External reviews
External reviews are not included in the AWS star rating for the product.
Vanta made SOC2 compliance easy, simple and straightforward
What do you like best about the product?
The most helpful aspect of Vanta to our company has been aggregating all compliance requirements in one place. We don't have to question if we are missing certain protocols or standards when it comes time to our audit. I can login in daily and remediate any findings on our in scope systems and feel confident we have a compliant security posture for our clients and auditors.
What do you dislike about the product?
There are a few things I would change about Vanta. The first being how vulnerabilities are handled for servers using AWS inspector. There isn't much of a description or explanation for why a package needs to be remediated. It does link to the vulnerability finding but this doesn't show how to remediate. It would be helpful to see what version it needs to be upgraded to or provide instructions on how to remediate it. It would also be nice to add some type of note system in there. That way if multiple people are working on vulnerabilities they can see each others notes and know if the issue is already being worked on. There is a Jira integration that will let you create tickets for failed test, so this could be a work around for that.
The second would be how some things in Vanta sync. For example, we use Hexnode to monitor our laptops. It can take up to 24 hours for Vanta to recognize a hard drive was encrypted. It would be nice to be able to force a sync somehow so that we can see quicker if people are keeping their laptops compliant.
Finally, the way people are sorted in to groups could be improved. Currently, a user can only be part of one group. It would be nice if they could be part of multiple groups.
The second would be how some things in Vanta sync. For example, we use Hexnode to monitor our laptops. It can take up to 24 hours for Vanta to recognize a hard drive was encrypted. It would be nice to be able to force a sync somehow so that we can see quicker if people are keeping their laptops compliant.
Finally, the way people are sorted in to groups could be improved. Currently, a user can only be part of one group. It would be nice if they could be part of multiple groups.
What problems is the product solving and how is that benefiting you?
The biggest problem that Vanta solves for us is keeping all of our compliance work in one place and eliminating the guessing game when it comes to what we need to stay complaint. By coming in to an audit with almost everything already in compliance speeds up our certification and makes it easier to acquire customer who require SOC2 or other security standards. This allows us to make money quicker and shorten audit periods.
- Leave a Comment |
- Mark review as helpful
Head of Engineering
What do you like best about the product?
We needed SOC2 certification at our company, and we didn't even know how to approach it. Someone recommended Vanta as an all-in-one solution for all our compliance needs, and we decided to give it a try. Vanta gave us a clear checklist for achieving Soc2 compliance, gave us tools to automate some organizational tasks, and, finally, connected with an auditor who issued us a certificate.
What do you dislike about the product?
Some of the recommendations ended up being extraneous, and the auditor actually never asked about them. Still, it's good that we've fixed all of them and, hopefully, improved our overall security.
What problems is the product solving and how is that benefiting you?
Vanta helped us get SOC2 type I certified and stay continuously compliant for SOC2 type II.
Level up your Compliance and Risk Management Programs!
What do you like best about the product?
Vant has been instrumental in leveling up our compliance and risk management program. We've been using Vanta for several years, and it maintains a step ahead of our maturing goals to create a roadmap for our success.
What do you dislike about the product?
I do wish there was a little better control tie-in to policies. I'd love for the product to recommend policy updates based on the new control frameworks and regulations that I've purchased within the product. The relationship between Policies and Controls could be stronger.
What problems is the product solving and how is that benefiting you?
Vanta puts portions of our Compliance Program into automation. With the various integrations it natively uses, we can bring in data from multiple disparate software products - this takes the load off evidence collection. Our audits are more easily passed and efficient with GRC products like Vanta, and we are grateful for their assistance.
Vanta was the shortest path toward SOC2 compliance
What do you like best about the product?
The ability to integrate with your systems turns compliance into an actionable checklist.
What do you dislike about the product?
I'd like more integrations to alert us of upcoming changes or compliance failures (e.g., webhooks).
What problems is the product solving and how is that benefiting you?
Vanta put us in the best possible conditions for a successful SOC2 Type II audit.
