Vanta
VantaExternal reviews
2,339 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Comprehensive and Collaborative, But Task Overlap Can Be Confusing
What do you like best about the product?
Comprehensive, great layout and supporting in product guidance to ensure we resolve any issues/tasks at hand in the best way possible. It' s also easy to collaborate on. We use it almost on a daily basis as we received notifications and alerts. It has been easy to implement some of the feaures and roll it out to the org. Customer support has been great and we have a dedicated CSM that has supported us thrughout our journey.
What do you dislike about the product?
Sometimes confusing as many of the tasks form part of other lists, reports, charts, alerts and they are intertwined but in a confusing way.
What problems is the product solving and how is that benefiting you?
Before Vanta, ensuring ongoing SOC 2 compliance at Josef required manual tracking across multiple systems — cloud infrastructure, HR tools, access management, vulnerability management, and evidence collection. This created risks around:
Missed control evidence (e.g. proof of access reviews or change management processes)
Lack of real-time visibility into security posture
Time-consuming audits due to fragmented evidence and ad-hoc screenshots
Limited accountability across engineering and operations teams
Vanta centralises all of this by automatically monitoring controls and integrations (Google Workspace, AWS, Slack, GitHub, ClickUp, etc.), surfacing exceptions, and maintaining continuous audit readiness.
💡 How That Benefits Josef
Continuous compliance and audit readiness
Vanta automatically pulls and updates evidence daily, ensuring our SOC 2 controls remain in place year-round. This has removed the “scramble” before audit periods and simplified the annual audit cycle with Johanson Group.
Reduced manual workload
Instead of maintaining spreadsheets and screenshots, Vanta automatically checks controls like employee onboarding/offboarding, MFA enforcement, and change management. Our compliance and engineering teams can now focus on remediations, not evidence gathering.
Improved visibility and accountability
Dashboards show real-time compliance health across control families, which helps track ownership and identify gaps (e.g., missing device encryption, overdue risk assessments). It’s become the single source of truth for our audit posture.
Integrated risk and vulnerability tracking
With integrations to ClickUp and vulnerability management tools (like our Vanta Zap to auto-create tickets when new vulns are detected), we’ve automated follow-up on risk items and can demonstrate a complete remediation workflow.
Streamlined communication with auditors
During audits, most evidence can be shared directly from Vanta — audit requests are mapped to controls with attached evidence, reducing back-and-forth and cutting audit prep time significantly.
Missed control evidence (e.g. proof of access reviews or change management processes)
Lack of real-time visibility into security posture
Time-consuming audits due to fragmented evidence and ad-hoc screenshots
Limited accountability across engineering and operations teams
Vanta centralises all of this by automatically monitoring controls and integrations (Google Workspace, AWS, Slack, GitHub, ClickUp, etc.), surfacing exceptions, and maintaining continuous audit readiness.
💡 How That Benefits Josef
Continuous compliance and audit readiness
Vanta automatically pulls and updates evidence daily, ensuring our SOC 2 controls remain in place year-round. This has removed the “scramble” before audit periods and simplified the annual audit cycle with Johanson Group.
Reduced manual workload
Instead of maintaining spreadsheets and screenshots, Vanta automatically checks controls like employee onboarding/offboarding, MFA enforcement, and change management. Our compliance and engineering teams can now focus on remediations, not evidence gathering.
Improved visibility and accountability
Dashboards show real-time compliance health across control families, which helps track ownership and identify gaps (e.g., missing device encryption, overdue risk assessments). It’s become the single source of truth for our audit posture.
Integrated risk and vulnerability tracking
With integrations to ClickUp and vulnerability management tools (like our Vanta Zap to auto-create tickets when new vulns are detected), we’ve automated follow-up on risk items and can demonstrate a complete remediation workflow.
Streamlined communication with auditors
During audits, most evidence can be shared directly from Vanta — audit requests are mapped to controls with attached evidence, reducing back-and-forth and cutting audit prep time significantly.
Great AI and Automation, But Takes Time to Learn
What do you like best about the product?
The AI features, the UI is nice. I like the automation it provides.
What do you dislike about the product?
It can be clunky to figure out how to use.
What problems is the product solving and how is that benefiting you?
Speeds up review times during the sales cycles by providing the AI feature for the security questionnaires as well as a Trust Center to make it quicker and more accessible to customers. Some customers don't even send us a questionnaire because they can get the assurance level they need by using the Trust Center only.
Great for Onboarding, Offboarding Could Be More Flexible
What do you like best about the product?
The policies that are already built out in the system
What do you dislike about the product?
Offboarding an employee can be a little difficult because you have to wait for systems to talk to each other. it would be better if you could offboard someone manually as part of our termination checklist
What problems is the product solving and how is that benefiting you?
Vanta is helping us pass security audit tests from other companies because the policies are already built in and we can easily point to them when documents are being requested.
Helpful Templates, But Integration Sync Needs Improvement
What do you like best about the product?
