External reviews
External reviews are not included in the AWS star rating for the product.
Great tool if you want to implement ISO or SOC2 efficiently
What do you like best about the product?
We love how easy is to get through the process of setting up your security and data protection practices. Definitely, a must-have solution for Startups and larger companies that want to showcase their security posture to their clients.
What do you dislike about the product?
Nothing! The tools is just amazing if you want to implement ISO and SOC2 efficiently.
What problems is the product solving and how is that benefiting you?
Structures ISO certifiction process and requirements related to security, risk and data protection. Facilitates communication with customers in relation to security vendor assessments.
- Leave a Comment |
- Mark review as helpful
Shortcut to SOC 2 and ISO 27001 compliance
What do you like best about the product?
Very detailed and easy to follow path to compliance with SOC 2 and ISO 27001 (and others). Lots of integrations available. Great auditor network at reasonable price.
What do you dislike about the product?
Some of the integrations have had bugs in the past, most of them fixed now. Our HRIS integration is supported only through a third-party so we don't want to connect it. Multi-product/multi-entity is not yet supported (but upcoming)
What problems is the product solving and how is that benefiting you?
Our company has achieved SOC 2 Type 2 compliance in 6 months and maintained it very easily thanks to Vanta. ISO 27001 certification is progressing really quickly through Vanta as well
An Efficient and User-Friendly Solution for Automating Security and Compliance
What do you like best about the product?
I appreciate the ease of use and the user-friendly interface of Vanta's platform. The ability to connect my tools to Vanta and fix gaps on the dashboard made it simple to keep track of my security and compliance status. I also appreciate the ability to work with a Vanta-trained auditor to complete my security audit in a timely manner. Overall, Vanta has been an efficient solution for automating my security and compliance needs.
What do you dislike about the product?
The pricing of the platform may be too high for some small businesses.
What problems is the product solving and how is that benefiting you?
Vanta is solving the problem of automating security and compliance for businesses. By using Vanta's platform, I am able to continuously monitor my people, systems, and tools to improve my security posture and ensure compliance with industry standards such as SOC 2, ISO 27001, HIPAA, and GDPR. This has been extremely beneficial for my business as it saves me time and resources that would have otherwise been spent on manual security and compliance tasks. Additionally, being able to work with a Vanta-trained auditor to complete my security audit in a timely manner has made the process much more manageable and streamlined.
Compliance Controls Require Automation
What do you like best about the product?
Vanta automates compliance across disparate applications and collaboration tools to ensure that organizations pass their compliance audits. The interface is fairly simple to use both for organizations and for their auditors.
What do you dislike about the product?
Vanta is priced somewhat higher than some of its competitors and integration can be challenging for an organization's home grown proprietary applications and tools.
What problems is the product solving and how is that benefiting you?
Within an organization using numerous applications and collaboration tools, Vanta is providing a one stop solution to provide governance and meet audit requirements.
Use Vanta for SOC 2 and HIPAA Compliance
What do you like best about the product?
Vanta's software makes monitoring and tracking controls for IT easy, seamless, and collaborative. They have excellent support too!
What do you dislike about the product?
Nothing. They have monthly updates to their software and are always trying to improve.
What problems is the product solving and how is that benefiting you?
Our business can quickly monitor and communicate how well we handle PHI and other protected data.
Professional.
What do you like best about the product?
Vanta application. Support. Application intregration option.
What do you dislike about the product?
There is nothing i can talk about as negative in vanta.
What problems is the product solving and how is that benefiting you?
Vanta is saving time. by providing access to it's application to track compliances.
Incredibly supportive company to work with.
What do you like best about the product?
The support is genuinely fantastic. Often times when something spans a few different cloud services, they're able to grasp the full nature of how those services interact with each other and subsequently how the services work with their automated monitors.
I have used other audit platforms, including Amazon's own FTR check, for example. Vanta's Refresh Test allows for that immediate feedback loop that other audit platforms don't provide. Because of that, I don't have to wait for the nightly refresh to hope that I fixed my problem in a compliant manner. Awesome product
I have used other audit platforms, including Amazon's own FTR check, for example. Vanta's Refresh Test allows for that immediate feedback loop that other audit platforms don't provide. Because of that, I don't have to wait for the nightly refresh to hope that I fixed my problem in a compliant manner. Awesome product
What do you dislike about the product?
This is more of a preferential thing, but the refresh of the frontend to remove the status of the monitors in that colorful graph was actually super helpful to visually see our status. Please bring that back.
