Streamlined Compliance and User-Friendly Experience
What do you like best about the product?
I like Vanta's UI and ease of use—they're very user-friendly and self-explanatory, which is super helpful. The custom integrations are great as they help gauge compliance and keep track of changes within the organization. The AI agent is useful, and the dashboard/trust center is a great feature for prospective clients to get an overview of my company's GRC efforts and access evidence easily. Setting up Vanta was fairly straightforward and hassle-free, and I really appreciate the roadmap structure.
What do you dislike about the product?
I find more custom integrations would be useful to make connecting with third-party vendors easier. The training videos could use a revamp to be more interactive and in-depth. The customer service process could be improved if I could set up a call easily with a representative. More content can be made available for cybersecurity training for employees.
What problems is the product solving and how is that benefiting you?
I use Vanta for automating evidence collection and presenting it for audits. It offers a unified dashboard, a roadmap for remediating controls, and custom integrations that help with compliance and real-time updates.
Effortless Compliance Reporting at Scale
What do you like best about the product?
Ability to scale distribution of compliance report to thousands to customers.
What do you dislike about the product?
UI can be improved and make it easy to navigate
What problems is the product solving and how is that benefiting you?
The platform allows me to share compliance documentation with thousands of customers as needed, while also giving me strong control over who can access the documents and the ability to monitor that access effectively.
Reduces Consultant Workload Efficiently
What do you like best about the product?
It reduces the workload on Consultants thus gives us time to focus on other deliverables
What do you dislike about the product?
Not all standards and frameworks are added, and sometimes the help doesn't help
What problems is the product solving and how is that benefiting you?
Vanta gives a one stop shop for all know compliances in a single tool. These frameworks are easily added which reduces workloads on the consultants.
Comprehensive Security Compliance Made Easy, But Price
What do you like best about the product?
Vanta provides the complete solution for all security: SOC 2, HIPAA, ISO, and GDPR.
once you have onboarded on Vanta, the platform will provide the details which task should be done, and if you stuck in any policy or test, the support team will help you out
What do you dislike about the product?
The major factor was pricing; when comparing with other software, Vanta was a bit expensive
What problems is the product solving and how is that benefiting you?
As mentioned, it will solve the major problem of security audit.
As it will provide the complete solution for your org, and you can have multiple integrations as well
Effortless Compliance Tracking and Integration
What do you like best about the product?
I appreciate that Vanta integrates with most applications like BambooHR, AWS, and MongoDB Atlas, which helps in tracking all kinds of compliance issues. I like how it automatically gets vulnerability details from AWS Inspector and tracks to resolve them within the SLA period. Using Vanta, we can track and shoot down vulnerability issues very quickly and effectively. Additionally, the integration was a very easy peasy process.
What do you dislike about the product?
It can be used for integration with self-hosted software like self-hosted Mongo or MySQL servers.
What problems is the product solving and how is that benefiting you?
I use Vanta for compliance tracking; it integrates with apps like BambooHR, AWS, and MongoDB Atlas, tracking compliance and resolving issues. It pulls vulnerability details from AWS Inspector and helps us quickly resolve vulnerabilities effectively.
Certification project has become streamlined and now supports accurate HITRUST compliance evidence
What is our primary use case?
My main use case is certification.
I used Vanta to establish a HITRUST certification for a telecommunications organization, including evidence collection, report generation, compliance metrics, and data integrity for the implementation.
I no longer use Vanta day-to-day because I completed the project, but if I were to use it day-to-day, I would definitely use it for evidence collection as well as performance metrics for key performance indicators for framework compliance.
How has it helped my organization?
Vanta has positively impacted my organization by streamlining the whole HITRUST R2 assessment process.
It streamlined the process by reducing manual work because the data transferred from Vanta into the HITRUST CSF portal.
What is most valuable?
The best features Vanta offers in my opinion are the key performance indicators for framework compliance as well as integration into internal environments and accurate data provided towards compliance frameworks and metrics.
I was not directly involved with the integration into internal environments, but I was involved in the data integrity after the integration took place, where I performed data integrity tests to ensure that the data that integrated was correct in compliance towards the frameworks.
The benefits that I noticed from Vanta were the integration and how it helped streamline the HITRUST R2 assessment.
What needs improvement?
To improve Vanta, I suggest continuing to improve the areas of integration with the HITRUST CSF for R2 assessments. It would be helpful for much of the testing of the evidence to be done within Vanta's environment and then prior to the testing, to have the information tested and uploaded into the CSF portal.
For how long have I used the solution?
I have used Vanta twice in the past year.
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
Vanta's scalability is very good.
How are customer service and support?
The customer support from Vanta is good.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I did not previously use a different solution.
Which other solutions did I evaluate?
Before choosing Vanta, I did not evaluate other options.
What other advice do I have?
I would tell others looking into using Vanta to use it for HITRUST E1 and I1 assessments, as the R2 assessments are still a work in progress. I would rate this product an 8.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Outstanding Support | Seamless Automation/Transition | Excellent Automated Trust Center
What do you like best about the product?
Excellent customer service. Automation. Human and AI assistance with transition from other platforms.
What do you dislike about the product?
There's a bit of chaos at first with the setup and number of features, but ultimately this works out for the best.
