Vanta
VantaExternal reviews
2,318 reviews
from
and
External reviews are not included in the AWS star rating for the product.
For any ORG that wants to be sure that SOC 2, HIPPA, etc compliant, Vanta is the way to go.
What do you like best about the product?
best automation and compliance features, with cost per ROI being great
What do you dislike about the product?
Support team can be more faster and responsive
What problems is the product solving and how is that benefiting you?
Helps to keep my org compliant and safe
Simplified SOC2 with Seamless Integrations
What do you like best about the product?
I like Vanta for its ease of use and integrations. The automatic testing feature is particularly useful for me. It helps me know what to focus on and resolve at a glance, saving me time. The initial setup of Vanta was also pretty easy, which I appreciate.
What do you dislike about the product?
I would like to set reminders in time intervals. So 30 days before a test or document expires, two weeks and then maybe 3 days before expiration. Or, have the ability to snooze reminders for a period of time. I currently have no control over that feature so things just get lost in the noise.
What problems is the product solving and how is that benefiting you?
I use Vanta for SOC2 compliance, and it helps with document storage, testing management, and security policy accountability. The automatic testing lets me know what to focus on, saving me time. Its ease of use and integrations are what I like most.
Timely Policy Renewal Updates, Nothing to Dislike
What do you like best about the product?
Timely updates about renewal period of policies
What do you dislike about the product?
There is no such thing that i dislike about Vanta. Yes there can be improvements, but nothing to dislike for sure.
What problems is the product solving and how is that benefiting you?
Vanta is letting us build and maintain a robust ISMS
Easy-to-Use UX and a Helpful API for Building Security Processes
What do you like best about the product?
UX is very good and easy to use, features and functionality work well and offer a good way for organisations to start to build out their security processes, procedures and policies.
The roles and user management meet expectations and the API has been very helpful in building automation between the various IT and security systems.
The roles and user management meet expectations and the API has been very helpful in building automation between the various IT and security systems.
What do you dislike about the product?
The API is missing some features which would allow us to take our efficiency further (e.g. creating a security review on an existing vendor).
The vendor-review AI features are a bit basic and need refinement to add true value, such as ability to define the source scope against specific questions (the AI likes to sometimes use the wrong documents to answer specific questions), and the answer format (e.g. make it succinct). I hope Vanta invests more here so we can use it more to speed up our vendor reviews, as they're a huge time sink right now.
Also the access review feature is lacking and we've had to build our own for cases where there is a 1 user : many instances of the user account in the same product.
The vendor-review AI features are a bit basic and need refinement to add true value, such as ability to define the source scope against specific questions (the AI likes to sometimes use the wrong documents to answer specific questions), and the answer format (e.g. make it succinct). I hope Vanta invests more here so we can use it more to speed up our vendor reviews, as they're a huge time sink right now.
Also the access review feature is lacking and we've had to build our own for cases where there is a 1 user : many instances of the user account in the same product.
What problems is the product solving and how is that benefiting you?
Aligning tests/controls to the associated controls within other compliance frameworks, and holding staff members accountable for evidence. Since controls are distributed across several areas, it's been really helpful for a top-down view and for holding non-security team members accountable for their audit evidence. It means we can spend the time working on more important matters and taking a proactive approach to security, as opposed to just purely reactive.
Straightforward Compliance Made Manageable with a Clean UI and Slack Integration
What do you like best about the product?
What I like most about Vanta is how straightforward it is to use, even for someone without a compliance background. The platform takes what could be a very complex process and makes it feel structured and manageable. The UI is clean and intuitive, so it’s easy to see what needs to be done, understand why it matters, and stay on track.
I also really appreciate the Slack integration. It makes it much easier to involve the team and keep compliance tasks moving forward without constantly having to chase people down. Overall, Vanta does a great job of making compliance feel less overwhelming and more like a normal, day-to-day part of operations.
I also really appreciate the Slack integration. It makes it much easier to involve the team and keep compliance tasks moving forward without constantly having to chase people down. Overall, Vanta does a great job of making compliance feel less overwhelming and more like a normal, day-to-day part of operations.
What do you dislike about the product?
I don’t have any major complaints about Vanta from a product standpoint. If I had to point to something, it would be the cost. For smaller teams or early-stage companies, it can feel like a significant investment. That said, it does replace a lot of manual work and external consulting effort, so the value becomes clearer once you’re actively going through a compliance process.
