External reviews
External reviews are not included in the AWS star rating for the product.
The easy button for SOCII compliance!
What do you like best about the product?
They made the entire SOCII process so simple.
What do you dislike about the product?
Nothing. Nothing at all. Great platform.
What problems is the product solving and how is that benefiting you?
Vanta helped us swiftly and easily move through the SOCII compliance process with minimal effort required by our team.
- Leave a Comment |
- Mark review as helpful
First Time SOC 2 Type II Report Prep
What do you like best about the product?
We're in the process of finalizing our SOC2 prep in Vanta and so far loving the tool. After connecting Vanta to our infrastructure, preparing for SOC2 became intuitive. Our engineering team was given actionable todos for technical remediations and I was able to monitor our team to make sure all our people were doing what's needed for compliance. At the end of the year, our team will grow to around 60 people so not having to capture screenshots to evidence our security controls is huge.
What do you dislike about the product?
Integrations are still a work in progress.
What problems is the product solving and how is that benefiting you?
Vanta is helping build a better, more secure environment.
We literally could not do SOC2 without Vanta
What do you like best about the product?
Everything is automated, so we can proactively stay on top of SOC2 violations and makes working with auditors seamless.
What do you dislike about the product?
The refresh UX could be more transparent.
What problems is the product solving and how is that benefiting you?
We're trying to get our SOC2 compliance. Without an automated system like Vanta we absolutely could not have done it. We're super strapped for time, and having a system and regular check-ins with our point of contact at Vanta is the only way.
Recommendations to others considering the product:
Stay on top of breaches in compliance, or they'll add up quickly.
Helped us get to a SOC 2 compliant posture and to stay there
What do you like best about the product?
Before we selected Vanta, I reached out to auditors to get ballpark pricing. It was going to cost us a lot of money and, on top of that, was going to be a ton of work. I was worried compliance would not be possible for a team of our size and was pretty down-hearted on the whole thing. I have to say good job on your product because it makes this seem a lot less cumbersome and expensive. The whole process end-to-end is a lot more agile than it would be otherwise. SOC 2 historically is everything but agile. So working with Vanta has been great and SOC2 is going to be really good for our business.
What do you dislike about the product?
It would have been nice to have Vanta create a sample system description for us to work with as a starter by using the info we'd plugged in.
What problems is the product solving and how is that benefiting you?
Got to a SOC 2 compliant posture, continually monitoring our systems to help us stay compliant.
Vanta is the best compliance enterprise-ready service
What do you like best about the product?
Tight integration with AWS/GCP/Heroku, Slack, Datadog, and Linear.
What do you dislike about the product?
Lots of fields to fill out, but that's generally how compliance works.
What problems is the product solving and how is that benefiting you?
We are getting SOC-2 compliance and they are accelerating the pace we can do it as a small team.
Vanta made SOC 2 painless
What do you like best about the product?
Vanta makes the SOC 2 audit process way more manageable and makes it possible for us to continually monitor our compliance.
What do you dislike about the product?
You still need to work with an auditor, but Vanta is able to put you in touch with several high quality auditors.
What problems is the product solving and how is that benefiting you?
We needed SOC 2 - Vanta helped us achieve this.
Excellent product and service
What do you like best about the product?
Ease of use, customer success person assigned to us.
What do you dislike about the product?
Not much really, if I was nitpicky, some quality-of-life features are missing, like bulk-update of items.
What problems is the product solving and how is that benefiting you?
SOC2 audit.
Using Vanta as a tool for ongoing SOC 2 compliance.
What do you like best about the product?
The best aspect of using Vanta is how integrates with current services being used (like Azure) and identifies the important steps/items to be addressed for ensuring a quality system in place for all policies and procedures.
In addition, the step by step walk-through related to 'fixing' any outstanding items identified. Also, the automated process of continual monitoring and notifications allow for a very rapid identification, process initiation, and resolution of issues.
In addition, the step by step walk-through related to 'fixing' any outstanding items identified. Also, the automated process of continual monitoring and notifications allow for a very rapid identification, process initiation, and resolution of issues.
What do you dislike about the product?
