Vanta

What do you like best about the product?

The feature I like the most is its continuous monitoring. Instead of waiting until an audit to discover issues, it alerts me immediately if a device becomes non-compliant or if multi-factor authentication is disabled. I also like the centralized dashboard because it gives me a clear view of my organization's overall security and compliance status. It significantly reduces the time I spend on repetitive compliance tasks and manual evidence collection, and it eliminates the need to gather screenshots and documentation from multiple systems before every audit. It simplifies access reviews and policy tracking, which lets my IT team focus more on strengthening infrastructure and supporting employees. The automated monitoring helps us identify security gaps early, reducing operational risk and improving overall compliance. As a real example, during a quarterly access review, Vanta generated an alert that a recently onboarded engineer did not have MFA enabled on their Google Workspace and flagged the control as non-compliant within a few hours, so I contacted the employee, had them enforce MFA through Okta, and verified the change in Vanta. It provides alerts and clear remediation guidance that help me review and resolve compliance issues quickly and keep us audit ready. It's easy to use, and the initial setup was easy. I also use it with Jira for remediation tracking and Slack for notifications.

What do you dislike about the product?

Vanta is easy to use, but some of the advanced settings and integrations require technical knowledge to configure correctly. Certain alerts can also generate extra investigation work before I can tell whether they're genuine compliance issues. And some of the reporting features lack the level of detail I need for executive presentations.

What problems is the product solving and how is that benefiting you?

I use Vanta to cut down time on repetitive compliance tasks and manual evidence collection, so I no longer gather screenshots from multiple systems before audits. It simplifies access reviews and policy tracking, and its automated monitoring helps us spot security gaps early, reducing operational risk and keeping us audit ready.

What do you like best about the product?

What I like best about Vanta is how much time it saves... It takess lot of the manual work out of compliance by automating evidence collection and monitoring, which makes staying audit-ready much easier. I also like that it gives us a clear and professional way to showcase Fenergo's security and compliance posture through the Trust Center, helping build trust with customers and prospects..

What do you dislike about the product?

Vanta has been really useful overall, but I think some areas could be more flexible. There are times when workflows don't quite match how we operate, and it can take a bit of digging to understand why a test has failed or what action is needed. More customization and clearer guidance would help.

What problems is the product solving and how is that benefiting you?

Vanta is helping solve a lot of the administrative burden that comes with managing compliance. Instead of spending time chasing evidence, tracking control ownership, or preparing for audits manually, much of that information is collected and monitored automatically.

For me, that means less time on repetitive tasks and more & moree time focusing on actual compliance and security improvements. It also gives better visibility into our overall compliance posture and makes it easier to demonstrate trust and assurance to customers and auditors when needed...

What do you like best about the product?

I use Vanta for automating security compliance and to monitor our cloud structure. It easily integrates with systems like AWS, Google Workspace, GitHub, and endpoint management tools to collect audit evidence, monitor security controls, and identify compliance gaps wherever necessary, and it simplifies audit preparation for frameworks such as SOC 2 and ISO 27001. The feature I like the most is the automation it provides. Instead of manually collecting evidence and checking security controls, Vanta continuously performs these tasks in the background, which significantly reduces audit preparation time. It gives me a centralized, real-time view of compliance status, failed security checks, and remediation tasks across all integrated systems. During a SOC 2 audit, Vanta automatically collected evidence from AWS and other similar platforms throughout the year, so instead of spending several weeks gathering screenshots and access logs manually, everything was already organized in one dashboard. We completed auditor requests within days and reduced audit preparation time by nearly half while improving accuracy and transparency. It automatically checks controls such as MFA enforcement, device encryption, employee onboarding, user access reviews, and cloud security configuration through integrated systems. Failed checks generate alerts and remediation tasks for the appropriate teams, and this continuous automation keeps compliance up to date and ensures we are always audit ready throughout the year. I like the continuous evidence collection, which ensures evidence is always current, significantly reduces repetitive administrative work, and minimizes human error. IT security has benefited the most, since it reduces their manual workload now that it's automated and reduces human errors. There is a 60-70% reduction in audit time, we reduced compliance-related manual tasks, responded to auditors faster, and identified security gaps much earlier through continuous monitoring. It collaborates well between teams, hands off the work smoothly, and the remediation of tasks is well organized with easy transitions. The initial setup was moderately easy for us.

What do you dislike about the product?

Even though it's highly effective, I find the customization and reporting capabilities somewhat limited for organizations with unique compliance requirements. Some integrations require additional manual configuration. And for complex environments, I need extra tools to get complete visibility and meet specialized security or regulatory needs.

What problems is the product solving and how is that benefiting you?

Before Vanta I had to manage security compliance manually. Now it automates evidence collection, continuously monitors security controls, and identifies gaps for audits like SOC 2 and ISO 27001. It cuts our audit time by 60-70%, reduces manual work and human errors, and helps maintain customer trust.

What do you like best about the product?

