We're trying to get SOC 2 compliance, and we're trying to get HIPAA compliance.
Vanta
VantaExternal reviews
2,320 reviews
from
and
External reviews are not included in the AWS star rating for the product.
They do what they say!
What do you like best about the product?
Solid support, easy to understand product, good collaboratoin features.
What do you dislike about the product?
Opaque pricing, sales people are often quoting vastly different prices.
What problems is the product solving and how is that benefiting you?
It allows us to get SOC 2 Compliant.
Seamless Compliance Management
What do you like best about the product?
Vanta is awesome for making compliance way easier and less of a headache, especially for things like SOC 2, ISO 27001, and GDPR. It keeps an eye on security controls all the time, so there’s less manual work and stress when audit time rolls around.
What do you dislike about the product?
some users find that it doesn’t always adapt well to unique workflows or specific security setups. Rest is good
What problems is the product solving and how is that benefiting you?
We use Vanta to handle our compliance requirements, like SOC 2 and ISO 27001, without all the usual hassle. It helps us stay audit-ready year-round by tracking our security controls automatically. It’s also great for spotting and fixing any issues early, which keeps our security on point and saves us a ton of time.
Simplify compliance with a very complete and nice UX
What do you like best about the product?
How easy it is to monitor compliance, what's missing and what needs to be done
What do you dislike about the product?
Some controls are not super accurate and they may not meed external auditor's requirements
What problems is the product solving and how is that benefiting you?
Management of compliance with different checks and controls, specifically, GDPR and SOC2, Type II.
Automation helps with the minutia of HIPAA compliance
What do you like best about the product?
The ability of Vanta to connect to AWS, GITHUB, your HR system, Google workspace, etc. Trying to find violation manually is just a looser. No one has the concentration to review 100's of AWS settings for compliance, match SW vulnerabilities to code and libraries used. Additionally, even if you get to compliance, things are always changing and systems are growing. The ability to automatically check for issue day in and day out is the only way to handle HIPAA compliance
What do you dislike about the product?
It took me a while to understand the hieracy, connections, and navigation. The learning curve is initially steep, but gets easier. It does require consistent use to be good at the tool
What problems is the product solving and how is that benefiting you?
With a very small team, I can handle HIPAA compliance and be on my way to SOC2 compliance. Because I can assign tasks, I can manage where my team spends their time and I can see the progress and the ultimate goal
Best tool for automating security management
What do you like best about the product?
What I like about Vanta is how it takes care of most of my compliance work automatically. It handles security checks, manages policies, and sends alerts if there’s an issue, which keeps things simple and helps me stay compliant without much hassle.
What do you dislike about the product?
Vanta is great for compliance, it's very specialized, so if I need broader IT management features, I might still need to add other tools.
What problems is the product solving and how is that benefiting you?
Managing security policies used to feel overwhelming, but with Vanta, it's much easier. The platform provides templates and a simple step-by-step policy builder, which helps me create and manage compliance documents without the stress.
Vanta is very informative and great at guidance
What do you like best about the product?
automatic integration, draft policies, and organization
What do you dislike about the product?
Sometimes hard to find things. The links do help.
What problems is the product solving and how is that benefiting you?
assessment towards security certification.
Vanta- GRC automation
What do you like best about the product?
Centralized items and automation feature
What do you dislike about the product?
Not able to mark Control as N/A. The only option is deactivating , which is sometimes confusing
What problems is the product solving and how is that benefiting you?
We are having SOC2 Audit first time and we are leveraging Vanta for all our evidence collection and it realy helps speed up the process if you are going for any audit
First time Vanta user
What do you like best about the product?
Has a very logical and inline layout. Simple language with lots of help and tips.
What do you dislike about the product?
Not all menus and options are easy to find.
What problems is the product solving and how is that benefiting you?
We needed a tool to help us get SOCII compliant. Vanta has the tool, the integration and also the auditors available.
Best security & compliance tool on the market
What do you like best about the product?
great UI and a large number of available integrations
What do you dislike about the product?
Some of the functionalities are not available in the by default and have to be purchased additionally.
What problems is the product solving and how is that benefiting you?
Vanta is helping us to streamline our security & compliance efforts and automated a lot of our tasks, ultimately saving us money in the long term.
Streamlined compliance with API integrations for real-time monitoring
What is our primary use case?
How has it helped my organization?
We haven't seen any problem with that yet. That said, our company is a tiny 20-person company right now. We're probably six months ahead of where we should be in terms of doing compliance anyhow. We're not really at the critical masses yet, but we're trying to get a head start on it.
What is most valuable?
The fact it does the real-time integration with the APIs into our hosting service, which is AWS, can at times be painful - yet it's very effective. We get working pretty easily. They integrate into New Relic as a performance monitoring tool.
When there's a control in Vanta that says, 'I want to know if you are doing performance monitoring on a certain web server,' it goes and knows how to talk to New Relic and grab that information and make it part of your Vanta Viewport.
What needs improvement?
Every product has a lot of areas to improve. They have an AI generator for the system description for SOC 2, for example, however, the outline is a little sketchy. The system description has to have a little more insight or context about your business and why you're different. A true auditor will look at that closely. A lot of it is a little bit too automated and not really realistic. One area that they tout as being a real-time savings, we haven't found that to be a time savings yet.
For how long have I used the solution?
I've been using Vanta for about a year and a half.
What do I think about the stability of the solution?
I haven't seen a fail yet. But I am only using the tool about ten hours a week, and I'm a contractor as well, so I'm not working at this every day. But every time I seem to need it, it works.
What do I think about the scalability of the solution?
We haven't seen any problem with that yet. Our company is a tiny twenty-person company right now. We're probably six months ahead of where we should be in terms of doing compliance anyhow. We're not really at the critical masses yet, but we're trying to get a head start on it.
How are customer service and support?
I've had experience with both tech support as well as with their customer success. They're interchangeable at some point, at least for our size business. I would give them at least eight out of ten. They've been responsive, which is the most important thing. They seem to come back, and they give you good answers, and they give you good options to pursue what you're trying to do.
How would you rate customer service and support?
Positive
How was the initial setup?
It's a fairly large learning curve to get going. Not impossibly so. Once you get familiar with the system and where things are located, then you can work around it reasonably well. It's more tolerant as you get to know the product a little more. Initially, they're not very clear about the differences between the need for evidence, so-called evidence, and what would be automated.
What was our ROI?
We're just not at scale to even evaluate that. And even if you could, it's hard to evaluate something like, okay, this company is running in a compliant way versus they're cutting corners. It's hard to attach a value to that.
What's my experience with pricing, setup cost, and licensing?
Seems reasonable. We just renewed. I don't have a lot of experience in this space, but this is the first generation of automation products for purposes of compliance. There are a group of different companies out there, like Drata. They all seem to be similarly priced.
What other advice do I have?
They've done a good job, actually. I can't tell if they're a leader or not. All I know is that it gets us that seems to be constructive right now. We're not investing that much money.
I'd rate the solution eight out of ten.
showing 501 - 510