External reviews
External reviews are not included in the AWS star rating for the product.
Compliance Controls Require Automation
What do you like best about the product?
Vanta automates compliance across disparate applications and collaboration tools to ensure that organizations pass their compliance audits. The interface is fairly simple to use both for organizations and for their auditors.
What do you dislike about the product?
Vanta is priced somewhat higher than some of its competitors and integration can be challenging for an organization's home grown proprietary applications and tools.
What problems is the product solving and how is that benefiting you?
Within an organization using numerous applications and collaboration tools, Vanta is providing a one stop solution to provide governance and meet audit requirements.
- Leave a Comment |
- Mark review as helpful
Use Vanta for SOC 2 and HIPAA Compliance
What do you like best about the product?
Vanta's software makes monitoring and tracking controls for IT easy, seamless, and collaborative. They have excellent support too!
What do you dislike about the product?
Nothing. They have monthly updates to their software and are always trying to improve.
What problems is the product solving and how is that benefiting you?
Our business can quickly monitor and communicate how well we handle PHI and other protected data.
Professional.
What do you like best about the product?
Vanta application. Support. Application intregration option.
What do you dislike about the product?
There is nothing i can talk about as negative in vanta.
What problems is the product solving and how is that benefiting you?
Vanta is saving time. by providing access to it's application to track compliances.
Incredibly supportive company to work with.
What do you like best about the product?
The support is genuinely fantastic. Often times when something spans a few different cloud services, they're able to grasp the full nature of how those services interact with each other and subsequently how the services work with their automated monitors.
I have used other audit platforms, including Amazon's own FTR check, for example. Vanta's Refresh Test allows for that immediate feedback loop that other audit platforms don't provide. Because of that, I don't have to wait for the nightly refresh to hope that I fixed my problem in a compliant manner. Awesome product
I have used other audit platforms, including Amazon's own FTR check, for example. Vanta's Refresh Test allows for that immediate feedback loop that other audit platforms don't provide. Because of that, I don't have to wait for the nightly refresh to hope that I fixed my problem in a compliant manner. Awesome product
What do you dislike about the product?
This is more of a preferential thing, but the refresh of the frontend to remove the status of the monitors in that colorful graph was actually super helpful to visually see our status. Please bring that back.
I think Vanta should release a suite of infrastructure-as-code components. For example, we've written a few internal Pulumi ComponentResources, one called CompliantBucket, for example. That bucket sets all the necessary bucket tagging and public access blocks that SOC2 requires. I know that when I provision new infrastructure with our components, I will be provisioning in a compliant manner. This could be a massive value add if they worked directly with these IaC companies like Pulumi and Terraform to onboard companies to SOC2 near immediately. We also provision code repositories this way for example. Instead of the manual steps of
- create repo
- add description to repo
- add branch policies to repo
- add owner to repo in the Vanta platform
we just created IaC components that do this for us and it saves us a lot of time. If I had to setup all components the compliant way all the time, I might be less inclined to use Vanta and attempt the SOC2 audit.
I think Vanta should release a suite of infrastructure-as-code components. For example, we've written a few internal Pulumi ComponentResources, one called CompliantBucket, for example. That bucket sets all the necessary bucket tagging and public access blocks that SOC2 requires. I know that when I provision new infrastructure with our components, I will be provisioning in a compliant manner. This could be a massive value add if they worked directly with these IaC companies like Pulumi and Terraform to onboard companies to SOC2 near immediately. We also provision code repositories this way for example. Instead of the manual steps of
- create repo
- add description to repo
- add branch policies to repo
- add owner to repo in the Vanta platform
we just created IaC components that do this for us and it saves us a lot of time. If I had to setup all components the compliant way all the time, I might be less inclined to use Vanta and attempt the SOC2 audit.
What problems is the product solving and how is that benefiting you?
Doing this all by hand and reading through all the requirements would be a nightmare. Having that immediate feedback is great.
I think having policy as widgets is incredibly effective to remove the confusion around policy documents, which often are just scanned over and not necessarily upheld.
I think having policy as widgets is incredibly effective to remove the confusion around policy documents, which often are just scanned over and not necessarily upheld.
Valuable, Time-Saving, and Organized
What do you like best about the product?
I find Vanta incredibly valuable and appreciate the time and manual tracking it takes off of my plate. Tracking security trainings and on/off-boarding requirements can really drag down my time to do broader scope work with a wider impact. I'm grateful to have a tool I can trust that does all those very important things for me that take lots of time to do manually.
What do you dislike about the product?
There are a couple integrations that don't currently exist, but these aren't of high importance and I know they're on the roadmap, so it's also not a huge issue. For example, our HRIS system wasn't on the list of integrations at first, but now it is!
