We're trying to get SOC 2 compliance, and we're trying to get HIPAA compliance.
Vanta
VantaExternal reviews
2,113 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Streamlined compliance with API integrations for real-time monitoring
What is our primary use case?
How has it helped my organization?
We haven't seen any problem with that yet. That said, our company is a tiny 20-person company right now. We're probably six months ahead of where we should be in terms of doing compliance anyhow. We're not really at the critical masses yet, but we're trying to get a head start on it.
What is most valuable?
The fact it does the real-time integration with the APIs into our hosting service, which is AWS, can at times be painful - yet it's very effective. We get working pretty easily. They integrate into New Relic as a performance monitoring tool.
When there's a control in Vanta that says, 'I want to know if you are doing performance monitoring on a certain web server,' it goes and knows how to talk to New Relic and grab that information and make it part of your Vanta Viewport.
What needs improvement?
Every product has a lot of areas to improve. They have an AI generator for the system description for SOC 2, for example, however, the outline is a little sketchy. The system description has to have a little more insight or context about your business and why you're different. A true auditor will look at that closely. A lot of it is a little bit too automated and not really realistic. One area that they tout as being a real-time savings, we haven't found that to be a time savings yet.
For how long have I used the solution?
I've been using Vanta for about a year and a half.
What do I think about the stability of the solution?
I haven't seen a fail yet. But I am only using the tool about ten hours a week, and I'm a contractor as well, so I'm not working at this every day. But every time I seem to need it, it works.
What do I think about the scalability of the solution?
We haven't seen any problem with that yet. Our company is a tiny twenty-person company right now. We're probably six months ahead of where we should be in terms of doing compliance anyhow. We're not really at the critical masses yet, but we're trying to get a head start on it.
How are customer service and support?
I've had experience with both tech support as well as with their customer success. They're interchangeable at some point, at least for our size business. I would give them at least eight out of ten. They've been responsive, which is the most important thing. They seem to come back, and they give you good answers, and they give you good options to pursue what you're trying to do.
How would you rate customer service and support?
Positive
How was the initial setup?
It's a fairly large learning curve to get going. Not impossibly so. Once you get familiar with the system and where things are located, then you can work around it reasonably well. It's more tolerant as you get to know the product a little more. Initially, they're not very clear about the differences between the need for evidence, so-called evidence, and what would be automated.
What was our ROI?
We're just not at scale to even evaluate that. And even if you could, it's hard to evaluate something like, okay, this company is running in a compliant way versus they're cutting corners. It's hard to attach a value to that.
What's my experience with pricing, setup cost, and licensing?
Seems reasonable. We just renewed. I don't have a lot of experience in this space, but this is the first generation of automation products for purposes of compliance. There are a group of different companies out there, like Drata. They all seem to be similarly priced.
What other advice do I have?
They've done a good job, actually. I can't tell if they're a leader or not. All I know is that it gets us that seems to be constructive right now. We're not investing that much money.
I'd rate the solution eight out of ten.
Implementing SOC2 with Vanta
What do you like best about the product?
Give us guidance on controls to implement
What do you dislike about the product?
Performance when you click on something like a control. very slow
What problems is the product solving and how is that benefiting you?
Tracking all evidences from multiple compliancy
Vanta - honest feedback
What do you like best about the product?
Vanta has an excellent user interface, making it easy to use, and the availability of helpful resources is a great advantage.
What do you dislike about the product?
The customer support response can be a bit delayed at times.
What problems is the product solving and how is that benefiting you?
Audit management.
Great for managing Compliance and Audits
What do you like best about the product?
One place to manage documents for audits. Evidence and supports compiles easily. Easy to access and intintegrate into systems.
What do you dislike about the product?
potentially lots of emails and notifications to users that may be ignored or not understood.
Internal users may require significant handholding.
Internal users may require significant handholding.
What problems is the product solving and how is that benefiting you?
Complete SOC2 Type 2 audit
Great experience so far seamless setup and ease of use!
What do you like best about the product?
Vanta was easy to "plug and play" right out of the box. An ever increasing number of integration options make the implementation nearly seamless. With minimal effort we were able to assess our baselines of compliance in frameworks critical to our industry. Bi-weekly meetings with a customer success manager really helped us strategize our limited capacity on big ticket items. I review Vanta everyday to ensure we are regularly making progress towards our compliance and security goals. We are in the infancy of our Trust Center use and already seeing a positive trend in traffic with plans to implement the beta revenue impact module. Recent introduction of an AI based Trust Center chat bot is also really intriguing. We love to see the continued dedication to product growth with a trusted partner!
What do you dislike about the product?
Some of the integrations require a dedicated SSO like Okta or atlease one that supports a SCIM bridge (currently unavailable for our Google Workspace). Seeing how well the integration works in the realm of onboardin, offboarding, and access reviews makes them a bit of a tease but we manage.
What problems is the product solving and how is that benefiting you?
Before Vanta we lacked a lot of compliance required policies, controls, and processes. Vanta's policy builder as well as their controls, tests, and documentation tracking have made a huge impact to our baseline compliance requirements. From fixing what was broken or outright missing, to mainting configuration management on cloud hosted tools ensuring we don't regress in compliance when assessing changes.
A great one stop shop compliance SaaS
What do you like best about the product?
A thoroughly well designed system with many out of the box solutions.
What do you dislike about the product?
After using the sytem for a numbetr of months, I cant think of anything negative about the Vanta system or its support staff.
What problems is the product solving and how is that benefiting you?
ISO27001 Certification .
Streamlined Compliance Made Easy
What do you like best about the product?
Vanta simplifies the compliance process, making it accessible and efficient.
What do you dislike about the product?
Sometimes the integration with other tools can be tricky and requires extra attention.
What problems is the product solving and how is that benefiting you?
Vanta solves the complexities of compliance by automating processes like evidence collection and monitoring security controls.
Vanta has simplified the our Compliance Journey
What do you like best about the product?
The out-of-box frameworks have made it easy to consolidate on our Compliance and audit journey.
What do you dislike about the product?
There are a couple of changes that need to be done in quick time with other modules e.g. Having the ability to edit picklist options after a Risk item has been entered.
What problems is the product solving and how is that benefiting you?
Audit Management and Evidence collection.
The best tools for cyber
What do you like best about the product?
The GRC control is awesome and the simplicity of its use is crazy.
What do you dislike about the product?
The downside for Vanta is the integrations with more XDRs and security solutions.
What problems is the product solving and how is that benefiting you?
Centralize the documents, review providers, review assets inventory
Ease of use for GRC across multiple frameworks
What do you like best about the product?
Ease of use for GRC across multiple frameworks
What do you dislike about the product?
The tests and integrations could be improved ,also customisation
What problems is the product solving and how is that benefiting you?
Ease of use for GRC across multiple frameworks
showing 401 - 410