What I like best about Vanta is how it brings security compliance into one organized, easy-to-manage platform. The dashboard is clean and intuitive, making it simple to see which security controls are complete and which ones still require attention. Instead of tracking evidence manually, the automated integrations collect information from many of the tools our team already uses, which saves a significant amount of time and reduces repetitive work.

I also appreciate the continuous monitoring features because they help identify potential issues early instead of waiting until an audit. That gives our team more confidence that we're staying compliant throughout the year rather than scrambling before review time. The onboarding experience was straightforward, and the documentation made it easy to understand what each control required.

One benefit I didn't expect was how much easier collaboration became. Since evidence, tasks, and compliance progress are all centralized, everyone has visibility into what needs to be done without relying on long email threads or spreadsheets. Overall, Vanta has made the compliance process more efficient, transparent, and much less stressful.

What do you dislike about the product?

One area where Vanta could improve is making some of the compliance requirements more beginner-friendly. While the platform automates a lot of evidence collection, there are still controls that require manual interpretation, and it isn't always immediately clear what specific documentation is expected. More in-app examples or guided recommendations would help newer users complete these tasks with greater confidence.

As our organization connected more integrations, the amount of information in the dashboard increased significantly. Although it's comprehensive, it can sometimes feel overwhelming when trying to prioritize what needs immediate attention. Additional filtering, customizable views, or AI-powered prioritization could make the experience even more efficient.

Overall, these are usability improvements rather than major issues. The platform performs well and is reliable, but adding more contextual guidance and making navigation easier for first-time users would make an already strong product even better.

What problems is the product solving and how is that benefiting you?

Before using Vanta, keeping track of compliance requirements and collecting audit evidence was much more manual and time-consuming. Information was spread across different systems, making it difficult to know what was complete and what still needed attention. Vanta centralized those tasks by automatically collecting evidence through integrations, continuously monitoring security controls, and organizing compliance work in a single dashboard.

This has made it much easier to stay on top of ongoing compliance instead of scrambling before an audit. The automated reminders and real-time visibility into outstanding tasks have improved collaboration across the team because everyone can see progress in one place. Overall, Vanta has reduced administrative work, helped us identify potential issues earlier, and made the compliance process more organized and predictable, allowing us to spend more time on higher-value security initiatives instead of repetitive manual tracking.

What do you like best about the product?

One stop shop, minimal configuration. Most of the time "it just works". Having worked in this space in the past, I know what a nightmare it can be to keep integrations working and data flowing. While there are still friction points, Vanta is a huge improvement over tooling I have used in the past.

What do you dislike about the product?

I have had issues with integrations in the past. Generally human support is very helpful and able to get things sorted, but when I get routed to AI it is very unhelpful and just tells me to do things I have already tried.

What problems is the product solving and how is that benefiting you?

SOC2 compliance, user account housekeeping

What do you like best about the product?

I feel safe using it because I was hacked before, and now I’m afraid it could happen again and that I might lose the company’s data.

What do you dislike about the product?

Honestly, there isn’t much to say, but I’m still worried about my privacy since it monitors my I/O.

What problems is the product solving and how is that benefiting you?

Vanta automates our compliance processes, making it easier to collect evidence, monitor security controls, and prepare for audits while saving our team time.

What do you like best about the product?

I appreciate that Vanta acts like an automatic security personnel for our company's digital assets. Instead of manually scavenging, collecting files and screenshots to prove the company is regulatory compliant, it connects directly to the business tools and checks them automatically. The prime benefit is that it saves hundreds of hours of manual work. I also appreciate that it shows everything on one simple dashboard and gives clear instructions on how to remove any security flaws. The thing I like the most is that it watches everything in the background to make sure our client data remains confidential and stays protected.

What do you dislike about the product?

Sometimes I feel it sends too many alerts for tiny and miniscule issues. Setting it up at the very beginning took us a lot of time and technical access.

What problems is the product solving and how is that benefiting you?

The primary benefit is that it saves hundreds of hours of manual work. It shows everything on one simple dashboard and gives us instructions on how to fix any security flaws.

What do you like best about the product?

Integrations are easy to add. The tests help improve your security posture by highlighting areas you might have missed.

What do you dislike about the product?

It’s hard to customize the graphics in the policy document, and the changes don’t always apply.

What problems is the product solving and how is that benefiting you?

It complies with ISO 27001 and GDPR.

What do you like best about the product?

Vanta has made managing our security compliance much easier by automating tasks that used to take hours.

What do you dislike about the product?

I'd love to see more customization options for reporting and dashboards.

What problems is the product solving and how is that benefiting you?

Vanta takes the manual work out of compliance, saving us time and making audits much smoother.

What do you like best about the product?

It’s a very holistic and comprehensive system that covers everything we need to meet our SOC requirements, and it helps guide us through the process.

What do you dislike about the product?

I find it to be vague sometimes in its definitions and summaries.
The "How to Remediate" section often proves helpful

What problems is the product solving and how is that benefiting you?

It’s helping us work toward our SOC certification as a startup company, and it’s also allowing us to start agreements and contracts with new clients.