Vanta

What do you like best about the product?

The user interface is very easy to use. It makes filling out a form or keeping our SOC2 controls up to date incredibly easy and pain-free. We've added multiple integrations that assist with offboarding and maintaining accurate test results. Set-up was very easy with the given tutorials. When we got stuck, we would reach out to our support team and get instant help. Set-up was very easy with the given tutorials. When we got stuck, we would reach out to our support team and get instant help.

What do you dislike about the product?

It's a bit expensive, but it basically replaces an employee. For us, this was the reason to spend the money on such an application.

What problems is the product solving and how is that benefiting you?

We have to complete yearly security forms for clients and the AI in Vanta takes so much of the guess work out of that process for us. It's fast and reliable. What used to take 1-2 weeks, now takes a couple of hours.

What do you like best about the product?

We ended up using the API to tie our custom Salesforce automation right into the compliance dashboard. So whenever an opportunity maps over to a quote, the system automatically generates an object record that Vanta just eats up as proof for our manual approval controls.

What do you dislike about the product?

Figuring out the initial connection was honestly such a massive headache since their developer docs for custom integrations are super thin. We spent almost three full days just guessing the right formatting to make the records sync properly without throwing random timeout errors.

What problems is the product solving and how is that benefiting you?

It proves to our external auditors that we have strict financial controls in place without forcing the sales guys to do any extra paperwork. We get to keep our normal pipeline processes, and the compliance side basically just hums along in the background.

What do you like best about the product?

The user interface is clear and simple. Easy to reach human support.

What do you dislike about the product?

Sometimes slow in synchronization - need to wait for a while to check if the applied fix worked.

What problems is the product solving and how is that benefiting you?

Various security framework compliance.

What do you like best about the product?

I love that it monitors our exact cloud configuration settings to catch if a developer accidentally leaves a storage bucket or data volume exposed to the public internet. It completely saves me from having to manually click through the AWS console every single morning checking for security leaks.

What do you dislike about the product?

The system is incredibly strict, so it screams about completely safe testing environments that are meant to be open, forcing you to go in and write out a formal justification for every single one. It turns what should be a quick check into a massive chunk of annoying paperwork just to make the dashboard green again.

What problems is the product solving and how is that benefiting you?

It acts as a literal safety net for our infrastructure, catching misconfigured ports or open databases before a malicious scanner finds them and causes a massive data breach. When the external auditor asks how we ensure our live cloud servers stay secure, I just pull up the continuous monitoring logs and they move on instantly.

What do you like best about the product?

Getting rid of my massive Excel tracker for employee security videos was honestly the best feeling ever. The platform handles sending out the mandatory videos to new hires and just gives me a green checkmark when they actually pass the quiz.

What do you dislike about the product?

The staff still completely ignores the automated email nudges for weeks on end, so I'm not totally off the hook. I still end up having to complain to their managers on Slack to force them to finish the modules right before our audit period starts.

What problems is the product solving and how is that benefiting you?

When the external auditors sit down with us, I just hand over the platform's clean export list showing everyone is up to date. It completely covers my back and proves we aren't letting random new hires touch our data without basic security training.

What do you like best about the product?

The user friendly environment Vanta has is the best thing about the Vanta

What do you dislike about the product?

Sometimes I feel there should be a direct human contact chat support where we can connect and resolve any issue's.

What problems is the product solving and how is that benefiting you?

Policies creation and tests related to the framework which we select.

What do you like best about the product?

I like Vanta because it effectively manages various devices, monitors user access, and maintains security controls across our organization. It integrates well with identity providers, endpoint management tools, and cloud services, ensuring systems continuously meet security requirements. The dashboard is incredibly useful for reviewing access permissions, tracking security training completion, and confirming proper device configuration. This helps maintain audit readiness and reduces manual checks. The Access Review automation feature is particularly valuable as it identifies user accounts, tracks permission changes, and centralizes the access review process, making it auditable and saving time while reducing the chances of outdated permissions remaining active. Additionally, it provides clear evidence for auditors that access controls are reviewed regularly and maintains consistency across the organization. The initial setup of Vanta was also easy.

What do you dislike about the product?

I don't see any downside of it, but still I would suggest more prebuilt templates should be there, for highly customized IT environment and also some reporting and workflow options can be less flexible when dealing with unique infrastructure or approvals chains.

What problems is the product solving and how is that benefiting you?

Vanta helps me manage devices, monitor user access, and maintain security, reducing manual checks and ensuring audit readiness. It identifies compliance gaps before they turn into issues, saving operational effort and improving consistency.

What do you like best about the product?

I use Vanta to monitor organizational compliance, manage security controls, and ensure operational processes align with regulatory standards. I like its automatic compliance monitoring, which provides a centralized dashboard for tracking and monitoring compliance status across various departments. Vanta helps in automating evidence collection for audits and works well with our business systems, reducing manual work and improving visibility. Continuous monitoring is another thing I enjoy, as it continuously checks connected systems, cloud infrastructure, and user access against compliance standards, generating real-time alerts if a control fails or a policy violation occurs. This ensures we can take corrective action immediately, maintaining compliance throughout the year. The continuous monitoring also reduces audit preparation time, improves operational visibility, and gives leadership confidence that security controls remain effective. The initial setup of Vanta was easy, and I find it valuable for its ability to streamline these processes.

What do you dislike about the product?

I find Vanta's flexibility limited and feel it could be improved by introducing customizable compliance workflows and modular reporting. It would be great if Vanta allowed administrators to build workflows using a drag-and-drop designer. We also noticed that for organizations with highly customized operational processes or unique compliance requirements, some workflows and reporting options don't fully match complex business environments, requiring manual adjustments outside the platform.

What problems is the product solving and how is that benefiting you?

I use Vanta for compliance monitoring, automating evidence collection for audits, and reducing manual work. It identifies compliance gaps early, reducing audit failures and security incidents, and provides a centralized dashboard for tracking compliance, improving operational visibility, and ensuring continuous compliance.

What do you like best about the product?

It is user-friendly, and it makes compliance and monitoring easier and more manageable. The integrations help reduce manual work, the AI agent helps understand audit requirements better, the Vanta Support team is very efficient and the overall performance of the platform is appreciable.

What do you dislike about the product?

Sometimes there are glitches with the integrations which are hard to report as they may resolve themselves and reappear from time to time.

What problems is the product solving and how is that benefiting you?

It helps in managing the compliance journey in an easier way.

What do you like best about the product?

I appreciate how Vanta runs automatically in the background, scanning critical IT infrastructure and quickly flagging high-risk gaps in our compliance checklist. The tool’s core strength is its passive operation: it continuously monitors connected code repositories, identity providers, and data stores without requiring constant hands-on effort. I also like how it maps our infrastructure directly to frameworks like SOC 2, ISO 27001, and HIPAA, then keeps those compliance mappings updated in real time as our cloud environment changes. It removes a lot of guesswork by showing exactly how our current configurations measure up against regulatory requirements. On top of that, deploying Vanta was smoother than I expected.

What do you dislike about the product?

I find alert fatigue really frustrating, because so many alerts end up being false alarms or just temporary setups that don’t actually require action.

What problems is the product solving and how is that benefiting you?

I like Vanta for automatically scanning our IT infrastructure and flagging high-risk gaps. It passively and continuously validates compliance with frameworks, updating in real time as our cloud setup changes. I also like that it clearly shows how our configurations align with regulatory requirements.