External reviews
External reviews are not included in the AWS star rating for the product.
Great framework for SOC-2 beginners and for keeping the ball rolling
What do you like best about the product?
- Huge inventory of templates, pre-defined policies, and guidelines on how to prepare for an audit
- Simple and straightforward sales & support process (AE -> Implementation Manager -> Success Manager)
- Clean UI, no errors
- Live chat and support are responsive and accurate
- There were some minor issues with the Vanta agent, but I am adding it as "pro" because they resolved it extremely fast and very diligently
- Simple and straightforward sales & support process (AE -> Implementation Manager -> Success Manager)
- Clean UI, no errors
- Live chat and support are responsive and accurate
- There were some minor issues with the Vanta agent, but I am adding it as "pro" because they resolved it extremely fast and very diligently
What do you dislike about the product?
- It's pricey, and some aspects e.g. the Trust Center feel like a feature they don't really charge for but use to sweeten the deal by throwing it on top "for free"
- Would be great to be able to click on e.g. HIPAA and get a more in-depth preview beyond just "You are x% compliant"
- Would be great to be able to click on e.g. HIPAA and get a more in-depth preview beyond just "You are x% compliant"
What problems is the product solving and how is that benefiting you?
Vanta is great for businesses looking to get their SOC-2 certification and who are genuinely interested in setting up compliant long-term internal processes for development, sales, marketing and operations.
- Leave a Comment |
- Mark review as helpful
Best Support ever. Integrations are coming as new services become popular.
What do you like best about the product?
Streamlined process. The Vanta software agent gives me more access to review security vulnerabilities on my users' desktops than anything else I have used before. The admin interface is powerful but easy to navigate.
What do you dislike about the product?
Some difficulty with people working in China and Russia because of those countries' security measures against foreign companies. I understand this is not their fault; short of opening an office in those countries, there is no way to solve this issue. Some more difficulties in Vanta clients with Linux-based laptops, this would be great to be remediated, since we have an entire lab based on Linux.
What problems is the product solving and how is that benefiting you?
Preparing and helping with SOC2 assessment. They provide all document templates and pre-review methodology, and software that I might need during the actual test.
Vanta Client collects data on our behalf with really good efficiency, and the documentation templates needed very little additional effort to reflect our company's security stance. We used a different system, and switching over would have required writing up some 40 documents, so the templates were really a big help.
Vanta Client collects data on our behalf with really good efficiency, and the documentation templates needed very little additional effort to reflect our company's security stance. We used a different system, and switching over would have required writing up some 40 documents, so the templates were really a big help.
One-Stop Compliance Dashboard
What do you like best about the product?
I can see a list of the failing tests as well as time data showing when they are failing. The dashboard easily tracks misconfigured infrastructure locally and in the cloud.
What do you dislike about the product?
Getting point-in-time test results requires opening a support ticket but it was easy to get the support I needed.
What problems is the product solving and how is that benefiting you?
I didn't set up all the Vanata controls myself, another team member did, but it frees my brain space to not worry about compliance. It can send email and/or slack alerts if there's a problem.
Time/Money/Sanity-Saver For GRC Mgmt
What do you like best about the product?
Vanta allows one to consolidate the very resource/time-intensive process of GRC. The more obligations you have the more ROI you get - I estimate ours at breakeven when we finish a third requirement in late 2023... so it's paying for itself.
The integrations into ~ 70 platforms to automate the collection/analysis of metadata.
Being able to assign tasks & get reporting on them. No more mistakes via multiple Excel files.
The different levels of reporting on dashboards to export of whatever you need to see in other formats.
The integrations into ~ 70 platforms to automate the collection/analysis of metadata.
Being able to assign tasks & get reporting on them. No more mistakes via multiple Excel files.
The different levels of reporting on dashboards to export of whatever you need to see in other formats.
What do you dislike about the product?
It is missing a few features that would make one more reliant on using it. Example - for Documents there needs to be a third option (In Process, with ability to tack on notes).
If you have a doc that is being written up, 99% completed & almost ready to post you can't. Also ability to add notes can help flag something).
If you have a doc that is being written up, 99% completed & almost ready to post you can't. Also ability to add notes can help flag something).
What problems is the product solving and how is that benefiting you?
