External reviews
External reviews are not included in the AWS star rating for the product.
Great foundation for SecOps
What do you like best about the product?
Vanta automates a ton of manual compliance work and offers good baseline controls that integrate with our most valuable systems.
What do you dislike about the product?
Varna’s fractured pricing complicates my experience and opinion of the product. They adopted a module-based pricing structure after we began usage. Some of the modules exceed our total contract value and don’t make sense to enable at that price point — limiting the total value of the product.
What problems is the product solving and how is that benefiting you?
Reducing the cost and effort of compliance overall and strengthening our security posture.
- Leave a Comment |
- Mark review as helpful
Okay for startups
What do you like best about the product?
* De-facto leader in the compliance domain
* Most vendors have integrations, so there is a lot of automation in place
* Easy to use once you get used to it and set everything up
* Most vendors have integrations, so there is a lot of automation in place
* Easy to use once you get used to it and set everything up
What do you dislike about the product?
* Default policies for SOC 2 are designed for medium and large enterprises, not early-stage startups
* There is no diff between policy versions, making it difficult to review/track changes
* Managing vendors is tough without additional add-ons from Vanta, have to do this separately
* Compliance roadmap page is not useful to get started
* There is no diff between policy versions, making it difficult to review/track changes
* Managing vendors is tough without additional add-ons from Vanta, have to do this separately
* Compliance roadmap page is not useful to get started
What problems is the product solving and how is that benefiting you?
SOC 2 Type II certification
Project manager
What do you like best about the product?
Vanta is a useful and user-friendly tool to manage certifications. it's easy to use and efficiant
What do you dislike about the product?
some ux could be better, we make many clicks to achieve to a goal
What problems is the product solving and how is that benefiting you?
it solves all management around the certification of soc2 that we are completing. if we didn't had vanta this would be very difficult to follow
6 months usage of Vanta
What do you like best about the product?
Vanta provides a robust GRC platform that excels at aggregating data and information across various systems, making it particularly well-suited for small and mid-sized businesses.**
The platform integrates seamlessly with existing systems, enabling efficient data collection, task management, and tracking. One of the standout features is its audit automation capabilities, which have significantly reduced the time required to implement audit processes and manage audit schedules.
Additionally, the questionnaire automation functionality is highly effective. The user-friendly interface simplifies the process of collecting, tracking, and maintaining questionnaires and associated knowledge bases. After evaluating several solutions for questionnaire automation, I’ve found Vanta to deliver some of the most impressive results in this area.
Vanta also offers valuable tools for risk management and for managing user onboarding and offboarding processes, including security awareness components. For organisations starting from scratch, Vanta provides a solid foundation for establishing effective compliance and security practices.
The platform integrates seamlessly with existing systems, enabling efficient data collection, task management, and tracking. One of the standout features is its audit automation capabilities, which have significantly reduced the time required to implement audit processes and manage audit schedules.
Additionally, the questionnaire automation functionality is highly effective. The user-friendly interface simplifies the process of collecting, tracking, and maintaining questionnaires and associated knowledge bases. After evaluating several solutions for questionnaire automation, I’ve found Vanta to deliver some of the most impressive results in this area.
Vanta also offers valuable tools for risk management and for managing user onboarding and offboarding processes, including security awareness components. For organisations starting from scratch, Vanta provides a solid foundation for establishing effective compliance and security practices.
What do you dislike about the product?
- There are still a few bugs present in the system. While most are not critical, there is one in the Audit module that I consider to be quite significant. That said, all bugs and improvement suggestions I've submitted to our account manager have been logged, and some have already been addressed.
- Certain automated tests for cloud environments (AWS and GCP) seem somewhat redundant. As a result, meeting Vanta's compliance checks requires additional effort in modifying infrastructure, or alternatively, dismissing the check — which isn't an ideal solution.
- The UI/UX could be improved, particularly in the Personnel module. Enhancements in this area would make the platform significantly more user-friendly.
- Certain automated tests for cloud environments (AWS and GCP) seem somewhat redundant. As a result, meeting Vanta's compliance checks requires additional effort in modifying infrastructure, or alternatively, dismissing the check — which isn't an ideal solution.
- The UI/UX could be improved, particularly in the Personnel module. Enhancements in this area would make the platform significantly more user-friendly.
What problems is the product solving and how is that benefiting you?
We significantly improve the way and time for audits, structure vendor management, aggregate data and information across the systems in more useful way.
Makes compliance and policy tracking much easier
What do you like best about the product?
Makes tracking policy, training, and compliance documents very easy. Templates make creating policy docs a breeze. The support team is always happy to help.
What do you dislike about the product?
There is so much int the system that it can sometimes be overwhelming.
