Vanta
VantaExternal reviews
2,318 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Effortless Certification with Seamless Integration
What do you like best about the product?
I like how seamless, modern, and clean the interface is. Vanta notifies me of any changes, so I don't have to guess, which is nice because I can see when something needs my attention. It gives me a good overview of where the company stands in its efforts to achieve certification. The initial setup with Vanta was quite easy, as we just linked all of our integrations and it was quite seamless.
What do you dislike about the product?
Just some of the integrations are sometimes unreliable. So if you make a change in Google Cloud, for example, it might not always reflect right away in Vanta even if you update.
What problems is the product solving and how is that benefiting you?
Vanta makes linking with all our services clear and easy, guiding us in achieving security certifications effortlessly. It provides a seamless interface that notifies me of changes, offering a good overview of our certification efforts.
Streamlined Compliance with Minor Integration Challenges
What do you like best about the product?
I like the overview Vanta provides, especially the fact that it monitors compliance all the time. This is really helpful for reporting to the boards as a quick snapshot without getting into too much detail. The way it handles policy reapproval and conducts our security awareness training is great because I basically don’t have to chase anyone. It's nice to have a short but useful video for those who want to see it, ensuring that baseline compliance for all staff is taken care of without wasting my time. We use the Trust Center, which is really good for getting sales prospects up to speed and giving us a professional kind of front door for security. It also reduces my workload since I have to answer fewer questions because people can get the documents themselves. Having Trust Center access approval integrated with Slack is really useful for our globally distributed team as it allows someone on the sales team to quickly approve access in Slack rather than waiting for me.
What do you dislike about the product?
We don't use a lot of the add-ons in Vanta, like the Vanta AI agents, because we have another product for security questionnaire automation (SecurityPal). When we started, the risk and vendor management systems were underpowered. They've since relaunched as add-ons, but they're probably a bit out of our price range. We handle this in Notion databases where we have full control over metadata and filtering. Vanta's integrations with our hosting provider Heroku are not great (probably due to limitations of the Heroku API), so we have to do a lot manually in that area.
What problems is the product solving and how is that benefiting you?
Vanta helps keep compliance activities on track for our distributed team with automated checks and custom documents. It streamlines monitoring compliance, aids in reporting, facilitates policy reapproval, conducts security awareness training, and integrates with Slack for trust center access, reducing my workload significantly.
Easy SOC2 & GDPR Compliance That Strengthens Security
What do you like best about the product?
We use it for SOC2 and GDPR compliance. It is easy to use and has helped us a lot with how we are doing things.
We feel that after using it our infrastructure and processes are more secure.
We feel that after using it our infrastructure and processes are more secure.
What do you dislike about the product?
We have not found anything in the year we have used it that has caused any issues.
What problems is the product solving and how is that benefiting you?
We use it to get and maintain our compliance for SOC2 and GDPR.
We tried doing the work manually, it was not working. Vanta was very clear on what needed to be done and has specific/clear steps to complete andy test and templates for the policies and documents
We tried doing the work manually, it was not working. Vanta was very clear on what needed to be done and has specific/clear steps to complete andy test and templates for the policies and documents
Streamlined SOC 2 Compliance, Easy to Use
What do you like best about the product?
I like how Vanta keeps us organized with really clear action items and allows us to collaborate among teammates on complex and long timelines for projects involving many people. It's really the backbone for everything we do, ensuring that we stay compliant and our policies are up to date. Also, the initial setup was incredibly easy, very much plug and play.
What do you dislike about the product?
It's on the higher end of the market price wise. Functionally it's great, but sometimes it's a little unclear which collaborator should take which task, you can get a little bit of notification overload for your collaborators vs folks who are living out of Vanta for SOC 2
What problems is the product solving and how is that benefiting you?
I use Vanta to keep organized with files and compliance, providing clear action items. It supports collaboration on complex projects, essential for SOC 2 compliance. We switched from task managers as it was hard to organize without Vanta’s specialized functions.
Simplifies Compliance for Small Teams
What do you like best about the product?
I like that Vanta is really easy to use. The UI makes a lot of sense, and everything just works, making it incredibly easy for our small team to manage things required for SOC 2 audits. Vanta gives us a checklist and the steps needed to achieve compliance, and I particularly like how it provides the Terraform code for infrastructure changes, making compliance much easier. The initial setup was incredibly easy, just involved receiving an email and signing in. Overall, it's really helpful for ensuring that things like hard drive encryption and screen lock are set up, making our work much simpler.