What problems is the product solving and how is that benefiting you?
It's nearly impossible to track employee laptop settings (think screen saver, encryption, etc) in a remote setting without a tool like Vanta. We also needed one place to track all of our security trainings and the Vanta onboarding page made that so simple!
A great way to implement SOC2 Compliance
What do you like best about the product?
We had a great implementation team to lead us through the process. The software made collecting data and analyzing it for compliance easy. Once we had the basics set up, we were able to follow a friendly checklist that progressed us toward compliance. When we were implemented, we were transferred to a maintenance and support team that is familiar with our business, responsive and friendly. They proactively reach out occasionally with new suggestions... though not too often.
What do you dislike about the product?
Nothing really comes to mind. I'd love to see more integrations with other payroll platforms and other services and systems but I believe Vanta is continuing to release those.
What problems is the product solving and how is that benefiting you?
Our customers want to know we are serious about protecting their data. Engaging with Vanta both shows that we are and really makes us better. For us, we may eventually go for a SOC2 certification. Vanta's got us almost ready for that now.
Vanta has made a cumbersome process much easier. Would recommend!
What do you like best about the product?
Brenden was an incredible resource as we got ramped up on SOC II compliance as a company. I would highly recommend him and his work, and with his help I got ramped up on Vanta very quickly.
What do you dislike about the product?
There were a few things I'd improve about Vanta.
The first is that SOC II requires SOC II reports from all of our vendors, and most of them are large companies with cumbersome processes to access their SOC II reports. Vanta should make those available by default. Even better would be associating the relevant SOC II report automatically with each integration when the initial connection is made.
The second is the detection that some of the integrations have. For Datadog, for example, we have lots of metrics and monitors in place that I don't think Vanta is automatically detecting, which makes it cumbersome to figure out which ones we already have and which ones we need to add.
The first is that SOC II requires SOC II reports from all of our vendors, and most of them are large companies with cumbersome processes to access their SOC II reports. Vanta should make those available by default. Even better would be associating the relevant SOC II report automatically with each integration when the initial connection is made.
The second is the detection that some of the integrations have. For Datadog, for example, we have lots of metrics and monitors in place that I don't think Vanta is automatically detecting, which makes it cumbersome to figure out which ones we already have and which ones we need to add.
What problems is the product solving and how is that benefiting you?
We need SOC II compliance to work with large companies and sign enterprise contracts, so Vanta is making it as painless as possible! We will also likely use Vanta in the future for other certifications as needed.
Easy to navigate & helps keep us on track
What do you like best about the product?
Have used Vanta for about 6 months now and really appreciate the following features:
1) The Slack integration!
2) Summaries of items that require attention and items that are close to being overdue
3) The way to organize items and ensure they're getting worked appropriately
4) Reminders in email
5) Examples and descriptions of what is needed!
Have never used a system like this before, and I'm so grateful for it!
1) The Slack integration!
2) Summaries of items that require attention and items that are close to being overdue
3) The way to organize items and ensure they're getting worked appropriately
4) Reminders in email
5) Examples and descriptions of what is needed!
Have never used a system like this before, and I'm so grateful for it!
What do you dislike about the product?
It's not a "dislike", rather a suggestion. The reminders are helpful, and at the same time, we had to institute some frequent stand-ups to ensure that we weren't ignoring the reminders. Suggestion: In the summaries in Slack, there's verbiage about when something is approaching SLA deadline but would be good to change the font or color or give some other indication or alert that will call attention.
What problems is the product solving and how is that benefiting you?
We're benefiting from Vanta by using the platform to house all of our compliance-related items and readying ourselves for an audit. The reminders and way it helps us organize and apply deadlines has been really helpful.
We were set up for success from the start with excellent onboarding
What do you like best about the product?
Vanta fits all of our compliance needs into a single product that's easy to use. We can manage everything compliance-related in one place, and their customer success team has been great to work with during onboarding. Any questions we have about the compliance process are answered in short order.
What do you dislike about the product?
I don't see any major downsides to using Vanta. It would have been difficult to understand everything in the app without some interaction with the customer success team, but that speaks more to the complexities of compliance than any particular issue with the app experience.
What problems is the product solving and how is that benefiting you?
Historically speaking, reaching SOC 2 compliance is time-consuming and expensive. Vanta simplifies the entire process by automating many compliance requirements and integrating with various software services.
Its a one stop shop for all Audit and compliance needs.
What do you like best about the product?
The ease of using it and the automation.
What do you dislike about the product?
I am still implementing and havent found anything to complain about.
What problems is the product solving and how is that benefiting you?
Vanta helps me automate my daily compliance needs, helps me with internal audit and also makes sure my organization is compliant to the standards.
showing 601 - 610