Vanta
VantaExternal reviews
2,126 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Effortless Tech Organization with Intuitive To-Do Lists
What do you like best about the product?
Vanta organizes all your tech accounts into ease to-do lists.
What do you dislike about the product?
Vanta feels expensive and new features feel like they are all add-ons instead of general product improvements.
What problems is the product solving and how is that benefiting you?
Vanta organizes all your tech accounts into ease to-do lists. We know which vendors are staying on top of security and have dialed in our license and asset management as a result.
Lightning-Fast Compliance Made Effortless for Startups and SMBs
What do you like best about the product?
Vanta’s biggest strength is how quickly it gets companies from zero to audit-ready by automating evidence collection and mapping controls in a way that’s simple, intuitive, and auditor-friendly. Its broad integration ecosystem (cloud, identity, devices, source control) removes a huge amount of manual work, while the clean UX and clear remediation guidance make it easy for non-security teams to follow without constant hand-holding. It’s not a deep GRC or risk platform, but as a compliance execution engine, it excels at speed, clarity, and reducing audit friction — which is exactly why it’s so effective for startups and SMBs.
What do you dislike about the product?
Vanta is a strong compliance automation platform, but its main limitation is that it’s optimized for speed and standardization rather than highly complex or bespoke security programs. For organizations with unique architectures, custom frameworks, or advanced risk management needs, some controls and workflows can feel a bit rigid and require manual workarounds. That said, this trade-off is intentional and aligns well with Vanta’s goal of making compliance accessible and efficient for most growing teams, especially those pursuing common frameworks like SOC 2 or ISO 27001.
What problems is the product solving and how is that benefiting you?
Vanta solves the problem of manual, time-consuming compliance work by automating evidence collection, continuously monitoring controls, and centralizing everything needed for audits in one place. This significantly reduces the operational overhead of preparing for frameworks like SOC 2 and ISO 27001, minimizes last-minute audit scrambles, and provides clear visibility into compliance posture at any point in time. As a result, it saves time, reduces stress for internal teams, improves audit readiness, and allows us to focus more on higher-value security and risk work rather than chasing screenshots and documentation.
Effortless Tracking and Integrations Across Certifications
What do you like best about the product?
Ability efficiently track tests/controls/policies across different certifications with whole bunch of integrations.
What do you dislike about the product?
When an error occurs with one or more entities during synchronization with an integration, there is no way to manually refresh the process using a button—the error remains and the sync stays stuck. I need to wait for the next sync.
What problems is the product solving and how is that benefiting you?
Thanks to this, we are able to pass certifications; otherwise, we would have struggled to keep everything tracked and up to date.
Rapid SOC 2 Compliance with Seamless AWS Integration
What do you like best about the product?
I like how Vanta significantly streamlined our SOC 2 compliance process for our Cloud SaaS. The integration with AWS services was seamless and incredibly beneficial, enabling us to achieve certification in record time. Working with a consulting partner from Vanta's network who managed an accelerator program made the entire journey efficient and productive. I appreciate that Vanta offers super easy setup and integration, providing actionable suggestions every step of the way. This efficiency is enhanced further by the deep integration with AWS, Cloudflare, and GitHub, which works great together within our ecosystem. As someone who operates within AWS, I found the initial setup very quick and easy. Overall, Vanta's performance exceeded my expectations, which is why I'm very likely to recommend it to others, rating it a 9 out of 10.
What do you dislike about the product?
I find some templates and minor issues with Google Docs import to be less than ideal. The Google Docs policies are marked as updated drafts every time someone opens the document, which is not optimal. Additionally, some template builders in Vanta produce a .docx file that doesn't import natively into Google Docs, and fixing the formatting can be a hassle. There was also a minor niggle with AWS Identity Center integration where user account status wasn't pulling through, but Vanta support was very responsive and we were promised this will be reviewed for the product team's roadmap.
What problems is the product solving and how is that benefiting you?
I find Vanta accelerates SOC 2 compliance, simplifying setup and integration. It provides actionable suggestions, supports deep AWS integration, and facilitates auditor connections, streamlining certification with expert guidance.
Trust-Building Simplified with Vanta's AI
What do you like best about the product?