Although Vanta integrates with some main services (like Azure, AWS, etc.), there are items related to the overall process and expectations of what the auditor will need that are not included within the Vanta app/system. Unfortunately, there is no assigned storage, or availability to link to 3rd party storage (like OneDrive, FTP, etc.) for those additional items to be easily shared with an Auditor.
What problems is the product solving and how is that benefiting you?
We are using the Vanta tool to solve all our requirements to be SOC 2 compliant; not only as a one time snap shot, but an ongoing endeavor. This concept of continuous monitoring and notification for immediate fixes of issues and all related data being captured and avialble for an auditor streamlines the annual SOC 2 audit process which is expected to greatly reduce future time spent in preparations; as well as incurring a reduced price from the auditor for having access to a tool which shortens their required time and effort in gathering data for the final report.
Utilizing the supplied templates for policies allow for a very comprehensive policy creation and ensures that even the average individual with little technical writing skills can still achieve quality and thorough policies.
Utilizing the supplied templates for policies allow for a very comprehensive policy creation and ensures that even the average individual with little technical writing skills can still achieve quality and thorough policies.
Recommendations to others considering the product:
The personal interaction and support is exceptional. Any and all questions are welcome and all aspects of using the tool are assisted with as needed. Your assigned support will happily schedule weekly meeting to review all progress, and emails sent between meetings are responded to promptly.
Helpful and friendly staff boost the journey to a SOC 2
What do you like best about the product?
Vanta's platform picks up the correct information and provides a helpful front view of the company's compliance effort. It also covers a lot of the nooks and crannies of compliance -- things like tracking and rolling out policies, inventory etc.
What do you dislike about the product?
Vanta has built out most of its compliance-related workflow features, but some specifically are still in baby steps. For example, vulnerability management -- Vanta will pull the right list of Docker container vulnerabilities, but won't sync it up to GitHub Issues. I'm really looking forward to seeing more integrations and pulling data together, so I could rely on Vanta as the only place I check for compliance.
What problems is the product solving and how is that benefiting you?
Qminder is using Vanta as a SOC 2 speed-boost tool, to get most of the evidence collection handled with Vanta. We've also partnered with an auditor company who Vanta connected to us, which helps our company spend less time on evidence management and negotiations - and more time on the product.
Recommendations to others considering the product:
For small businesses considering Vanta for your first SOC 2 report - get ready to implement a lot of new policies. You should have the OK from higher-ups right from the start, as the speed of implementing these policies will mean faster rollout & employee approval!
Makes security compliance attainable for small and medium companies.
What do you like best about the product?
One of the most immediately impactful features centers around Vanta's excellent Integrations which automate a massive amount of otherwise manual labor. Vanta has always had highly responsive customer support for issues and feature requests. Throughout our time using this platform Vanta has shipped many time-saving feature updates and releases. These are great and keep the platform delivering on that primary goal of ensuring compliance while adding efficiency and reliability. The regular and actionable email alerts allow our administrators to stay on top of any security gaps or updates with the information needed for follow-up.
The onboarding tools make it especially easy to get new employees or contractors set up and tracked in a way that aligns with company policy while being simple and streamlined for the user.
Vanta has two external agent applications that can be used to support security and compliance efforts. The Vanta Agent for individual workstations has proven to be very stable and easy to work with. The same can be said about the server agent.
The onboarding tools make it especially easy to get new employees or contractors set up and tracked in a way that aligns with company policy while being simple and streamlined for the user.
Vanta has two external agent applications that can be used to support security and compliance efforts. The Vanta Agent for individual workstations has proven to be very stable and easy to work with. The same can be said about the server agent.
What do you dislike about the product?
I have nothing to dislike. Vanta continues to overdeliver for us.
What problems is the product solving and how is that benefiting you?
Like anyone dealing with Security and Compliance, a significant amount of time is often spent doing work that Vanta automates away and makes low or no effort. In a small company or startup environment, that level of effort can be a major obstacle to a strong security posture and eventually obtaining a certification. Vanta saves what would require whole FTE's worth of work with stronger more reliable results. Vanta also connected us with vetted vendors who could support the auditing and certification process.
Recommendations to others considering the product:
This is an excellent solution for a startup or small business looking to implement an InfoSec Program from scratch or to replace an existing manual labor based program.
showing 1,721 - 1,730