit in detailing the actions required to remediate a control or test and provide clear guidance on how to execute these actions.
What problems is the product solving and how is that benefiting you?
I use Vanta to simplify SOC2 compliance by tracking personnel and policies, placing controls centrally, and receiving notifications for needed updates, saving time with convenient templates.
Excellent all-in-one GRC Platform
What do you like best about the product?
What I appreciate most is that Vanta truly serves as our all-in-one platform for GRC and audit activities, so we have a single source of truth for compliance. I'm also consistently impressed by their rapid pace of development and innovation. They clearly listen to feedback and are always rolling out valuable new features. The AI implementation is a perfect example - its use in streamlining vendor reviews and answering security questionnaires is excellent and has become a significant time-saver for our team. Finally, the customer support has been fantastic whenever we reached out to them. They are responsive, knowledgeable, and genuinely seem invested in our success.
What do you dislike about the product?
My primary concern is the limited ability to deeply customize the platform. It tends to be rather prescriptive, and not every compliance task can be automated. There remains a significant amount of manual effort, particularly when dealing with controls or systems that lack native integration. Additionally, the platform is quite costly, and expenses can escalate rapidly beyond the initial subscription fee.
What problems is the product solving and how is that benefiting you?
The AI capabilities for handling vendor reviews and security questionnaires are extremely valuable, transforming what used to take days into just a few hours. I also appreciate the concept of ongoing compliance, as it supports audit readiness throughout the entire audit cycle and significantly lessens the workload when the audit actually takes place. Additionally, Vanta hosts our Trust Center.
Streamlined Our Security Audits with Immediate ROI
What do you like best about the product?
I love how Vanta provides such an immediate return on investment and impact, especially as someone who has implemented hundreds of different applications. It's exceptional in delivering quick and effective results. The dashboards in Vanta are incredibly valuable to me as they offer an immediate glimpse of progress towards compliance without overwhelming the user with details or dig through information to figure out where we stand. This feature simplifies my workflow significantly. Additionally, I find Vanta extremely efficient for achieving more with a lean security team, relieving an incredible amount of operational burden in preparing for our annual security audits. The onboarding process with Vanta has been the easiest I've probably ever experienced, which speaks volumes about its user-friendly design.
What do you dislike about the product?
I find Vanta's vendor risk management feature lacking in robust capabilities. I would love to see it become an all-encompassing tool for security, IT, and finance vendor reviews. Currently, it's limited, as it doesn't allow me to input crucial contract and renewal information. This limitation necessitates the use of additional tools, preventing Vanta from being a comprehensive solution.
What problems is the product solving and how is that benefiting you?
I find Vanta reduces operational burden for security audits, enabling a lean team to handle certifications like SOC 2 and ISO 27001 and seamlessly add additional frameworks to prepare for emerging regulations. It streamlines compliance tracking through dashboards, provides immediate ROI, and simplifies our security questionnaire process.
showing 241 - 250