Managing multiple compliance/privacy obligations - without this you're talking about hundreds - maybe a couple of thousand - man-hours required. By humans. Who already have a day job.
Great experience
What do you like best about the product?
Vanta makes compliance an easy to follow todo list, tasks are easy to assign and automated integrations ensure that we know what to fix and when.
We haven't used any competitors to compare Vanta to, but Vanta works well for our use case.
We haven't used any competitors to compare Vanta to, but Vanta works well for our use case.
What do you dislike about the product?
The offboarding process is a bit convoluted. For example, deactivating a user in Google Workspace takes time to propagate into Vanta. Offboarding a user also cannot be assigned to someone to handle. There is also no current way to define custom accounts in the list of offboarding tasks (for example, an admin portal which is not connected to Google Workspace).
What problems is the product solving and how is that benefiting you?
Automating compliance, providing support for finding partners for audits/pentests all reduce the workload. Maintaining Vanta takes less than 30 minutes a week compared to manual solutions which take hours.
The platform is user-friendly and it was easy for us to understand how to use it
What do you like best about the product?
It was easy for us to understand the tasks necessary to achieve the certifications. The templates of documents and policies are the best part of the platform, saving us hours of research and work.
What do you dislike about the product?
Improve our integration with Jira and the assignment of policies and documents. Sometimes it can be a bit tedious to keep track of tasks. Not all documents and policies have a template, it would be good to add the missing ones.
What problems is the product solving and how is that benefiting you?
Vanta helps us get all the necessary certifications to maintain our platform with the highest security standards. The support is very good and they always quickly answer our questions.
Compliance through Vanta
What do you like best about the product?
Serviced focused
From the beginning, the sales team, customer success management team, and compliance experts have been amazing! Vanta associates have been there for anything we need to be successful.
The company and I are incredibly excited about the partnership!
From the beginning, the sales team, customer success management team, and compliance experts have been amazing! Vanta associates have been there for anything we need to be successful.
The company and I are incredibly excited about the partnership!
What do you dislike about the product?
I have not found anything I dislike. We can easily upload policies, conduct audits and assign remediations, have 1-1 chat with compliance experts, & automate compliance-related tasks.
What problems is the product solving and how is that benefiting you?
I had set up something by accident, and they were able to figure out the issue and provide me with remediation steps right away! Our CSM was OOO, and he still replied to my email! Great team!
Soc2 process
What do you like best about the product?
The people working in Vanta is very helpful. They've answered all my doubts regarding policies to initiate the process, and I think the content in their documentation is very straightforward
What do you dislike about the product?
At the moment, I think almost everything has been a smooth process. One thing I dislike was that you have to download Vanta app in your computer even if your'e not working directly with the organization doing the process.
What problems is the product solving and how is that benefiting you?
To have an good start and continuation for our organization, we are needing a Soc2 agent to implement new projects and changes, Vanta is helping us with this process.
One of the biggest time saving tools we have for compliance
What do you like best about the product?
Vanta's ability to integrate with third-party tools to monitor our compliance status saves a great deal of time every year during the audit process. Additionally, the monitoring and alerting capabilities gives our team the necessary insights to ensure all areas of the system remain compliant.
What do you dislike about the product?
The 'Risk Assessment' section in Vanta can be a little tedious. I feel there is room for improvement with the User Interface for this section to reduce the number of clicks.
What problems is the product solving and how is that benefiting you?
We are using Vanta for SOC2, Type II Compliance. The tool allows us to continually monitor our compliance status as well as assign tasks to prepare the necessary information and evidence for auditors.
Fantastic product, I wouldn't have been able to manage ISO 27001 without it
What do you like best about the product?
The online document editor is very well constructed, the suite of policy templates are well written, the automated tests are great and rather than just giving a fail they provide you with instructions on how to remedy your issue.
What do you dislike about the product?
The risk register does not let you add custom pieces of evidence, instead you have to make reference to documents on Asana or Google Workspace as evidence. The policy templates all have an American focus, it would not be too much work to update them to include the relevant legislation for the country using the app.
What problems is the product solving and how is that benefiting you?
The application is helping our very small startup achieve and maintain ISO 27001 cybersecurity compliance. This is difficult to achieve as a small company with no dedicated cybersecurity personnel.
showing 611 - 620