External reviews
External reviews are not included in the AWS star rating for the product.
Really happy customer
What do you like best about the product?
How easy is it to check the status in real-time and stay updated with the progress of our changes in the infrastructure.
What do you dislike about the product?
All are perfect. We don't have any issues and we're happy with all the features.
What problems is the product solving and how is that benefiting you?
SOC 2 Type 2 compliences.
- Leave a Comment |
- Mark review as helpful
Cruise Control for our SOC II Type 2 Compliance.
What do you like best about the product?
- The Task List is a great way to orient our Security team
- The onboarding tool helps us keep the full team compliant.
- The Vanta agent is a nice piece of software that is easy to install for everyone.
- The onboarding tool helps us keep the full team compliant.
- The Vanta agent is a nice piece of software that is easy to install for everyone.
What do you dislike about the product?
- The built in policy generator / functionality could use to some updating. Would love to see the default templates updated, and better support for custom content.
- Would also like to see the policies mostly in Markdown.
- Would also like to see the policies mostly in Markdown.
What problems is the product solving and how is that benefiting you?
We are working towards our SOC II Type 2 Audit - We have been able to do this with a very small engineering team because of the help we get from the Vanta platform.
Using Vanta to prepare a SaaS company for a SOC 2 audit
What do you like best about the product?
This is an updated review now that my company has been using Vanta for about two years. We have successfully gone through two SOC 2 type II audits. Vanta clearly understands the pain points SaaS companies face with regards to preparing a company to live by the standards required by SOC 2 controls. The combination of their technology and people has been instrumental in making us successful with compliance. Given our success in using Vanta with SOC 2 we decided to use Vanta to manage CCPA and GDPR compliance as well.
Vanta has continued to make steady improvements to the product since we signed up as well. Whereas the Risk Management component was very limited when we first signed on, it is now quite robust and does an excellent job of walking you through the creation of a Risk Register, creating remediation tasks, etc.
One of the most useful additions is the Vanta Trust Report. The Trust Report is a web page where we can send customers and potential customers to see our compliance status and download documents that are necessary for a security review. This has saved us a lot of time when potential customers are gathering information for a security review.
Vanta has continued to make steady improvements to the product since we signed up as well. Whereas the Risk Management component was very limited when we first signed on, it is now quite robust and does an excellent job of walking you through the creation of a Risk Register, creating remediation tasks, etc.
One of the most useful additions is the Vanta Trust Report. The Trust Report is a web page where we can send customers and potential customers to see our compliance status and download documents that are necessary for a security review. This has saved us a lot of time when potential customers are gathering information for a security review.
What do you dislike about the product?
In my original review there were still a number of rough edges in the product. I'm happy to report that those have all been resolved. The interface makes it easy to find the information I need without being overly complicated.
What problems is the product solving and how is that benefiting you?
Preparing policies, assessing risk, monitoring systems, collecting evidence, and otherwise implementing what is needed for our company to be SOC compliant.
SOC2 certification
What do you like best about the product?
We decided to choose a partner that would provide tools to automate a significant amount of the tasks and controls to be implemented. Reducing the number of manual tasks would ensure reliability in the implementation and would allow timely completion. Vanta provides a high level of automation, allowing the process to be completed smoothly.
What do you dislike about the product?
There is not much to dislike, other than a better organization of the user interface.
What problems is the product solving and how is that benefiting you?
Obtaining SOC2 certification in a timely way. We were able to complete the process within the deadline.
Makes SOC 2 Much Easier.
What do you like best about the product?
Vanta is the right balance of monitoring, alerting, and tracking to make it easy to meet SOC 2 Type 1 and 2 requirements. You can choose to use all of their features or some of their features with no pain. Their SSO platform makes it easy to monitor employee computers, servers, and SLA's.
What do you dislike about the product?
Sometimes it appears that the people designing this have never had to manage compliance in real life based on density or placement of information. However, they are extremely responsive to feedback and continue to improve their designs.
What problems is the product solving and how is that benefiting you?