What do you dislike about the product?
One thing that's annoying is that almost every day, new vulnerabilities pop up that are not fixable, and Vanta still flags them. We have to manually click and acknowledge them when a fix is available, which could be made easier with an automatic triage feature. Also, when we run the job to check for vulnerabilities, it can take a long time without proper feedback on the progress. Sometimes it feels like we click the button and have to check back hours later, which isn't a great user experience if we're trying to get quick feedback on the state of our vulnerabilities.
What problems is the product solving and how is that benefiting you?
Vanta makes it incredibly easy for our small team to manage the SOC 2 audit process, providing a checklist and steps to follow. It offers Terraform code for compliance changes, drastically reducing the time and effort needed, which would be overwhelming otherwise.
Streamlined GRC Control with Effortless Automation
What do you like best about the product?
I like the automation in accessing clients' systems and gathering evidence because it makes my job easier through quicker harnessing of evidence. The initial setup of Vanta was straightforward.
What do you dislike about the product?
Nothing at the moment
What problems is the product solving and how is that benefiting you?
I use Vanta for automated evidence gathering, which makes my job easier by quickly accessing clients' systems and evidence.
Streamlined Compliance, Needs Audit View Improvements
What do you like best about the product?
I use Vanta for compliance automation and find it extremely useful for compliance management. I appreciate the 'single pane of glass' to manage compliance requirements and audits. I also like the security awareness training, policy automation, and both automated and manual tests to ensure compliance is met. Integrating some third-party platforms into Vanta to evaluate access levels and security is another feature I find useful. The initial setup of Vanta was easy.
What do you dislike about the product?
The 'audit view' experience needs some work. Some tests or reports are not available to the auditors that should be. Periodically, the audit team would let us know they did not have access to the results of an automated test. One example is the access reviews completed test, which included the results of Vanta's automated access review process, was allegedly not accessible to the auditors in the platform. We had to send them the .csv output of the access review test results manually.
What problems is the product solving and how is that benefiting you?
Vanta simplifies compliance management with a 'one pane of glass' for managing requirements and audits, offers security awareness training, and automates policy checks and tests for compliance.
Streamlined SOC 2 Compliance with Robust Integrations
What do you like best about the product?
I like Vanta's UX, the idea of a centralized platform, and the integrations, especially the one with our cloud provider GCP. The integrations save time because they put all related checks in one place, so I don't have to collect information outside Vanta through PDFs, screenshots, etc. It automates all the required SOC2 tests and gives a holistic view of the certification status, making it easier to know when we are ready to get audited.
What do you dislike about the product?
Some integrations with Vanta are not fully baked and need more work. For example, with the Kandji integration, there were some tests that were never fixed on the Vanta side, even though they were resolved on Kandji.
What problems is the product solving and how is that benefiting you?
Vanta makes getting all the paperwork and tests ready on one platform, automates all required SOC2 tests, and provides a holistic view of our certification status. It makes it easier to know where we are and when we're ready for an audit.
Automated Tests & Compliance Tracking That Save Us Time
What do you like best about the product?
The automated features are a time-saver! My favourite ones are the automated tests (with integrations), policy acceptance, and tracking to compliance.
What do you dislike about the product?
Some things change without advance notice (or at least I don't see any notifications that change are happening).
What problems is the product solving and how is that benefiting you?
The biggest problem this solves for me is saving time compared with using manual spreadsheets and other documents that are stored in different places and are hard to track. Having an all-in-one repository also helps me keep all of my documentation organized and easy to find in one place.
Streamlined SOC2 Management, Confusing UI
What do you like best about the product?
I like that Vanta has a way to show third parties our progress towards SOC2. Having the ability to share a link with our partners is very valuable. I also like how Vanta can assign people to certain tasks, especially as people offboard. Additionally, the initial setup was very easy.
What do you dislike about the product?
I find the Vanta UI can be quite confusing to navigate. It's hard to get people set up who have not been familiar with the platform. If the UI was scoped to just what a person owns (non-admins), it would be very helpful.
What problems is the product solving and how is that benefiting you?
Vanta helps manage our SOC2 audit by organizing the entire policy set and testing. It also lets us share progress with third parties and assign tasks effectively, especially useful during offboarding.
showing 71 - 80