Vanta
VantaExternal reviews
1,973 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Beyond compliance: a cybersecurity companion
What do you like best about the product?
The integrations are really well done and game changing. In one place I can keep track of software vulnerabilities, onboarding and offboarding activities of staff, and implement a real continuous improvement process.
What do you dislike about the product?
Support for other languages (e.g., Italian) in policies would be very helpful
What problems is the product solving and how is that benefiting you?
Obtain ISO27001 and train employees and managers internally on cybersecurity and compliance issues
Streamline Compliance with a central hub for policies, tests and controls
What do you like best about the product?
Clarifies the requirements of a lot of important security standards, primarily ISO 27001 and SOC 2.
- Guidance available to gather the required evidence or steps to implement compliant practices.
- Guidance available to gather the required evidence or steps to implement compliant practices.
What do you dislike about the product?
Searching for specific policies and keywords could be clearer, it requires a degree of familiarity making it less useful for end users.
What problems is the product solving and how is that benefiting you?
Aligning the security and compliance requirements of ISO 27001 and SOC 2, making it clear which elements are shared and the specific items required to test and evidence compliance.
Vanta is Significantly Overpriced and have slimey sales practices
What do you like best about the product?
It gets the job done - no differentiation vs other SOC2 type 2 / HIPPA / GDPR providers
What do you dislike about the product?
It is very pricey - however, you should use secureframe / data as negotiating leverage. There is no differentiation in the products.
What problems is the product solving and how is that benefiting you?
The ability to say to clients we are SOC2 compliant
SOC2 is much easier than it used to be
What do you like best about the product?
Vanta basically pioneered the idea of making it possible for startups to get SOC2 compliance, by giving you an opinionated checklist and software to help you get through it. I appreciate the integrations and that they help you engage with your auditor and track your progress.
What do you dislike about the product?
To some extent it feels like just checking boxes rather than making sure you're actually set up to succeed, and it's easy to get "stuck". We wasted our first year because it turned out no customers really needed SOC2 from us. So only do this when you're ready to commit the time—it's still a lot of work even with Vanta.
What problems is the product solving and how is that benefiting you?
Monitoring our software to make sure all the settings are configured right; helping us engage with auditors.
Good. But not great.
What do you like best about the product?
I really like the automations and integrations. I do not need to work hard to get where I need to go.
What do you dislike about the product?
- If you are not using AWS and Github, the platform doesn't look like it was built for you. You will require large changes to default content. In particular the policies, where there is a helpful policy builder (the automation is excellent) but the content that acutally needs to be changed is the catering for AWS etc. Also the automation breaks down, because as soon as you need to edit the policy, you exit the helpful automation tool and then you are left to manually do things...
- There are 'help' sessions that I can book, and I booked one, only to realise that there are no support/help sessions that are in my timezone. 1am is pretty rough to go to one.
- There are 'help' sessions that I can book, and I booked one, only to realise that there are no support/help sessions that are in my timezone. 1am is pretty rough to go to one.
What problems is the product solving and how is that benefiting you?
Vanta is solving the manual management process and helping keep good habits to also meet compliance requirements.
Vanta takes the "over" out of "overwhelming" when it comes to SOC 2 compliance
What do you like best about the product?
It's a straightforward, simple, yet robust system for various compliance needs. I like that it clearly lays out the requirements, the tests, and highlights deficiencies in an automated fashion. Implementation is very straightforward and it's easy to connect most/all of your 3rd party systems for automated tests. Once you get through an initial implementation period (which is self-guided) you don't have to actually login and use the system every day--Vanta will send you notifications when tests fail or something is needed. Customer support is solid. They give you a dedicated account rep that can guide you through everything and point you in the right direction.
What do you dislike about the product?
Vanta is a bit nickle-and-dimey with their product. The base fees can be quite hefty and then they try to upsell you on additional modules to automate more of the process.
What problems is the product solving and how is that benefiting you?