I think Vanta should release a suite of infrastructure-as-code components. For example, we've written a few internal Pulumi ComponentResources, one called CompliantBucket, for example. That bucket sets all the necessary bucket tagging and public access blocks that SOC2 requires. I know that when I provision new infrastructure with our components, I will be provisioning in a compliant manner. This could be a massive value add if they worked directly with these IaC companies like Pulumi and Terraform to onboard companies to SOC2 near immediately. We also provision code repositories this way for example. Instead of the manual steps of
- create repo
- add description to repo
- add branch policies to repo
- add owner to repo in the Vanta platform
we just created IaC components that do this for us and it saves us a lot of time. If I had to setup all components the compliant way all the time, I might be less inclined to use Vanta and attempt the SOC2 audit.
I think Vanta should release a suite of infrastructure-as-code components. For example, we've written a few internal Pulumi ComponentResources, one called CompliantBucket, for example. That bucket sets all the necessary bucket tagging and public access blocks that SOC2 requires. I know that when I provision new infrastructure with our components, I will be provisioning in a compliant manner. This could be a massive value add if they worked directly with these IaC companies like Pulumi and Terraform to onboard companies to SOC2 near immediately. We also provision code repositories this way for example. Instead of the manual steps of
- create repo
- add description to repo
- add branch policies to repo
- add owner to repo in the Vanta platform
we just created IaC components that do this for us and it saves us a lot of time. If I had to setup all components the compliant way all the time, I might be less inclined to use Vanta and attempt the SOC2 audit.
What problems is the product solving and how is that benefiting you?
Doing this all by hand and reading through all the requirements would be a nightmare. Having that immediate feedback is great.
I think having policy as widgets is incredibly effective to remove the confusion around policy documents, which often are just scanned over and not necessarily upheld.
I think having policy as widgets is incredibly effective to remove the confusion around policy documents, which often are just scanned over and not necessarily upheld.
Valuable, Time-Saving, and Organized
What do you like best about the product?
I find Vanta incredibly valuable and appreciate the time and manual tracking it takes off of my plate. Tracking security trainings and on/off-boarding requirements can really drag down my time to do broader scope work with a wider impact. I'm grateful to have a tool I can trust that does all those very important things for me that take lots of time to do manually.
What do you dislike about the product?
There are a couple integrations that don't currently exist, but these aren't of high importance and I know they're on the roadmap, so it's also not a huge issue. For example, our HRIS system wasn't on the list of integrations at first, but now it is!
What problems is the product solving and how is that benefiting you?
It's nearly impossible to track employee laptop settings (think screen saver, encryption, etc) in a remote setting without a tool like Vanta. We also needed one place to track all of our security trainings and the Vanta onboarding page made that so simple!
A great way to implement SOC2 Compliance
What do you like best about the product?
We had a great implementation team to lead us through the process. The software made collecting data and analyzing it for compliance easy. Once we had the basics set up, we were able to follow a friendly checklist that progressed us toward compliance. When we were implemented, we were transferred to a maintenance and support team that is familiar with our business, responsive and friendly. They proactively reach out occasionally with new suggestions... though not too often.
What do you dislike about the product?
Nothing really comes to mind. I'd love to see more integrations with other payroll platforms and other services and systems but I believe Vanta is continuing to release those.
What problems is the product solving and how is that benefiting you?
Our customers want to know we are serious about protecting their data. Engaging with Vanta both shows that we are and really makes us better. For us, we may eventually go for a SOC2 certification. Vanta's got us almost ready for that now.
Vanta has made a cumbersome process much easier. Would recommend!
What do you like best about the product?
Brenden was an incredible resource as we got ramped up on SOC II compliance as a company. I would highly recommend him and his work, and with his help I got ramped up on Vanta very quickly.
What do you dislike about the product?
There were a few things I'd improve about Vanta.
The first is that SOC II requires SOC II reports from all of our vendors, and most of them are large companies with cumbersome processes to access their SOC II reports. Vanta should make those available by default. Even better would be associating the relevant SOC II report automatically with each integration when the initial connection is made.
The second is the detection that some of the integrations have. For Datadog, for example, we have lots of metrics and monitors in place that I don't think Vanta is automatically detecting, which makes it cumbersome to figure out which ones we already have and which ones we need to add.
The first is that SOC II requires SOC II reports from all of our vendors, and most of them are large companies with cumbersome processes to access their SOC II reports. Vanta should make those available by default. Even better would be associating the relevant SOC II report automatically with each integration when the initial connection is made.
The second is the detection that some of the integrations have. For Datadog, for example, we have lots of metrics and monitors in place that I don't think Vanta is automatically detecting, which makes it cumbersome to figure out which ones we already have and which ones we need to add.
What problems is the product solving and how is that benefiting you?
We need SOC II compliance to work with large companies and sign enterprise contracts, so Vanta is making it as painless as possible! We will also likely use Vanta in the future for other certifications as needed.
showing 1,311 - 1,320