What problems is the product solving and how is that benefiting you?
The greatest benefit is just having all security and compliance monitoring "in one place". Furthermore, I particularly like Vanta's Trust Center and the ease of Trust Center updating and configuration,
Streamlined SOC2 Compliance with Stellar Support
What do you like best about the product?
I appreciate how Vanta streamlines the process and reduces the overall work effort, making it easy to use. I also really like the support provided by Vanta. The initial setup was great too, as a Vanta resource did most of the migration, which made the transition smoother.
What do you dislike about the product?
I need a better overview of the audit process and there's confusion between evidence in Vanta and what's on the Audit page. I'm also not clear on where to put comments.
What problems is the product solving and how is that benefiting you?
Vanta streamlines the SOC2 process, making it easy to use and reducing the overall work effort.
Automates Compliance, Easy to Use but Needs More Customization
What do you like best about the product?
I appreciate Vanta for its ease of use, which leads to faster adoption across the team. It helps in automating compliance and reducing manual work, which I find quite beneficial. The initial setup was easy especially because the customer representative was a big help in getting us set up. Vanta also integrates with a host of applications from which it pulls information for compliance.
What do you dislike about the product?
There are some limitations to reporting and customization. Some automation requires manual intervention.
What problems is the product solving and how is that benefiting you?
Vanta helps in automating compliance and reducing manual work.
Compliance workflows have become organized and automation supports ongoing healthcare audits
What is our primary use case?
The main use cases are all healthcare related and specifically SOC and HIPAA compliance.
What is most valuable?
In my opinion, the best features of Vanta include a lot of functionalities. The document control makes sense to me and works pretty well. All our policy documents are organized so I always know where I can go to get the latest and greatest version of those. I think that's a relatively strong feature. It ties in with automation and some of the controls that we have as part of our policies, and the automation and some of the infrastructure testing is pretty handy. Vanta also does a strong job on things like corporate risk analysis, where they pre-build a tabulated rubric for you to use so I didn't have to create that from scratch. I think that's handy.
In general, some of those things they've done make things handier. There's more talk these days about AI features and I'm sure that's all possible, but we haven't had a chance to experience any of that just yet. We're just trying to get the basic compliance program bootstrapped.
Vanta provides a necessary repository that any compliance expert will look at and recognize right away. Being in the healthcare space and with Vanta, there are nothing but difficult problems. This is not one of them. Having Vanta, we know we're doing the industry-approved procedures. The company seems to be going in the right direction for us. We're just drafting on the capabilities that they have. I would give them at least an eight, maybe even a nine. I don't know enough about the competitive offers or we don't have a big enough problem with this that we feel anybody out there that's better or could do better.
What needs improvement?
There are always tons of rooms for improvement for Vanta. I kind of exaggerated a little bit about the policy control. I don't really love the way they handle the revision management of that feature. If I'm on V1 of the policy document and I make some changes to it, then I get rid of V1 and then I re-upload V2. It's not that it keeps a running history of each of the different revisions. A little bit of an issue with that, but workable. I don't really have any negative complaint right now that would be worthwhile expressing. It's just that there's a lot of features. The UI is not super intuitive, but now that I've worked with it for a couple of years, I know how to navigate and get around. Initially, it was a little bit of a struggle understanding how these things would all work.
For how long have I used the solution?
I have dealt with Vanta for two years.
What do I think about the stability of the solution?
There are connection problems about 50% of the time because of the automated evidence collection.
How are customer service and support?
Support is quite good. On a scale of one to ten, if I were to rate them for support, I would say their human support is quite good. Every time I ask their customer success team, if I get a technical question and I've done this half a dozen times in the last year, they will respond within the next 24 hours. If I leave a message at 7:00 or 8:00 at night, I'll have the message the next morning because their London team will pick up on it and respond. I find their success team and their customer support to be pretty effective. They come back and make good recommendations and I think they do actually care about us, who's a relatively low-end customer for them. That's very positive. From a sales point of view, I didn't find them difficult to work with either. In fact, we negotiated a favorable deal where we extended the contract for two years as opposed to one and they gave us the price we wanted. On both fronts, they've treated us well from a customer support point of view.
How would you rate customer service and support?
Which other solutions did I evaluate?
Vanta is not used for real-time security posture monitoring. It's pseudo real-time. If an alarm happens overnight or if there's an expiration of an SLA because there's been a vulnerability that hasn't been addressed in 45 days and now it's the 46th day, it will let you know that immediately. We use New Relic for most of the real-time monitoring. We have integrations into our cloud service with New Relic.
What other advice do I have?
I am using Vanta for my consulting gig with the healthcare company in San Francisco, Healthx. We are highly integrated with AWS, so the integration capabilities with AWS or Google Cloud for our operations are not really a question. It's the heart and soul of what we're building. It's not that we have half the service with AWS and half the service with Google Cloud. We are AWS. There isn't that much integration. There is integration between Vanta and AWS, but I don't think it's as integral as our software integration with AWS. Our system basically works on their resources and it's tightly integrated.
At Healthx, I do several different things, but generally I'm a consultant working on the compliance program. My background is more as a VP of engineering, but I do this because I know the guys and I know the founding team. My overall rating for Vanta is eight out of ten in terms of customer satisfaction and customer support.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