We use Vanta for SOC 2 and PCI compliance. Without Vanta, we'd have to pay a consultant 5x what we pay Vanta for. That does mean that we have to put in some extra work ourselves to self-manage and keep on schedule, but it's worth the tradeoff. Vanta also has a number of partner CPA/audit firms to pair with their customers, yet you can still choose your own audit firm if desired. Ultimately, Vanta is guiding us through the process of becoming SOC 2 compliant and helping us understand the scope at the same time.
Vanta made compliance and security easier than I could have ever imagined.
What do you like best about the product?
The dashboard, ease of identifying and remediating issues, and their direct connections to all compliance, audit, and security vendors to create a complete ecosystem to work in. Setup was simple, their Client Success is always available nad responsive, and the integrations have been seamless. I strongly recommend Vanta to anyone handling digital compliance and security.
What do you dislike about the product?
Honestly, I have not had any experience that has been negative with the platform or their partner vendors.
What problems is the product solving and how is that benefiting you?
We have now obtained our GDPR Compliance, SOC II Type 1 and Type 2 certifications through Vanta. The ease of identifying issues, bringing our policies and procedures up to current standards and the confidence that we are maintaining our compliance on an ongoing basis has been critical to our growth and success.
The Vanta platform has been invaluable for our SOC2 compliance efforts
What do you like best about the product?
Vanta's ability to provide near realtime information regarding test failures or vulnerabilities makes it an extremely comprehensive tool. The questionnaires auto fill has saved countless hours where manually filling inquiries often took hours per month.
What do you dislike about the product?
Because of the comprehensive nature of the platform, its not always easy to navigate to the exact spot you need to address. To fix an issue can be done on th main vulnerability page while others required you to go somewhere else first.
What problems is the product solving and how is that benefiting you?
Vanta shines a light on issues related to SOC2 and helps us strengthen our security stance.
Vanta makes a difficult process (SOCII Type 2) easier to understand
What do you like best about the product?
Vanta aggregates all necessary controls, policies, documents, etc into a single platform. This in and of itself is helpful as we have a repository and tracker for all of our current SOCII needs & requirements. Vanta's Trust Center has helped us to display that we are in process and will eventually serve as our homepage to share with external partners when asked about compliance. We use Vanta every day as we prepare for our final audit process.
External integrations into our systems has been fairly simple each time we've needed to implement.
External integrations into our systems has been fairly simple each time we've needed to implement.
What do you dislike about the product?
Some of the controls, documents and policies are unclear. Assistance in understanding what is "in scope" vs what is "out of scope" would be helpful. Also had some trouble sourcing a pentest provider through the Vanta team. A more thorough outline of onboarding expectations would be helpful as well. We have reached out to our Account Executive a few times with technical questions that were immediately passed off to another department.
What problems is the product solving and how is that benefiting you?
Vanta is providing a solution to our team that would otherwise be unable to obtain SOCII Certification on our own. It has saved us numerous hours I'm sure. SOCII Compliance is not for the faint of heart!
Clear and straightforward experience managing the company governance and risk assessment.
What do you like best about the product?
It's an uncomplicated experience that helps us grasp the needs of business owners, areas that demand our attention, and where we can enhance our governance and risk management. I use it on a monthly basis to understand what areas require my attention and also to manage the user's assiduity and the company's inventory.
I can share an opinion on customer support, since I've never used it, but the FAQ session is farily complete and made it easy for me to solve a problem.
I wasn't involved in the implementation or any of the technical integrations, but once the framework has been written, the responsibilities can be easily adjusted.
I can share an opinion on customer support, since I've never used it, but the FAQ session is farily complete and made it easy for me to solve a problem.
I wasn't involved in the implementation or any of the technical integrations, but once the framework has been written, the responsibilities can be easily adjusted.
What do you dislike about the product?
The tool's amount of information and complexity might overwhelm first-time users, but it's fairly simple to navigate and understand how to use.
What problems is the product solving and how is that benefiting you?
Assisting us in managing our SOC2 assessment.
showing 851 - 860