Vanta

What do you like best about the product?

As a cloud security engineer, I really appreciate Vanta for its ability to continuously monitor our AWS and Azure environments for compliance and security risks. I check Vanta's dashboard daily to review failed controls and coordinate remediations, which saves me a lot of time compared to manual checks. The integration with platforms like GitHub and endpoint management tools is smooth, allowing for automatic evaluation of security controls such as MFA, encryption, access permissions, and device compliance. I love the feature of continuous monitoring; if anyone creates an AWS resource that doesn't meet our security policy, Vanta detects it automatically and flags it, alerting me so I can address it before it becomes a security risk. It also helps in identifying gaps in real time, centralizes visibility, and reduces manual preparation for audits, which lowers operational costs and enhances regulatory compliance.

What do you dislike about the product?

I would like to see improvement in some compliance controls which require manual evidence or policy reviews because it cannot be fully automated. Also, organizations which require cloud environment may need additional configuration or supplemental tools to monitor specialized security requirements.

What problems is the product solving and how is that benefiting you?

I use Vanta to monitor our AWS and Azure for compliance risks, integrating it with tools to automate evaluations. It solves maintaining compliance at scale, reduces manual audits and operational costs, and improves regulatory compliance by identifying gaps in real time.

What do you like best about the product?

Excellent UI that’s easy to navigate, and the vendor risk management features are straightforward to use.

What do you dislike about the product?

The evidence suggestions within the frameworks could be improved.

What problems is the product solving and how is that benefiting you?

Support is amazing at solving problems.

What do you like best about the product?

The feature I like the most is its continuous monitoring. Instead of waiting until an audit to discover issues, it alerts me immediately if a device becomes non-compliant or if multi-factor authentication is disabled. I also like the centralized dashboard because it gives me a clear view of my organization's overall security and compliance status. It significantly reduces the time I spend on repetitive compliance tasks and manual evidence collection, and it eliminates the need to gather screenshots and documentation from multiple systems before every audit. It simplifies access reviews and policy tracking, which lets my IT team focus more on strengthening infrastructure and supporting employees. The automated monitoring helps us identify security gaps early, reducing operational risk and improving overall compliance. As a real example, during a quarterly access review, Vanta generated an alert that a recently onboarded engineer did not have MFA enabled on their Google Workspace and flagged the control as non-compliant within a few hours, so I contacted the employee, had them enforce MFA through Okta, and verified the change in Vanta. It provides alerts and clear remediation guidance that help me review and resolve compliance issues quickly and keep us audit ready. It's easy to use, and the initial setup was easy. I also use it with Jira for remediation tracking and Slack for notifications.

What do you dislike about the product?

Vanta is easy to use, but some of the advanced settings and integrations require technical knowledge to configure correctly. Certain alerts can also generate extra investigation work before I can tell whether they're genuine compliance issues. And some of the reporting features lack the level of detail I need for executive presentations.

What problems is the product solving and how is that benefiting you?

I use Vanta to cut down time on repetitive compliance tasks and manual evidence collection, so I no longer gather screenshots from multiple systems before audits. It simplifies access reviews and policy tracking, and its automated monitoring helps us spot security gaps early, reducing operational risk and keeping us audit ready.

What do you like best about the product?

What I like best about Vanta is how much time it saves... It takess lot of the manual work out of compliance by automating evidence collection and monitoring, which makes staying audit-ready much easier. I also like that it gives us a clear and professional way to showcase Fenergo's security and compliance posture through the Trust Center, helping build trust with customers and prospects..

What do you dislike about the product?

Vanta has been really useful overall, but I think some areas could be more flexible. There are times when workflows don't quite match how we operate, and it can take a bit of digging to understand why a test has failed or what action is needed. More customization and clearer guidance would help.

What problems is the product solving and how is that benefiting you?

Vanta is helping solve a lot of the administrative burden that comes with managing compliance. Instead of spending time chasing evidence, tracking control ownership, or preparing for audits manually, much of that information is collected and monitored automatically.

For me, that means less time on repetitive tasks and more & moree time focusing on actual compliance and security improvements. It also gives better visibility into our overall compliance posture and makes it easier to demonstrate trust and assurance to customers and auditors when needed...

What do you like best about the product?

I use Vanta for automating security compliance and to monitor our cloud structure. It easily integrates with systems like AWS, Google Workspace, GitHub, and endpoint management tools to collect audit evidence, monitor security controls, and identify compliance gaps wherever necessary, and it simplifies audit preparation for frameworks such as SOC 2 and ISO 27001. The feature I like the most is the automation it provides. Instead of manually collecting evidence and checking security controls, Vanta continuously performs these tasks in the background, which significantly reduces audit preparation time. It gives me a centralized, real-time view of compliance status, failed security checks, and remediation tasks across all integrated systems. During a SOC 2 audit, Vanta automatically collected evidence from AWS and other similar platforms throughout the year, so instead of spending several weeks gathering screenshots and access logs manually, everything was already organized in one dashboard. We completed auditor requests within days and reduced audit preparation time by nearly half while improving accuracy and transparency. It automatically checks controls such as MFA enforcement, device encryption, employee onboarding, user access reviews, and cloud security configuration through integrated systems. Failed checks generate alerts and remediation tasks for the appropriate teams, and this continuous automation keeps compliance up to date and ensures we are always audit ready throughout the year. I like the continuous evidence collection, which ensures evidence is always current, significantly reduces repetitive administrative work, and minimizes human error. IT security has benefited the most, since it reduces their manual workload now that it's automated and reduces human errors. There is a 60-70% reduction in audit time, we reduced compliance-related manual tasks, responded to auditors faster, and identified security gaps much earlier through continuous monitoring. It collaborates well between teams, hands off the work smoothly, and the remediation of tasks is well organized with easy transitions. The initial setup was moderately easy for us.

What do you dislike about the product?

Even though it's highly effective, I find the customization and reporting capabilities somewhat limited for organizations with unique compliance requirements. Some integrations require additional manual configuration. And for complex environments, I need extra tools to get complete visibility and meet specialized security or regulatory needs.

What problems is the product solving and how is that benefiting you?

Before Vanta I had to manage security compliance manually. Now it automates evidence collection, continuously monitors security controls, and identifies gaps for audits like SOC 2 and ISO 27001. It cuts our audit time by 60-70%, reduces manual work and human errors, and helps maintain customer trust.