Becoming SOC2 compliant - it doesn't have to be too hard!
What do you like best about the product?
Vanta made the SOC2 compliance process relatively easy by automating most tasks, helping us at SimplyPut understand how many items were left to complete, and providing exceptional support.
What do you dislike about the product?
Some tasks could have been automated a bit better, but I believe that Vanta is in the process of automating those as we speak. For example, some forms might be easily set up to be auto-filled instead of having the find and replace lots of text.
What problems is the product solving and how is that benefiting you?
Vanta helped us become SOC2 compliant relatively quickly so that SimplyPutcan show customers we have secure practices to handle their data! As a data company, proving good security practices is paramount, and we're delighted to have Vanta help us showcase how seriously we treat security and compliance.
Streamlining Compliance
What do you like best about the product?
As a user of Vanta, I am impressed by its ability to streamline our security auditing and compliance processes. The platform makes it easy to navigate through complex requirements, saving us time and effort. I appreciate how Vanta automates assessments and provides real-time monitoring, giving us peace of mind knowing that our systems are continuously evaluated for compliance. Additionally, the platform's comprehensive coverage of various regulatory frameworks ensures that we stay on top of evolving industry standards.
What do you dislike about the product?
While Vanta does provide discounts for TrustCenter to existing customers, I would like to emphasize that it is included to provide us with peace of mind.
What problems is the product solving and how is that benefiting you?
It provides us with complete compliance automation.
co-founder, CEO
What do you like best about the product?
Helpful reps to assist in set up, questions, demo/review allowed us to get started going towards SOC2 quickly.
What do you dislike about the product?
Nothing really - price is a little steep but SOC2 compliance is in general, overall Vanta actually saves money.
What problems is the product solving and how is that benefiting you?
Faster time to showing security posture and policies for working with Enterprise customers who have high security needs.
Vanta makes it easy to achieve and maintain security compliance
What do you like best about the product?
The automated nature of security tests makes sharing compliance proof with auditors or for IT questionnaires easy. The proof being centralized to one platform saves time and the compliance over time of each test strengthens the proof.
What do you dislike about the product?
IT questionnaires remain a major time investment even with the centralization of proof. While Vanta simplifies the process of filling out questionnaires significantly, there's always the last-mile problem of filling out unique questionnaires.
What problems is the product solving and how is that benefiting you?
Vanta solves setting up a good set of security and trust principles and monitors their achievement, and then makes the proof of these achievements readily available for auditors. This benefits us by making SOC 2 audits simple, and makes filling out IT questionnaires easier.
Best systems, security and controls automation platform I've found.
What do you like best about the product?
Integrations for real-time monitoring of hosting environment, employee hardware, background checks, policy and SLAs adherence is fantastic for C-suite to be able to monitor and be notified without having to learn/access disparate systems.
What do you dislike about the product?
The need to still do a once-a-year, point in time audit with a CPA firm feels unnecessary when there is a system like Vanta doing real-time monitoring of actual security and compliance.
What problems is the product solving and how is that benefiting you?
Preparation, support and completion of necessary activities for setup and monitoring of our company and environment to ensure the security of sensitive information as well as providing necessary documentation for our SOC 2 type 2 audit.
Excellent automation and centralization for compliance needs
What do you like best about the product?
The integrations and automations provide an excellent central source of truth about your systems from a compliance viewpoint. The policy templates are well thought-out and offer a great starting point on your compliance journey. The customer service team has been very engaged and seems to care about our company and its compliance needs.
What do you dislike about the product?
I wish there were more integrations (I understand they are adding new ones all the time). It would be great to get to the point of very minimal evidence uploading. Sometimes automated checks will overlap with different third-party integrations, and you need to go in and manually turn off different checks.
What problems is the product solving and how is that benefiting you?
Our company felt we were in a good place from a security standpoint (and we're HITRUST certified), but we wanted a better platform to consolidate, remind, and automate more of the ongoing compliance process. Vanta was able to fulfill our goals and ease the compliance burdon on our workforce.
showing 1,431 - 1,440