Vanta
VantaExternal reviews
2,425 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Vanta ISMS Review - ISO 27001 and Trust Centre
What do you like best about the product?
We are currently utilising Vanta for ISO 27001 compliance, and it has been instrumental in helping us maintain our certification. One particularly valuable feature is its proactive compliance management, which provides timely alerts on expiring checks. A real concern for us was ensuring that compliance remains an ongoing priority rather than a one-and-done type of exercise, preventing any lapse in security as we continue to scale. Balancing proactive compliance methods with growth has been a constant juggling act for any scale-up.
We have found Vanta’s Trust Centre to be an invaluable asset, providing real-time access to our cybersecurity offerings, which we can efficiently share with customers cutting down time doing DDQs. Additionally, it serves as a central repository for critical security documentation, including DPAs, T&Cs, and cybersecurity reports, while also allowing us to manage and display our subprocessors for greater transparency and accessibility.
Our decision to choose Vanta over alternative solutions was primarily driven by its responsiveness and commitment to continuous improvement. Upon onboarding, we identified that our primary cloud provider was not yet supported, and Vanta was really good in accounting for this and promising to get this implemented in the future. Lo and behold, they are now supported bridging this gap for us.
Furthermore, Vanta has significantly enhanced our device management capabilities. We rely on the platform to track all company laptops, ensuring that they adhere to minimum security requirements and remain compliant with our internal policies.
Looking ahead, as we plan to expand into the US, Vanta’s ability to seamlessly integrate additional frameworks, such as SOC 2, will be essential in maintaining our security and compliance standards across multiple markets.
Overall, Vanta has provided us with a robust, scalable, and efficient solution for managing security and compliance, making it an indispensable part of our operations.
We have found Vanta’s Trust Centre to be an invaluable asset, providing real-time access to our cybersecurity offerings, which we can efficiently share with customers cutting down time doing DDQs. Additionally, it serves as a central repository for critical security documentation, including DPAs, T&Cs, and cybersecurity reports, while also allowing us to manage and display our subprocessors for greater transparency and accessibility.
Our decision to choose Vanta over alternative solutions was primarily driven by its responsiveness and commitment to continuous improvement. Upon onboarding, we identified that our primary cloud provider was not yet supported, and Vanta was really good in accounting for this and promising to get this implemented in the future. Lo and behold, they are now supported bridging this gap for us.
Furthermore, Vanta has significantly enhanced our device management capabilities. We rely on the platform to track all company laptops, ensuring that they adhere to minimum security requirements and remain compliant with our internal policies.
Looking ahead, as we plan to expand into the US, Vanta’s ability to seamlessly integrate additional frameworks, such as SOC 2, will be essential in maintaining our security and compliance standards across multiple markets.
Overall, Vanta has provided us with a robust, scalable, and efficient solution for managing security and compliance, making it an indispensable part of our operations.
What do you dislike about the product?
While Vanta is a powerful compliance solution, it does have some limitations, particularly for businesses that do not rely on major providers - which can limit your flexibility in scaling.
If an application is not natively supported, compliance gaps must be addressed manually, which can add to the operational burden and will give you inaccurate scores on "completion" of a certification.
Although Vanta is responsive to customer needs and continues to expand its integrations, there is no guarantee that less common or niche tools will be supported. This means businesses using custom-built systems or non-mainstream applications may struggle to fully automate compliance tracking, reducing the efficiency of Vanta’s real-time monitoring capabilities.
If an application is not natively supported, compliance gaps must be addressed manually, which can add to the operational burden and will give you inaccurate scores on "completion" of a certification.
Although Vanta is responsive to customer needs and continues to expand its integrations, there is no guarantee that less common or niche tools will be supported. This means businesses using custom-built systems or non-mainstream applications may struggle to fully automate compliance tracking, reducing the efficiency of Vanta’s real-time monitoring capabilities.
What problems is the product solving and how is that benefiting you?
Vanta has been instrumental in helping us achieve and maintain ISO 27001 compliance, streamlining the process and ensuring we stay on track with ongoing requirements.
Beyond compliance, Vanta serves as our comprehensive ISMS tool, enabling us to efficiently manage our policies, devices, and access controls.
The Trust Centre has been incredibly useful for our security posture by providing real-time visibility into our cybersecurity measures, allowing us to easily share compliance reports, agreements, and subprocessors with customers.
Beyond compliance, Vanta serves as our comprehensive ISMS tool, enabling us to efficiently manage our policies, devices, and access controls.
The Trust Centre has been incredibly useful for our security posture by providing real-time visibility into our cybersecurity measures, allowing us to easily share compliance reports, agreements, and subprocessors with customers.
Great product!
What do you like best about the product?
Vanta helped me get SOC 2 certified. It was easy to integrate, the onboarding support was good, and it helped satisfy my auditor. It also notifies via slack when things get out of shape, so it is easy for me to stay ahead of the issues all the time.
What do you dislike about the product?
Sometimes it is not clear enough how to fix the problem. Might be inherent with the benchmark, not Vanta's fault. Also - auditor still wants to add custom documents and proof.