Using the existing templates helps a lot in creating policies.
What do you dislike about the product?
There are times when the integration fails to update as expected. While I realize that syncing can require some time, there are occasions when it simply doesn't function properly.
What problems is the product solving and how is that benefiting you?
Defining the list of policies and tests is helpful because it allows us to create documentation that supports these policies. This process ensures that our documentation is aligned with the established policies, making it easier to maintain consistency and clarity.
Streamlined SOC2 Compliance with Robust Integrations
What do you like best about the product?
I appreciate Vanta's ability to help us with the SOC2 certification process. The biggest selling point for me is its integration capabilities. Vanta integrates seamlessly with our main vendors and helps assess their setups. It's also great at detecting new and incoming vendors and vetting them as we move forward. The Google Cloud Platform and GitHub integrations have been instrumental in keeping us compliant and aware of any gaps. Additionally, we use the Slack integration to receive notifications about issues, which I find very useful. Setting up Vanta was surprisingly easy, thanks to the provided Terraform script, which I could refactor for our setup.
What do you dislike about the product?
A minor issue I've found with the security vulnerabilities component is the availability of a fix. Sometimes a dependency will have a fix, but the nature of the software we have makes those dependencies be transitive instead of direct dependencies. That means that we can't really fix the issue although the offending dependency has a fix. We end up monitoring those dependencies manually instead of relying on Vanta to tell us.
What problems is the product solving and how is that benefiting you?
I use Vanta for the SOC2 certification process. It maps changes needed for certification with its integrations, monitors security vulnerabilities and infrastructure drift, keeping us compliant. Google Cloud and GitHub integrations help maintain compliance and identify gaps.
Vanta’s Automation Transforms Compliance with Seamless Integrations and Intuitive Dashboard
What do you like best about the product?
Vanta’s automation is a game-changer. It eliminates the tedious manual work involved in gathering audit evidence and tracking compliance controls. The platform’s integrations with popular tools—like Microsoft 365, Salesforce, and Jira—make it incredibly easy to monitor systems and users in real time. The dashboard is intuitive, visually clean, and provides an at-a-glance view of your compliance status. I especially appreciate the reminders and alerts that keep the whole team accountable without adding extra administrative burden.
The continuous monitoring and audit-readiness support are by far the most helpful features. Vanta doesn’t just help you pass an audit once—it helps you stay compliant all year long. Their support team and dedicated compliance specialists are also excellent, offering hands-on guidance throughout the certification process. The pre-built policy templates and security questionnaires save a ton of time and make compliance accessible, even for teams without a full-time security or compliance expert.
The biggest upside is confidence and speed. Vanta drastically reduces the time it takes to get audit-ready (SOC 2, HIPAA, etc.), which means you can close deals faster and demonstrate trust to customers sooner. It also scales well—what starts as a compliance tool quickly becomes a security management system that grows with your company. The automation, integrations, and excellent customer experience all make Vanta a long-term partner rather than just a one-time compliance vendor.
The continuous monitoring and audit-readiness support are by far the most helpful features. Vanta doesn’t just help you pass an audit once—it helps you stay compliant all year long. Their support team and dedicated compliance specialists are also excellent, offering hands-on guidance throughout the certification process. The pre-built policy templates and security questionnaires save a ton of time and make compliance accessible, even for teams without a full-time security or compliance expert.
The biggest upside is confidence and speed. Vanta drastically reduces the time it takes to get audit-ready (SOC 2, HIPAA, etc.), which means you can close deals faster and demonstrate trust to customers sooner. It also scales well—what starts as a compliance tool quickly becomes a security management system that grows with your company. The automation, integrations, and excellent customer experience all make Vanta a long-term partner rather than just a one-time compliance vendor.
What do you dislike about the product?
While Vanta is an incredibly powerful platform, there are moments where the user interface can feel a bit overwhelming—especially when you’re first getting started. With so many integrations and automated checks running, it can take some time to understand how everything connects. Occasionally, certain integrations (like custom infrastructure setups or less common tools) require extra configuration or manual input to sync properly.
The policy customization process could be more flexible. Vanta offers great templates, but editing or tailoring them to specific internal workflows sometimes feels constrained by the platform’s structure. Additionally, notifications can be a bit noisy, and fine-tuning alert settings to avoid alert fatigue takes some trial and error.
The main downside is cost and learning curve—Vanta isn’t the cheapest option, and smaller startups might find the pricing high if they’re early in their compliance journey. There’s also a dependency on Vanta’s integrations, so if your tech stack isn’t well supported, you might need some manual workarounds. Finally, while Vanta’s audit partners are helpful, working through third-party auditors within the platform can sometimes create coordination delays during busy audit seasons.
The policy customization process could be more flexible. Vanta offers great templates, but editing or tailoring them to specific internal workflows sometimes feels constrained by the platform’s structure. Additionally, notifications can be a bit noisy, and fine-tuning alert settings to avoid alert fatigue takes some trial and error.