I love the simplicity of Vanta's user experience. It's intuitive and eliminates the confusion often found in other tools. The straightforward nature allows me and even those without much awareness of frameworks to easily understand and articulate what needs to be done, especially when addressing cybersecurity requirements. Vanta's AI engine is particularly powerful in querying policies, making complex tasks much simpler and more efficient. The setup process was super easy and straightforward, even for those without extensive knowledge, which is great for onboarding. This ease of use combined with the robust AI capabilities truly makes Vanta a valuable asset for my company.
What do you dislike about the product?
I am just starting to explore the third-party risk area with Vanta and am unsure about how it integrates with our insurance partner. I feel there is a need for improvement in collaborating with our insurance company, particularly to address the company's risk management, ensuring we are neither underinsured nor overinsured, but appropriately insured.
What problems is the product solving and how is that benefiting you?
I use Vanta to prove trust and compliance to our customers, enhancing awareness and speeding up time to market. Its simplicity and powerful AI engine make managing policies straightforward, eliminating confusion from having data in multiple places.
Vanta, which maximizes compliance efficiency
What do you like best about the product?
I find Vanta to be a very effective tool for managing our policies and evidence for HIPAA and SOC 2 compliance. In particular, by using Vanta, our company was able to significantly reduce the manpower and time invested in compliance preparation. Vanta's automation features are also very detailed, and by following the provided guides, a significant portion of security vulnerabilities can be addressed, which is a major advantage. Additionally, the very fast response time when making inquiries is very satisfying. It was impressive that, even during the initial setup process, we were able to proceed without much difficulty thanks to the detailed support from the CSM.
What do you dislike about the product?
Sometimes, when using Vanta, there are documents that do not match the version. It would be more convenient to use if updates were made more frequently.
What problems is the product solving and how is that benefiting you?
Through Vanta, we manage compliance readiness more easily at our company's scale, saving manpower and time. The automation features help address security vulnerabilities, and the quick response time is also appreciated.
Transforms GRC Management with Ease
What do you like best about the product?
I really appreciate how Vanta’s automation and AI features help explore gaps in control language, which saves me time and improves efficiency, especially with TPRM vendor assessments. I like that Vanta acts as the front end to customer trust, ensuring we present the best image of our control environment. Additionally, the Vanta agent gathers data quickly and provides my company the essential resources to make GRC risk reduction impacts quantifiable. This quick data gathering for TPRM and analysis of our existing security posture significantly improves our content and representation for customers. The initial setup of Vanta was very easy, and I also appreciate its seamless integration with tools. My positive experience with these features makes me very likely to recommend Vanta to others, as indicated by my rating of 10 out of 10.
What do you dislike about the product?
None
What problems is the product solving and how is that benefiting you?
I use Vanta for GRC tooling and TPRM, saving time with automation. It improves efficiency, gathers data quickly, and enhances our security posture, helping make risk reduction quantifiable and ensuring the best representation of our control environment for customers.
Indispensable Tool for Effortless Security Compliance
What do you like best about the product?
Vanta is an indispensable tool for security compliance, making it much easier to manage and maintain overall compliance.
What do you dislike about the product?
In my experience, the Vanta Agent can occasionally be challenging for users to troubleshoot, and the level of difficulty often depends on the specific device being used.
What problems is the product solving and how is that benefiting you?
Vanta is assisting us in maintaining our security compliance with the frameworks we are currently using.
Future of GRC and AI
What do you like best about the product?
The future of GRC related to AI and the need for analysts to fil the roles of security
What do you dislike about the product?
During the training, there were frequent interruptions from a few attendees who asked questions that appeared to serve their own interests rather than benefiting the entire class. This affected the overall flow and focus of the session.
What problems is the product solving and how is that benefiting you?
Collecting evidence to meet control objectives
All-in-One Solution with a Clean, Intuitive Interface
What do you like best about the product?
This application is clean and straightforward, yet it offers all the essential features an organization needs in one place.
What do you dislike about the product?
Some cloud resources have settings that are not immediately visible or are somewhat hidden.
What problems is the product solving and how is that benefiting you?
Compliance and accountability are essential aspects that should not be overlooked.
showing 1 - 10