Vanta
VantaExternal reviews
2,133 reviews
from
and
External reviews are not included in the AWS star rating for the product.
A great solution for a growing SaaS company
What do you like best about the product?
Vanta has given our small company a path to grow and mature in the SaaS world. With more emphasis put on cybersecurity in today's world, Vanta has made it simple to improve standards and practices.
I like the automated training for our staff. I like the UI overall, and how to see policy, document, and control details in an intuitive way. I like the automation in tests.
I like the automated training for our staff. I like the UI overall, and how to see policy, document, and control details in an intuitive way. I like the automation in tests.
What do you dislike about the product?
More automation for tests and documents would be nice. While the structure of our frameworks is intuitive, I think the integrations being deepened for more automatic checks for requirements could make this solution even better.
What problems is the product solving and how is that benefiting you?
Vanta is our platform for tracking and satisfying cybersecurity compliance. Our current and future clients benefit from knowing that we adhere to accepted standards for security compliance in our policies and procedures, and that we have invested the time, money, and effort into being trustworthy stewards of our users' data handling.
Vanta: Essential for SOC 2 Compliance, But UI Needs Work
What do you like best about the product?
I truly appreciate how Vanta simplifies our compliance process, specifically by managing various compliance aspects and enabling us to be SOC 2 certified. This certification significantly bolstered our business reputation. I find immense value in the efficiency Vanta brings by allowing us to seamlessly track our employees, organize policy additions, and handle their acceptance without cumbersome one-on-one discussions, thanks to the ability to send out policy packets. The remediation and status filters stand out for me because they are incredibly easy to use and helpful when assigned correctly. These features undoubtedly streamline our workflow and make compliance management much less burdensome. The overall experience with Vanta has been so positive that, knowing what we do now, I would repurchase it multiple times over.
What do you dislike about the product?
I found the initial setup process with Vanta to be very time-consuming. It needed substantial efforts to build out all necessary components and to learn the system before adding our employees. Vanta's interface could also be improved; it is currently all one color, which makes navigation difficult. I've learned my way around, but it would be more user-friendly with a clear breakdown of tabs on the left-hand side. Additionally, the pricing is not clearly outlined on the website or readily available in a quote, which makes planning and budgeting more challenging.
What problems is the product solving and how is that benefiting you?
I use Vanta to ensure SOC 2 compliance, tracking policies and employee acknowledgments, which strengthens our business reputation and streamlines internal processes with policy packets.
Overall good experience, some room for improvement especially for smaller companies
What do you like best about the product?
Streamlining the work with Auditors, making it much easier to tick the boxes that are going to be required for compliance.
Some of the automated checks are really nice to ensure compliance over time, and niceties like the trust page are a good bonus.
Some of the automated checks are really nice to ensure compliance over time, and niceties like the trust page are a good bonus.
What do you dislike about the product?
Some of the automated checks and tests are a bit coarse and generic - there are things that make sense for larger companies that don't always make sense for small startups and could be more streamlined.
Also relevant not just for startups - the controls around ensuring code in GitHub gets reviewed before pushing to production are coarse and not well designed to actually enable good security and best practices. This is a combination of how GitHub and Vanta work together, ultimately making it difficult to do benign automations that shouldn't need human review, and forcing us to do more complicated workaround for no security benefit.
Also relevant not just for startups - the controls around ensuring code in GitHub gets reviewed before pushing to production are coarse and not well designed to actually enable good security and best practices. This is a combination of how GitHub and Vanta work together, ultimately making it difficult to do benign automations that shouldn't need human review, and forcing us to do more complicated workaround for no security benefit.
What problems is the product solving and how is that benefiting you?
Helping us manage the SOC2 compliance process.
Our model - AI company using pure cloud and Infrastructure as Code
What do you like best about the product?
Integrations, streamlining workflows, acts as a document repo, single system of record, visibility of compliance against standards in real time, audit access, etc. The pre-canned documentation, to start 42001, for example, are really helpful.
What do you dislike about the product?
The whole platform is super-needy, you can spend all day, every day trying to evidence or address alerts, it can be overwhelming.
What problems is the product solving and how is that benefiting you?
Single pane of glass. Still, with the Vendor management module, we would like a dedicated "slot" to attached contracts, rather than have to add them to the evidence panel.
Vanta is an incredible management software for all things security compliance.
What do you like best about the product?
I appreciate Vanta's constant reminders about tasks that need to be completed. This automation helps to keep me on task. I use Vanta every week, and it's a good check for our internal team to make sure we are most up to date with our security procedures. Vanta also has a great team that provides advice, technical support, and access to new products. Vanta was the reason we were able to pass our ISO 27001 audit with no major nonconformities.