The main downside is cost and learning curve—Vanta isn’t the cheapest option, and smaller startups might find the pricing high if they’re early in their compliance journey. There’s also a dependency on Vanta’s integrations, so if your tech stack isn’t well supported, you might need some manual workarounds. Finally, while Vanta’s audit partners are helpful, working through third-party auditors within the platform can sometimes create coordination delays during busy audit seasons.
What problems is the product solving and how is that benefiting you?
Before Vanta, maintaining continuous compliance and ensuring every employee acknowledged security policies was a tedious, manual process. Vanta completely transformed that experience by automating compliance workflows and providing real-time visibility into our security posture. Instead of chasing down screenshots, spreadsheets, or employee attestations, everything is centralized and monitored automatically.
Vanta helps us streamline compliance for frameworks like SOC 2 and HIPAA, dramatically reducing the time and effort needed to prepare for audits. The automated evidence collection from integrations across our systems—cloud providers, HR platforms, and ticketing tools—means we’re always audit-ready, not scrambling at the last minute.
Another huge benefit is policy management and employee engagement. Vanta makes it easy to distribute policies to all employees and track their acknowledgment digitally. This ensures 100% policy acceptance and ongoing accountability, which is essential for maintaining compliance and building a strong security culture across the organization.
From a business standpoint, Vanta has allowed us to accelerate sales cycles by providing customers and partners with trusted proof of compliance, while also reducing risk exposure through continuous monitoring. In short, Vanta gives us confidence, saves time, and supports company-wide compliance with minimal friction.
Vanta helps us streamline compliance for frameworks like SOC 2 and HIPAA, dramatically reducing the time and effort needed to prepare for audits. The automated evidence collection from integrations across our systems—cloud providers, HR platforms, and ticketing tools—means we’re always audit-ready, not scrambling at the last minute.
Another huge benefit is policy management and employee engagement. Vanta makes it easy to distribute policies to all employees and track their acknowledgment digitally. This ensures 100% policy acceptance and ongoing accountability, which is essential for maintaining compliance and building a strong security culture across the organization.
From a business standpoint, Vanta has allowed us to accelerate sales cycles by providing customers and partners with trusted proof of compliance, while also reducing risk exposure through continuous monitoring. In short, Vanta gives us confidence, saves time, and supports company-wide compliance with minimal friction.
Seamless SOC 2 Compliance, Strong Integrations
What do you like best about the product?
I've been using Vanta for around one to two years primarily for SOC 2 compliance, and I am very impressed with the ease of setup. I was pleasantly surprised by how it seamlessly integrated with our infrastructure, making the process of getting SOC 2 certification as straightforward as possible. Vanta efficiently keeps our team on track to maintain SOC 2 compliance, effectively eliminating the need for someone within the team to constantly remind us of the necessary tasks. The system has all tasks pre-set, allowing me to see exactly what I need to accomplish without having to figure it out myself, which simplifies the compliance process significantly. The integrations, specifically with infrastructure providers like AWS and Google Cloud, are a standout feature for me, as they allow us to align our tests efficiently. Vanta excels in providing integrations and individualization that adapt to our setup needs. This level of integration is crucial for streamlining our SOX 2 certification process, which is a significant benefit for us.
What do you dislike about the product?
I've noticed some inconsistency among audits through Vanta. Initially, our audits were somewhat lenient, but the latest audit became extremely strict suddenly. This inconsistency, even with the same auditors, is problematic as it makes it challenging to predict the time needed for future audits, despite having Vanta streamline our processes.
What problems is the product solving and how is that benefiting you?
I find Vanta solves compliance tracking, ensuring our team stays on track with SOC 2 requirements efficiently.
Smooth SOC2 Integration, But Occasional App Glitches
What do you like best about the product?
It is great because of the SOC2 tool. Integration was very smooth, always up to date on tests
What do you dislike about the product?
Sometimes app is too wacky and doesn’t update the tests
What problems is the product solving and how is that benefiting you?
Most importantly no need of providing documents and details for the SOC2 audit anymore
Effortless Compliance Tracking and Clear Guidance with Vanta
What do you like best about the product?
I appreciate how easy Vanta is to use and how clearly it shows our progress in the compliance process. It makes it simple to identify which areas need improvement and lets me see precisely what needs to be addressed. The setup was uncomplicated, and connecting our services was a smooth process.
What do you dislike about the product?
It can be frustrating that certain features are only available with a more expensive subscription.
What problems is the product solving and how is that benefiting you?
Vanta has helped our very small team stay on top of compliance all year by highlighting what we need to focus on ahead of time. This makes it much easier for us to manage our responsibilities and remain compliant.
Great Vendor Integration, But Navigation Can Be Tricky
What do you like best about the product?
integration with our vendors make my life easier
What do you dislike about the product?
Sometimes it is hard to find the needed control/tasks
What problems is the product solving and how is that benefiting you?
Intergration with our 3rd party vendors, Vanta can do integration directly without I have to do it myself.
showing 351 - 360