Vanta
VantaExternal reviews
2,419 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Efficient Compliance Tool with High Costs
What do you like best about the product?
I use Vanta for GRC activities, and I find it very helpful to manage compliance in an automated way. I appreciate the fact that it includes lots of AI features, which help reduce manual work and ensure error-free processes. I particularly like the policy writing feature, which is the best part for me, and the various checklists for all different frameworks are so good and robust. The initial setup was good overall, despite integrations taking some time initially. Overall, using Vanta has been a good experience.
What do you dislike about the product?
The tool is a bit expensive so it becomes difficult to convince the customer for taking the same. Some customers report the support team is a bit slow in urgent cases.
What problems is the product solving and how is that benefiting you?
I use Vanta to manage compliance in an automated way, reducing manual work and errors with its AI features.
Comprehensive Compliance Management in One Place
What do you like best about the product?
I appreciate Vanta for coordinating tasks for different individuals and tracking risks seamlessly. I find it highly convenient to have document approvals and compliance tests automated in a single place. It's great that Vanta covers employee computer security checks and security trainings as well. I like that Vanta has a lot of relevant features built into a single tool, so I don't need to search for various documents across the company. I personally use the Compliance, Risk, Assets, and Personnel tools a lot, and I find the automated tests incredibly helpful.
What do you dislike about the product?
Some functionality is a bit dispersed or obscure. For example, the integrations tab for managing the scope of different services is a bit buried compared to how frequently we need to interact with it.
What problems is the product solving and how is that benefiting you?
I use Vanta to coordinate tasks, track risks, manage document approval, and automate compliance tests. It centralizes management, including employee security checks and trainings, making everything much easier.
Effortless Compliance Automation with Minor Export Issues
What do you like best about the product?
I really appreciate Vanta for its evidence tracking and assigning ownership features, which help remove ambiguity around who owns what and how ready we are for compliance. The AI to check if evidence is fantastic, acting as a massive time saver, and the auditor mode really stood out since it helped us pass our audit. Vanta automates compliance efficiently, reducing the time and effort I have to spend checking each piece of evidence and ensuring everything is in an easy-to-view location for the auditor. The initial setup was straightforward with no issues.
What do you dislike about the product?
The only area it is weaker on currently is SAQ exports. We often get complex webforms and spreadsheets, so when we upload and get the answers, the export messes up the format.
What problems is the product solving and how is that benefiting you?
I use Vanta for evidence tracking and assigning ownership, which removes ambiguity. The AI feature is a massive time saver, and auditor mode simplifies compliance checks, reducing time and effort in preparing evidence for audits.
Extremely Helpful Policy Builder
What do you like best about the product?
The policy builder was extremely helpful
What do you dislike about the product?
I've asked to integrate Eloomi but have not received a response.
What problems is the product solving and how is that benefiting you?
It is helping my agency incorporate the controls suggested by the ISO 27001 standard in a more organised way.
Amazing UX, good tools, potential for a lot more.
What do you like best about the product?
I complete the internal audit for our ISO 27001 compliance so the Controls dashboard and filtering help a ton in guiding the audit and staying organized.
What do you dislike about the product?
That it is only a compliance tracking tool when it has potential for much more. We were hoping to use it for our ISO 9001 compliance as well, essentially utilize it as a QMS, but the functionality is not there yet. It would have been really helpful, especially considering that all other tools in the market are severely outdated.
What problems is the product solving and how is that benefiting you?
Compliance management for ISO 27001, SOC2, and training management for ISO9001
Great Starting Point for First-Time Certification Prep
What do you like best about the product?
This can be helpful if you’re getting certified for the first time and aren’t sure where to start.
What do you dislike about the product?
You don’t need to fully understand every control for it to work.
What problems is the product solving and how is that benefiting you?
Even small businesses can obtain certification.
Automates Compliance with Continuous Monitoring
What do you like best about the product?
I appreciate that Vanta functions continuously, almost like a background process, which minimizes guesswork once processes are in place. It transforms the efficiency and credibility of our security and compliance efforts, making them faster, stronger, and easier to defend. I also like how Vanta integrates with our tools like Google Workspace, AWS, GitHub, and others to automate evidence collection and monitor compliance continuously, providing a centralized, real-time view of our security posture.
What do you dislike about the product?
Vanta is strong overall, but it's not without friction, especially once you're actually living in it day to day. The gaps tend to show up in nuance and edge cases rather than core functionality. Vanta could be significantly stronger by becoming more context-aware, understanding not just whether something is compliant, but why, how, and under what conditions.
What problems is the product solving and how is that benefiting you?
I use Vanta for automated compliance of SOC 2. It provides reminders for evidence with context and reasoning, enhancing efficiency and credibility in compliance work. Vanta eliminates tedious manual uploads, allowing continuous monitoring and a centralized real-time security view.
Efficient Compliance Management, Needs UI Tweaks
What do you like best about the product?
I like how Vanta helps in managing our company's infosec compliance processes by keeping us up to date and automating some procedures. The notifications for overdue tasks are really helpful. What I appreciate most is that we don't need a full-time head to manage everything. It's impressive that Vanta does everything you'd like it to do, and it's certainly worth paying for. Setting it up was pretty easy, especially with the templates Vanta provides for creating policies.
What do you dislike about the product?
The UI is a bit disorganized and it can occasionally be hard to find what you are looking for or figure out how to fix a test that is overdue.
What problems is the product solving and how is that benefiting you?
Vanta automates infosec compliance processes, keeps us updated, and sends overdue task notifications, eliminating the need for a full-time manager.
Streamlined Compliance with Some Filtering Hiccups
What do you like best about the product?
I find that audits with Vanta have become a no-brainer. I also really like the onboarding process. It's so well-structured that even someone who doesn't know much about compliance can get ISO or SOC2 compliant on their own by following the onboarding steps, which I think is pretty impressive.
What do you dislike about the product?
Filtering throughout the platform does not work well. Scoping some tests only to relevant assets/people is not always straightforward. When I type in the search bar, there's a delay between what I type and what is displayed, and often some characters typed are skipped.
What problems is the product solving and how is that benefiting you?
I use Vanta to track tasks for legal and regulatory compliance, automate evidence gathering, distribute compliance work, share security documents, and pre-fill security questionnaires. It makes audits simple and the onboarding process helps achieve compliance easily.
Senior Product Manager
What do you like best about the product?
I have a clear understanding of what needs to be done.
What do you dislike about the product?
At times, the notifications would become overwhelming.
What problems is the product solving and how is that benefiting you?
Removing the project-management aspect from a SOC 2 compliance audit.
showing 11 - 20