What do you dislike about the product?
We worked with VioletX at the beginning, which I believe is a third-party partner of Vanta that provides support when you are first getting started. They were not incredibly accessible and it was clear they had many clients and information they had to manage that made it hard for them to truly focus on each client. If we were to go back, we would most likely not work with VioletX again as the Vanta platform itself has clear instructions for each action item.
What problems is the product solving and how is that benefiting you?
To gain more clients, we need to have ISO 27001 certification. Vanta has streamlined that proess for us.
Easy to track known vulnerabilites
What do you like best about the product?
It makes action items for vulnerabilites easy as they are in priority order
What do you dislike about the product?
The UI is not great. I hate that when clicking on vulnerabilites it takes me to the github repo ... I can do that all on my own.
What problems is the product solving and how is that benefiting you?
Ensure SOC2 compliance
Seamless and connected across different compliance projects
What do you like best about the product?
We've done several compliance processes and it helps that Vanta has everything seamless and connected. The user experience and platform navigation are intuitive, everything is clear and templates are very helpful.
We've been using Vanta for a few years now and it's our go-to partner. When we're building a compliance roadmap, Vanta is a trusted partner - the first thing we consider is if a compliance standard/certificate is supported by Vanta. The second thing is a consultation with a Vanta representative to build the timeline, and schedule, learn best practices, etc.
At this point, Vanta's integration is so helpful that it doesn't make sense to start a compliance project outside it. Why? Because we have added many controls, documents, and policies for various compliance reasons and when we start a new certification, we're automatically at 30-50% completion. Nothing compares to that.
We've been using Vanta for a few years now and it's our go-to partner. When we're building a compliance roadmap, Vanta is a trusted partner - the first thing we consider is if a compliance standard/certificate is supported by Vanta. The second thing is a consultation with a Vanta representative to build the timeline, and schedule, learn best practices, etc.
At this point, Vanta's integration is so helpful that it doesn't make sense to start a compliance project outside it. Why? Because we have added many controls, documents, and policies for various compliance reasons and when we start a new certification, we're automatically at 30-50% completion. Nothing compares to that.
What do you dislike about the product?
I like how it works; it exceeds our expectations. The only issue we had was that some integrations occasionally disconnected, but customer service helped resolve this.
What problems is the product solving and how is that benefiting you?
We're a startup and our clients expect certain standards. Vanta helps us meet them and to receive external validation of these standards via compliance audits and badges.
On top of that, in a startup, one person wears many hats, so any type of automatization helps tremendously. Vanta's connectivity across compliance certificates is a big win, both for Vanta, and for us - it boosts momentum, reduces manual workload, accelerates completion and it removes repetitiveness.
On top of that, in a startup, one person wears many hats, so any type of automatization helps tremendously. Vanta's connectivity across compliance certificates is a big win, both for Vanta, and for us - it boosts momentum, reduces manual workload, accelerates completion and it removes repetitiveness.
Security and Compliance with ease.
What do you like best about the product?
The platform is exceptionally user-friendly, and its integration with any infrastructure is relatively straightforward. It serves as an invaluable tool for startups to ensure compliance within their organizations. The customer support provided during and after audits is truly exceptional. Additionally, the platform’s continuous monitoring capabilities and integration features enable organizations to effectively assess and address infosec compliance requirements.
Vanta has already revolutionized the industry. To ensure inclusivity, a launchpad should be established for small startups that lack the financial resources to afford the current pricing structure. A platform that adopts a more welcoming pricing strategy would be beneficial in this regard.
Vanta has already revolutionized the industry. To ensure inclusivity, a launchpad should be established for small startups that lack the financial resources to afford the current pricing structure. A platform that adopts a more welcoming pricing strategy would be beneficial in this regard.
What do you dislike about the product?
We have had a great terms for our renewal of contract. So no complaints there.
What problems is the product solving and how is that benefiting you?
Achieving compliance milestones in significantly reduced timeframes.
Legal Counsel
What do you like best about the product?
Organize and simplify the extensive lists of policies you can implement.
What do you dislike about the product?
Useful for other audit requirements, however, unclear around other functionalities.
What problems is the product solving and how is that benefiting you?
Sorting out various compliance obligations.
GRC
What do you like best about the product?
Automated alerts of the tasks and the deadlines.
What do you dislike about the product?
Several features are required to be added like
Internal audit with questions.
Internal audit with questions.
What problems is the product solving and how is that benefiting you?
Timely completion of Tasks with timeline.
showing 811 - 820