Vanta
VantaExternal reviews
2,339 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Streamlining Security Certifications with Some Growing Pains
What do you like best about the product?
Vanta offers excellent ease of use and management for all compliance projects, which is a significant improvement over previous methods that were complicated and difficult to navigate. The platform streamlines what was once a cumbersome process, making compliance more accessible even for those without specialized expertise.
Another standout feature is Vanta's robust control matching and automatic checks against services like Gmail and AWS. This automation significantly reduces manual verification work and provides more reliable oversight of your compliance posture across your technology stack.
Another standout feature is Vanta's robust control matching and automatic checks against services like Gmail and AWS. This automation significantly reduces manual verification work and provides more reliable oversight of your compliance posture across your technology stack.
What do you dislike about the product?
he vulnerability management functionality is challenging to use effectively. Specifically, there are difficulties in managing exclusions and tracking remediation efforts. The system doesn't provide intuitive ways to prioritize vulnerabilities, which can make security management more time-consuming than necessary.
What problems is the product solving and how is that benefiting you?
Evidence Collection Automation: Before Vanta, gathering evidence for compliance audits was a manual, labor-intensive process requiring coordination across multiple teams. Vanta automatically collects and organizes evidence from connected systems (AWS, Gmail, etc.), reducing what used to take weeks down to hours or days.
Continuous Compliance Monitoring: Rather than treating compliance as a periodic "sprint" before audits, Vanta provides real-time visibility into compliance status. This shift from point-in-time to continuous monitoring means we catch issues early before they become audit findings.
Control Implementation Guidance: Vanta demystifies complex compliance frameworks by translating abstract requirements into concrete, actionable steps. Their guided approach helps implement controls correctly the first time, eliminating costly rework.
Cross-Framework Efficiency: Managing multiple compliance frameworks (SOC 2, ISO 27001, etc.) used to mean duplicating effort across overlapping controls. Vanta maps these relationships, allowing us to satisfy multiple requirements with single implementations.
Continuous Compliance Monitoring: Rather than treating compliance as a periodic "sprint" before audits, Vanta provides real-time visibility into compliance status. This shift from point-in-time to continuous monitoring means we catch issues early before they become audit findings.
Control Implementation Guidance: Vanta demystifies complex compliance frameworks by translating abstract requirements into concrete, actionable steps. Their guided approach helps implement controls correctly the first time, eliminating costly rework.
Cross-Framework Efficiency: Managing multiple compliance frameworks (SOC 2, ISO 27001, etc.) used to mean duplicating effort across overlapping controls. Vanta maps these relationships, allowing us to satisfy multiple requirements with single implementations.
Useful but don't always trust it
What do you like best about the product?
Contains a lot of links between information.
What do you dislike about the product?
Automation are not really efficients, they can guide you to errors
What problems is the product solving and how is that benefiting you?
Risk assessment is done through Vanta
Managing our policies is easier thanks to Vanta
Managing our policies is easier thanks to Vanta
Great tool but slow
What do you like best about the product?
What I like best about Vanta is how it automates much of the compliance process, especially for frameworks like SOC 2, ISO 27001, and HIPAA. It continuously monitors systems, alerts you to issues in real time, and integrates with tools like AWS, GitHub, and Google Workspace, which saves a ton of manual work. It also makes working with auditors much smoother by centralizing evidence collection and documentation.
What do you dislike about the product?
One downside of Vanta is that some of the integrations can be a bit rigid or limited, especially when dealing with more complex or custom environments. There can also be a bit of a learning curve at first, particularly if your team is new to compliance workflows. And while automation is a big strength, it still requires some manual oversight to ensure everything stays aligned with real-world processes. Anoth downside is that the web application is slow.
What problems is the product solving and how is that benefiting you?
Vanta is solving the problem of how time consuming and complex it can be to achieve and maintain security compliance. Before using it, gathering evidence for audits, tracking policies, and ensuring ongoing security controls were all manual and scattered. Vanta centralizes and automates those tasks, which saves a significant amount of time and reduces the risk of missing something important. It also helps us stay audit ready year round, rather than scrambling at the last minute.
Good for SOC 2 compliance
What do you like best about the product?
- Automates SOC 2 frameworks
- Integrates with Google Workspace
- Integrates with Google Workspace
What do you dislike about the product?
- Needing to upload updates documents/policies
- Manually fixing errors or checking off completed tasks
- Manually fixing errors or checking off completed tasks
What problems is the product solving and how is that benefiting you?
- Data collection in one platform and once source of truth
- Showing current and potential enterprise clients that the company has a compliance framework and standard
- Showing current and potential enterprise clients that the company has a compliance framework and standard
5-10min/day to get our security task done
What do you like best about the product?
all on line, all things can be done by click
What do you dislike about the product?
more speed, more time saved, 5-10min/day now, but if spend less in waiting for task status check, we can get it done in 3mins
What problems is the product solving and how is that benefiting you?
one platform to get HIPPA/SOC and other frameworks done
Awesome
What do you like best about the product?
Portal is easy to use, CSM's are responsive and friendly. There is even a support portal for customer resources as well for learning and FAQ's which is a fantastic resource. We use it very often so It's nice that the actually system is responsive. Intergrations were great with all of our existing applications which was nice as well such as GitHub, DataDog and Okta.
What do you dislike about the product?
Make dark mode! Haha but besides that I would say I do wish there was a more functional system for notifications so that everyone doesn't have to turn it off individually for themselves and can be done from an admin user instead.
What problems is the product solving and how is that benefiting you?
Security and Risk Compliance
Useful tooling to track our SOC2 programme and a trust site
What do you like best about the product?
Intuitive interface to help track documents associated with our programme, as well as automated checks across a number of platforms to help with the compliance process.
What do you dislike about the product?
I'd prefer more flexibility in the pricing model to allow for trialling multiple programmes and standards.
Some inflexibility in the technical checks and integrations which limits their usefulness in real world situations.
Some inflexibility in the technical checks and integrations which limits their usefulness in real world situations.
What problems is the product solving and how is that benefiting you?
Providing structure around our SOC2 programme.
Taking the pain out of achieving compliance and remaining compliant
What do you like best about the product?
Being able to track remaining tasks and activities required prior to an audit and then facilitating the audit process and communication was super helpful in getting us through the ISO27001 and SOC2 2 processes.
What do you dislike about the product?
From a UI perspective I’d like to be able to ‘break out’ the rhs dialogue box (for editing controls, tasks, risks) and make it bigger/full screen. It’s very constraining. Would also be good to be able to see and track all tasks in one location.
What problems is the product solving and how is that benefiting you?
Managing compliance activities for SOC2 and ISO27002
Good overall experience
What do you like best about the product?
Vanta is a fairly intuitive and comprehensive platform that addresses our security needs.
What do you dislike about the product?
I would like to see more AI integration into all the tools.
What problems is the product solving and how is that benefiting you?
Vanta is simplifying the compliance process of rounding up security documents.
Nice experience
What do you like best about the product?
They help us achieve our security goals and standards
What do you dislike about the product?
Nothing in particular. Maybe could integrate with slack to the security processes
What problems is the product solving and how is that benefiting you?
Making polices
showing 561 - 570