SOC 2 Type 1 & 2 Compliance for employee software, hardware tracking, server tracking, internal vulnerability tracking and SLA for vulnerabilities.
Recommendations to others considering the product:
They integrate really nicely with Amazon. If you run your own metal, it will take a little bit more work to get everything dialed in, but its probably still worth it.
Great product and service
What do you like best about the product?
The optimized path and communication to getting the SOC 2 Type 2 was incredible.The sales and onboarding process was informational and consistent with positivity and guidance throughout.
What do you dislike about the product?
I have no improvement suggestions. Easy suggestion is more integrations, however all the ones needed were there for us.
What problems is the product solving and how is that benefiting you?
Soc 2 Type 2 and HIPAA. Benefits were a designed process to not waste time and money on resources that were superfluous to the main goal.
We closed deals because of Vanta. It's that simple.
What do you like best about the product?
Vanta covers nearly everything for SOC2.
What do you dislike about the product?
The risk assessment area could use more instruction.
What problems is the product solving and how is that benefiting you?
Demonstrating adequate security measures in our company. We increased our security to get SOC2 compliant. As promised, the IT assessment performed by our prospects/customers has gone much much better and smoother with Vanta's help.
Recommendations to others considering the product:
Exactly the type of system that we needed to demonstrate SOC2 compliance and manage the process on an ongoing basis.
Very useful to setup security process within your entire organization
What do you like best about the product?
Onboarding & Vanta Agent (MacOS)
Security Checklist/Monitoring
Security Checklist/Monitoring
What do you dislike about the product?
Coverage for Google Cloud Platform is not as good as I would like
What problems is the product solving and how is that benefiting you?
Excellent guidance to start implementing stronger security processes, both on technical and organisational aspects. It makes us much more confident about the way we operate by giving a lot of visibility and allow quick response time and SLA tracking.
SOC 2 audit is in progress, so cannot give a complete feedback on that topic yet.
SOC 2 audit is in progress, so cannot give a complete feedback on that topic yet.
Recommendations to others considering the product:
I think Vanta is a great tool to start implementing and monitoring security practices in a small organisation as long as your landscape is aligned with the integrated tools.
The one thing to check is the list of tools you use and how aligned it is with Vanta integrations.
The one thing to check is the list of tools you use and how aligned it is with Vanta integrations.
User friendly security tool
What do you like best about the product?
The task list is what I like best. It makes it so easy to see what task that needs to be done and how to do them. And on some tasks there is a link to the issue as well. It also shows what tasks are the most urgent and important ones so that we can prioritize without thinking about them. All in all the tool is very easy to use and makes security and compliance feel almost fun.
What do you dislike about the product?
We use the tool to get SOC2. But we would also like if there were other features that would cover our security and compliance. As checking that phones that are using company data are secure. We would also like to have the option to request features that are not in the tool and are not directly connected to compliance, but goes with the functions in the tool.
What problems is the product solving and how is that benefiting you?
The problem of not knowing what exactly we need to get SOC2 compliant in an easy and efficient way with a lot of flexibility. Vanta has made it easy to get all actions needed for SOC2 on one place. Now we can fill out tasks, create policies, handle vendors, manage computers and more in one tool.
Recommendations to others considering the product:
Vanta is a simple tool for security and compliance. If you are looking for something that is easy to use with a good overview Vanta is the tool for you. The follow-up has been remarkable, and any questions we have has has been welcomed and answered greatly.
Vanta review
What do you like best about the product?
A Framework and a focal point to manage all of the SOC2 requirements.
Automation of both the Server-side and the endpoint side
Automation of both the Server-side and the endpoint side
What do you dislike about the product?
Lack of the ability to define certification scope in the system.
I would like to be able to include all of my entities & my server environments in order to improve security, but I am limited to do it just for these in the certification scope.
( I am not the hands-on user)
I would like to be able to include all of my entities & my server environments in order to improve security, but I am limited to do it just for these in the certification scope.
( I am not the hands-on user)
What problems is the product solving and how is that benefiting you?
Advancing towards SOC2 with a Virtual CISO and only a partially dedicated in house person
showing 1,731 - 1,740