What problems is the product solving and how is that benefiting you?
Helped me get SOC 2 certified and helps me stay that way
Vanta is usefull to scale due dilignece
What do you like best about the product?
the trust center is a good resource to self serve customers
What do you dislike about the product?
the due diligence automation feature because it only ingest spreadsheet
What problems is the product solving and how is that benefiting you?
Source of truth for security docuemntation and processes
Reliable and High-Quality partner
What do you like best about the product?
The ability to automate our audits and consolodate our evidence was the primary reason we chose Vanta and has been of great value for us, however the Trust Center functionality has also been an unexpected high point.
What do you dislike about the product?
Currently the platform is geared towards SOC2, however it does not entirely align with ISO27001 just yet. We are still working from spreadsheets for our inforamtion asset managment. It would be good to see a more robust alignment with ISO27001.
What problems is the product solving and how is that benefiting you?
We are able to significantly reduce the amount of audit preparation time as much of this is automated. In addition we can now ensure our clients and prospects have up to date access to our policies and certifications.
Meets all our needs
What do you like best about the product?
Automations and integrations make compliance a breeze
What do you dislike about the product?
Some complex solutions to meeting the requirements, which aren't always clear.
What problems is the product solving and how is that benefiting you?
Without an appointed compliance manager, we needed a tool that helped us organise and maintain our policies and procedures for compliance.
Compliance made easy for startups
What do you like best about the product?
Vanta is a very easy to use and the level of support available is great. It is easy to use for people without much of a background in security and provides you with a detailed step by step process of what needs to be done to meet your compliance requirements. The policies and documents sections are easy to setup, track and maintain. Onboarding and offboarding process is also streamlined through Vanta from a security standpoint.
What do you dislike about the product?
One area of improvement can be if I can automate some of the mandatory to dos for new joinees instead of manually creating those alerts for them to complete the required tasks will be great.
What problems is the product solving and how is that benefiting you?
HIPAA compliance
Streamlined GRC Work but Integrations Need Improvement
What do you like best about the product?
I enjoy how easy Vanta is to use, how seamless things are, and how easy it is to navigate. Vanta makes things seem a lot more streamlined and quicker. Everything is in one place, and it's a lot easier to navigate and manage a bunch of things simultaneously.
What do you dislike about the product?
Currently, a lot of the integrations have difficulty, especially with our GitLab, AWS, and Sentinel One integrations. There's some issues around data accuracy and reporting. I've raised this to Vanta many times, and there is no fix yet.
What problems is the product solving and how is that benefiting you?
I use Vanta because it streamlines our GRC work in cybersecurity, making everything quicker and easier to manage by having it all in one place.
BEST RISK ASSESSMENT AND VENDOR MANAGEMENT TOOL
What do you like best about the product?
We used vanta for automated compliance check and risk assessment , it has the best remote secure access and assess management
What do you dislike about the product?
User interface is not efficient for beginner also not affordable
What problems is the product solving and how is that benefiting you?
We used it for risk assesment it was pretty efficient
Save hours on compliance tasks - A Game Changer!
What do you like best about the product?
- Best feature for me is the automated evidence collection, instead of manually tracking access logs. Using Vanta, we can fetch information directly from AWS, Google workspace, and Okta. - Despite some minor issues, Vanta has significantly streamlined our vendor security process.
- Instead of struggling in spreadsheet, now we had a centralised view of vendor compliance and automated reminders for followers.
- Vanta's customer support was fantastic
- Instead of struggling in spreadsheet, now we had a centralised view of vendor compliance and automated reminders for followers.
- Vanta's customer support was fantastic
What do you dislike about the product?
- Limited automation for vendor security questionnaire.
- Custom control mapping could be improved.
- Custom control mapping could be improved.
What problems is the product solving and how is that benefiting you?
One of the major impact has been better collaboration between security and leadership teams. The compliance dashboard gives everyone visibility into our security and reduces back-and-forth of emails.
We enhanced how we stay secure and compliant
What do you like best about the product?
As for the most powerful feature about Vanta, it's how the compliance becomes simplified. It’s integrated with other tools we already use like our cloud services, so everything that we have to do is so much easier to get secure and compliant. As a result of automation involved in the tasks within the platform, we have taken away manual check burden which also enabled us to stay ahead without spending too much time on compliance. I’m also super impressed how easy it is to spy on everything in one place.
What do you dislike about the product?
The rigidity with some of the compliance processes in Vanta is one of the challenges I’ve dealt with. The software is great at keeping us compliant, but the workflows and requirements that they have set don’t necessarily fit our needs. In addition, there are always occasional syncing issues between platforms, which delay when we are supposed to have a thing an instant. These problems are frustrating to deal with when time is an issue, such as an audit.
What problems is the product solving and how is that benefiting you?
Solving the problem of the complexity of security compliance is what Vanta does for us. Staying compliant has become a lot easier, especially when using the automation. This has helped increase overall efficiency, by decreasing the effort needed to track and maintain compliance. Not only has this saved us a lot of time but has also freed our team the ability to focus on more business driving work and improving our services.
showing 431 - 440