Vanta
VantaExternal reviews
2,111 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Top-Tier Automated Compliance Tracking
What do you like best about the product?
Vanta is continually growing to provide its clients with top-tier compliance tracking. While some pieces are manually managed, that number dwindles as Vanta continues expanding on its extensive automated services. Vanta's support is outstanding. Vanta also makes understanding compliance targets and requirements easy.
What do you dislike about the product?
The frequent changes Vanta undergoes as it continues to improve its platform can be mildly disruptive, but the payoff is always worth it. They integrate with some of the key components of our software stack. Still, we'd like to see more regarding provisioning/de-provisioning, vendor management/security assessment, and MDMs.
What problems is the product solving and how is that benefiting you?
Vanta has been great to work with and continues to listen to feedback and implement fixes wherever possible. They make the audit process easy and preparation ahead of the audit simple.
Great Implementation and Tools!
What do you like best about the product?
The process, reminders, tools and templates! It works well together as project management with execution.
What do you dislike about the product?
It can be a bit overwhelming with info. Need to make sure our SME's in our company spend the time to use Vanta.
What problems is the product solving and how is that benefiting you?
SOC II attestation for security and fraud mitigation
Vanta Review
What do you like best about the product?
The best thing about Vanta is that they have figured out how to organize the entire SOC2 process seamlessly with a set of instructions and steps to perform. This makes the lives of the admin, DevOps and the employees much easier as a manual with a group of steps to follow.
What do you dislike about the product?
Honestly, I don't think so there is anything to dislike about Vanta. The process of getting SOC2 compliant for our organization was pretty good with Vanta. The alerts, updates, support service was pretty efficient. So, overall, no complaints.
What problems is the product solving and how is that benefiting you?
Getting us SOC2 compliant. Organizing and acting as a middle man to what we need to do to get SOC2 compliant. Vanta being a dominant player in the cyber security space provides the value added to being an expert to guide the process.
First experience with HIPPA
What do you like best about the product?
I introduced a client to Vanta and now we are working through HIPPA compliance together. The platform is guiding our efforts, but it is more work than Vanta made it sound like. I wonder if some of the other services that actually help you meet compliance might have been a better choice for us. While I wish for more ease, Vanta is guiding us through a complicated landscape and I am confident that we will acheive compliance with their help.
What do you dislike about the product?
See above, but it just tells you what you need to fix with no support to fix it.
What problems is the product solving and how is that benefiting you?
See above, but we pursued Vanta to help us aceive HIPPA compliance.
Visionary product, making compliance look like 21st century
What do you like best about the product?
1) Vanta controls (tests), dashboards and alerts are very helpful to "keep us constantly complaint" instead of getting a workload spike when getting closer to an Audit. The Vanta platform gives us quick visibility on any deviations from our controls, so we can fix them on the spot (cheaper) instead of later.
2) The ownership on Alerts allows to split the monitoring of different areas across different people (Example: policies can be monitored by a different person than Infrastructure).
3) When it comes the time for an Audit, the heavy lifting for evidence collection is already done (see "constantly compliant" above), and the platform guides us precisely to any gaps, so they're easy to fix.
2) The ownership on Alerts allows to split the monitoring of different areas across different people (Example: policies can be monitored by a different person than Infrastructure).
3) When it comes the time for an Audit, the heavy lifting for evidence collection is already done (see "constantly compliant" above), and the platform guides us precisely to any gaps, so they're easy to fix.
What do you dislike about the product?
The support is responsive and solved 95% of our requests, however for one recurring issue in a Vanta Agent we have been dragging for a few months already.
What problems is the product solving and how is that benefiting you?
The ability to stay compliant and renew certifications like SOC2 or ISO27001 without a major effort across the team at Audit time.
Being a small company is not affordable to dedicate a team (or even an FTE) exclusively to compliance, hence the effort has to be shared across a few people with other main responsibilities. The clarity & simplicity and what needs to get done, is vital to get compliance ownership under control.
The ability to leverage automation and integration with multiple tools, makes Compliance feel more 21st century, as it removes manual effortin evidence collection (which makes Compliance feel 19th century at some companies).
Being a small company is not affordable to dedicate a team (or even an FTE) exclusively to compliance, hence the effort has to be shared across a few people with other main responsibilities. The clarity & simplicity and what needs to get done, is vital to get compliance ownership under control.
The ability to leverage automation and integration with multiple tools, makes Compliance feel more 21st century, as it removes manual effortin evidence collection (which makes Compliance feel 19th century at some companies).
A real accelerator for ISO 27001 certification
What do you like best about the product?
All the controls, policies and tests provided that helps us start our certification journey
What do you dislike about the product?
Sometimes difficult to find the items we look for.
What problems is the product solving and how is that benefiting you?
Vanta makes the certification process a lot easier and cheaper for small organization
Speeds up SOC 2 audit timeline dramatically
What do you like best about the product?
Vastly reduces the time to SOC 2 compliance & certification. Can delegate specific compliance tasks to junior employees for a high-leverage process.
What do you dislike about the product?
Needs clearer scoping and feedback loops between SOC 2 controls, available policy choices, and auditors' opinions
What problems is the product solving and how is that benefiting you?
Helping us stay in compliance with SOC2 audits continuously, without us needing to set up audit or compliance operations for it.
Got us our soc2 compliance
What do you like best about the product?
It is not invasive. It does what it says and nothing more. No cpu spikes or heavy ram usage
What do you dislike about the product?
The training videos are silly and slow to me
What problems is the product solving and how is that benefiting you?
Soc 2 compliance
Helps us with securing our systems
Helps us with securing our systems
Excellent Product for SOC-2 Compliance Needs
What do you like best about the product?
The Product is designed well for SOC2 compliance, though it supports other compliance aspects too. The software guides through the SOC2 process excellently. One does not need to know all the processes involved for SOC2 compliance, and a novice user too can understand it easily. Every step in the system for Process documentation, People On-Boarding, Risk Assessment documents, there is a straightforward guide. There are predefined template documents that one can use to complete the intuitive compliance documents.
What do you dislike about the product?
Some security compliances are mandatory, but there should be a place to customize them.
What problems is the product solving and how is that benefiting you?
For a Startup Company, Vanta has helped immensely to complete the SOC2 compliance in a short period quickly.
Recommendations to others considering the product:
Easy to use Product, Guides a novice to SOC2 compliance process
IT Manager review for Vanta
What do you like best about the product?
I like that integrating Vanta agent; it flags all my users' machines that are out of policy. For example, I know when a user adjusts their 5 min lock screen display or does not have Filevault encrypted. The agent is super helpful in making sure everyone is up to policy
What do you dislike about the product?
I don't particularly appreciate how the Vanta UI constantly updates without being informed. Almost every month I log into Vanta, a new feature is pushed and sometimes I am unable to find things. This is really bothersome. Also, the Vanta Agent does not auto update on some machines. Many times machines would get flagged even though they are still compliant. I have to tell users to remove and then install the agent again. I never know when these updates happen and it slows my work down a lot.
What problems is the product solving and how is that benefiting you?
I am solving a lot of issues with finding out what servers are close to missing SLA due to misconfigurations. I am also solving onboarding issues - Vanta for sure lets me know when a user has not downloaded the agent, accepted company policies, and have not completed security training. The onboard process for contractors has been helpful with using vanta as well! I was able to make sure contractors have their own checklist to complete.
showing 751 - 760