What problems is the product solving and how is that benefiting you?
We needed a clear structure to follow for SOC 2 and HIPAA compliance, and Vanta provided that framework right out of the box. Instead of figuring out requirements on our own, we had a guided path showing what controls were needed, what evidence to collect, and how everything connected. It turned what could have been a very overwhelming, ambiguous process into something actionable and trackable.
As a result, we’ve been able to move forward with compliance in a much more organized way, involve the right people internally, and feel more confident when speaking with customers about our security posture.
As a result, we’ve been able to move forward with compliance in a much more organized way, involve the right people internally, and feel more confident when speaking with customers about our security posture.
Easy Compliance Insights and Smooth Auditor Sharing
What do you like best about the product?
Out of the box, it provides easy insight into compliance requirements and deadlines. Integrations pull in data from a variety of our other internal tools, all of which is then easily shared with auditors. Vanta also makes annual security trainings and sharing of company policies simple; it's truly a one-stop-shop, empowering smaller startups to keep a clean house. I check it once or twice a week and feel fully on top of things.
What do you dislike about the product?
Navigation can be awkward; it sometimes takes multiple clicks or navigating to a new page in order to add missing information. Searchability could be improved, and there's a small onboarding curve for new users.
What problems is the product solving and how is that benefiting you?
We use Vanta to manage security and compliance requirements. It saves me time and energy, and increases internal confidence in our policies and architecture.
Clear compliance visibility that saves time and makes audits smoother
What do you like best about the product?
Honestly, the best thing about Vanta is the clarity it provides and the time it saves. Rather than scrambling for screenshots and evidence when an audit comes around, we can check our compliance posture at any time, quickly spot and track gaps, and pull evidence from connected tools all in one place. It’s made audits much smoother and has helped the team focus more on fixing issues instead of getting bogged down in admin work.
What do you dislike about the product?
The main drawback is limited customisation. We’d like more ability to tailor tests and evidence checks to our environment rather than fitting into a fixed template. The good news is we’ve been told enhanced custom tests are on the roadmap.
What problems is the product solving and how is that benefiting you?
Vanta reduces manual compliance work by centralising evidence and continuously checking controls across our systems. It benefits us by keeping us audit-ready, improving visibility of gaps, and speeding up audits with less disruption to teams
Proactive Compliance Made Simple
What do you like best about the product?
I find the interface of Vanta very easy to use as it directs me right to the items that need to be addressed. It's really helpful in preparing us for our SOC 2 Type II audit. It also proactively flags and highlights items that need immediate attention and potential vulnerabilities.
What do you dislike about the product?
I think there could be less notifications. I feel like I get pinged via a lot of different channels. They are items that need to be addressed but they are very frequent. Maybe having a weekly summary or being able to opt into that option.
What problems is the product solving and how is that benefiting you?
I use Vanta to proactively flag items that need immediate attention and potential vulnerabilities, simplifying compliance and monitoring access controls. It also helps us to prepare for our compliance audits.
Easy to Use with an Excellent Customer Support Team
What do you like best about the product?
Ease of use and the customer support team.
What do you dislike about the product?
It's overwhelming, but I suspect this is more the ISO certification process in itself.
What problems is the product solving and how is that benefiting you?
They are streamlining our ISO 42001 and 27001 certifications. They are also streamlining our vendor tech reviews
Easy to Use Centralized Compliance Automation
What do you like best about the product?
I use Vanta to automate our compliance controls, and I really like its centralized nature and automation because it saves us a lot of time and makes checking our controls much less confusing. The trust center is another great addition since it provides customers with information on our security and compliance without us having to manually send that info or answer their questions every time. The integration process is easy, especially with Google, AWS, and Namely. The initial setup was extremely easy. I would rate my likelihood of recommending Vanta to a friend or colleague as a 9.
What do you dislike about the product?
Some of the tests for the controls seem arbitrary, also occasionally it has issues syncing data from other tools but those bugs are usually resolved fairly quickly.
What problems is the product solving and how is that benefiting you?
I use Vanta to automate compliance controls, making tracking much easier by centralizing them across our tools. It saves time, reduces confusion, and the trust center provides customers info on security and compliance. Integration with tools like Google and AWS is easy.
showing 21 - 30