We're trying to get SOC 2 compliance, and we're trying to get HIPAA compliance.
Vanta
VantaExternal reviews
2,132 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Best tool for automating security management
What do you like best about the product?
What I like about Vanta is how it takes care of most of my compliance work automatically. It handles security checks, manages policies, and sends alerts if there’s an issue, which keeps things simple and helps me stay compliant without much hassle.
What do you dislike about the product?
Vanta is great for compliance, it's very specialized, so if I need broader IT management features, I might still need to add other tools.
What problems is the product solving and how is that benefiting you?
Managing security policies used to feel overwhelming, but with Vanta, it's much easier. The platform provides templates and a simple step-by-step policy builder, which helps me create and manage compliance documents without the stress.
Vanta is very informative and great at guidance
What do you like best about the product?
automatic integration, draft policies, and organization
What do you dislike about the product?
Sometimes hard to find things. The links do help.
What problems is the product solving and how is that benefiting you?
assessment towards security certification.
Vanta- GRC automation
What do you like best about the product?
Centralized items and automation feature
What do you dislike about the product?
Not able to mark Control as N/A. The only option is deactivating , which is sometimes confusing
What problems is the product solving and how is that benefiting you?
We are having SOC2 Audit first time and we are leveraging Vanta for all our evidence collection and it realy helps speed up the process if you are going for any audit
First time Vanta user
What do you like best about the product?
Has a very logical and inline layout. Simple language with lots of help and tips.
What do you dislike about the product?
Not all menus and options are easy to find.
What problems is the product solving and how is that benefiting you?
We needed a tool to help us get SOCII compliant. Vanta has the tool, the integration and also the auditors available.
Best security & compliance tool on the market
What do you like best about the product?
great UI and a large number of available integrations
What do you dislike about the product?
Some of the functionalities are not available in the by default and have to be purchased additionally.
What problems is the product solving and how is that benefiting you?
Vanta is helping us to streamline our security & compliance efforts and automated a lot of our tasks, ultimately saving us money in the long term.
Streamlined compliance with API integrations for real-time monitoring
What is our primary use case?
How has it helped my organization?
We haven't seen any problem with that yet. That said, our company is a tiny 20-person company right now. We're probably six months ahead of where we should be in terms of doing compliance anyhow. We're not really at the critical masses yet, but we're trying to get a head start on it.
What is most valuable?
The fact it does the real-time integration with the APIs into our hosting service, which is AWS, can at times be painful - yet it's very effective. We get working pretty easily. They integrate into New Relic as a performance monitoring tool.
When there's a control in Vanta that says, 'I want to know if you are doing performance monitoring on a certain web server,' it goes and knows how to talk to New Relic and grab that information and make it part of your Vanta Viewport.
What needs improvement?
Every product has a lot of areas to improve. They have an AI generator for the system description for SOC 2, for example, however, the outline is a little sketchy. The system description has to have a little more insight or context about your business and why you're different. A true auditor will look at that closely. A lot of it is a little bit too automated and not really realistic. One area that they tout as being a real-time savings, we haven't found that to be a time savings yet.
For how long have I used the solution?
I've been using Vanta for about a year and a half.
What do I think about the stability of the solution?
I haven't seen a fail yet. But I am only using the tool about ten hours a week, and I'm a contractor as well, so I'm not working at this every day. But every time I seem to need it, it works.
What do I think about the scalability of the solution?
We haven't seen any problem with that yet. Our company is a tiny twenty-person company right now. We're probably six months ahead of where we should be in terms of doing compliance anyhow. We're not really at the critical masses yet, but we're trying to get a head start on it.
How are customer service and support?
I've had experience with both tech support as well as with their customer success. They're interchangeable at some point, at least for our size business. I would give them at least eight out of ten. They've been responsive, which is the most important thing. They seem to come back, and they give you good answers, and they give you good options to pursue what you're trying to do.
How would you rate customer service and support?
Positive
How was the initial setup?
It's a fairly large learning curve to get going. Not impossibly so. Once you get familiar with the system and where things are located, then you can work around it reasonably well. It's more tolerant as you get to know the product a little more. Initially, they're not very clear about the differences between the need for evidence, so-called evidence, and what would be automated.
What was our ROI?
We're just not at scale to even evaluate that. And even if you could, it's hard to evaluate something like, okay, this company is running in a compliant way versus they're cutting corners. It's hard to attach a value to that.
What's my experience with pricing, setup cost, and licensing?
Seems reasonable. We just renewed. I don't have a lot of experience in this space, but this is the first generation of automation products for purposes of compliance. There are a group of different companies out there, like Drata. They all seem to be similarly priced.
What other advice do I have?
They've done a good job, actually. I can't tell if they're a leader or not. All I know is that it gets us that seems to be constructive right now. We're not investing that much money.
I'd rate the solution eight out of ten.
Implementing SOC2 with Vanta
What do you like best about the product?
Give us guidance on controls to implement
What do you dislike about the product?
Performance when you click on something like a control. very slow
What problems is the product solving and how is that benefiting you?
Tracking all evidences from multiple compliancy
Vanta - honest feedback
What do you like best about the product?
Vanta has an excellent user interface, making it easy to use, and the availability of helpful resources is a great advantage.
What do you dislike about the product?
The customer support response can be a bit delayed at times.
What problems is the product solving and how is that benefiting you?
Audit management.
Great for managing Compliance and Audits
What do you like best about the product?
One place to manage documents for audits. Evidence and supports compiles easily. Easy to access and intintegrate into systems.
What do you dislike about the product?
potentially lots of emails and notifications to users that may be ignored or not understood.
Internal users may require significant handholding.
Internal users may require significant handholding.
What problems is the product solving and how is that benefiting you?
Complete SOC2 Type 2 audit
Great experience so far seamless setup and ease of use!
What do you like best about the product?
Vanta was easy to "plug and play" right out of the box. An ever increasing number of integration options make the implementation nearly seamless. With minimal effort we were able to assess our baselines of compliance in frameworks critical to our industry. Bi-weekly meetings with a customer success manager really helped us strategize our limited capacity on big ticket items. I review Vanta everyday to ensure we are regularly making progress towards our compliance and security goals. We are in the infancy of our Trust Center use and already seeing a positive trend in traffic with plans to implement the beta revenue impact module. Recent introduction of an AI based Trust Center chat bot is also really intriguing. We love to see the continued dedication to product growth with a trusted partner!
What do you dislike about the product?
Some of the integrations require a dedicated SSO like Okta or atlease one that supports a SCIM bridge (currently unavailable for our Google Workspace). Seeing how well the integration works in the realm of onboardin, offboarding, and access reviews makes them a bit of a tease but we manage.
What problems is the product solving and how is that benefiting you?
Before Vanta we lacked a lot of compliance required policies, controls, and processes. Vanta's policy builder as well as their controls, tests, and documentation tracking have made a huge impact to our baseline compliance requirements. From fixing what was broken or outright missing, to mainting configuration management on cloud hosted tools ensuring we don't regress in compliance when assessing changes.
showing 401 - 410