What problems is the product solving and how is that benefiting you?
Helping us track our policy and compliance docs, audit portal for ISO 270001
The fast path to compliance
What do you like best about the product?
If you are new to compliance and want to fast-track your startup into it, vanta is the right tool for you. Guided by a quickstart workflow wizard, you will quickly setup all documents, risk management, vendor management, cloud monitoring and security stuff you need. No other solution has as many integrations with your already existing software ecosystem as vanta.
What do you dislike about the product?
It's still difficult to transition from another solution if you already are compliant to a framework. Integrations to open source solutions, on prem hardware and some other stuff is sorely missing.
What problems is the product solving and how is that benefiting you?
Streamline the tedious compliance assertion process and make it continuous
Totally satisfied by Vanta
What do you like best about the product?
It helped us having the soc 2 certification. Also, great APIs to manage the application.
What do you dislike about the product?
Nothing particularly. Very satisfied of the application
What problems is the product solving and how is that benefiting you?
We wanted to have an overview to pass the soc 2 certification. It was very helpful to have this app.
Intelligent, cohesive and user-friendly compliance platform
What do you like best about the product?
Vanta is an excellent compliance platform - easy to use, very intuitive, and fully equipped for audit preparation. I have no previous experience in compliance and I found the amount of work overwhelming, especially for a SME SaaS company, but Vanta literally made my life easier! I absolutely love the pre-built policy templates, the automated tests and the clear and detailed guidance for submitting evidence. The variety of integrations also allows to connect tools that can then be monitored automatically. It is a tool that facilitates continuity in compliance work without losing track of the implemented and pending items. I also love how Vanta incentives progress tracking with percentages. It is such a small detail but to me makes all the difference. Lastly, whenever I need extra support I find very detailed and well-structured resources in Vanta's Help Center, and when I had to reach out to their customer support team, they answer in light speed and solve effectively any issues within the same day at the latest. That's something you don't see in many SaaS platforms.
What do you dislike about the product?
The only major gap I've found in the last 4 months of intensive use, is that it's not possible to support multiple integrations of the same tool. For example, we have 2 different accounts for our HRIS tool, one for each legal entity of the company, but we can only connect one of them, resulting in half of the employees missing from Vanta. The same goes for our MDM. Other than that, I find everything else working perfectly.
What problems is the product solving and how is that benefiting you?
Vanta helps us keep track of our compliance work and improve pending security topics. It helps monitor employee compliance with internal policies and security practices and offers a centralized solution for all evidence that needs to be submitted ahead of a compliance audit.
Compliance made easier
What do you like best about the product?
The ease of use and user experience, support from the Vanta team
What do you dislike about the product?
Pricing is a little steep for early stage startups
What problems is the product solving and how is that benefiting you?
We used Vanta to streamline our SOC 2 compliance process. It helped automate evidence collection, manage security controls, and centralize documentation - things that would’ve taken much more time and effort to handle manually. The integrations with tools like GitHub, Google Workspace, and AWS made it easy to continuously monitor our environment and flag issues early. It also made working with our auditor smoother, since everything they needed was already organized and accessible in Vanta.
Streamlining Security Certifications with Some Growing Pains
What do you like best about the product?
Vanta offers excellent ease of use and management for all compliance projects, which is a significant improvement over previous methods that were complicated and difficult to navigate. The platform streamlines what was once a cumbersome process, making compliance more accessible even for those without specialized expertise.
Another standout feature is Vanta's robust control matching and automatic checks against services like Gmail and AWS. This automation significantly reduces manual verification work and provides more reliable oversight of your compliance posture across your technology stack.
Another standout feature is Vanta's robust control matching and automatic checks against services like Gmail and AWS. This automation significantly reduces manual verification work and provides more reliable oversight of your compliance posture across your technology stack.
What do you dislike about the product?
he vulnerability management functionality is challenging to use effectively. Specifically, there are difficulties in managing exclusions and tracking remediation efforts. The system doesn't provide intuitive ways to prioritize vulnerabilities, which can make security management more time-consuming than necessary.
What problems is the product solving and how is that benefiting you?
Evidence Collection Automation: Before Vanta, gathering evidence for compliance audits was a manual, labor-intensive process requiring coordination across multiple teams. Vanta automatically collects and organizes evidence from connected systems (AWS, Gmail, etc.), reducing what used to take weeks down to hours or days.
Continuous Compliance Monitoring: Rather than treating compliance as a periodic "sprint" before audits, Vanta provides real-time visibility into compliance status. This shift from point-in-time to continuous monitoring means we catch issues early before they become audit findings.
Control Implementation Guidance: Vanta demystifies complex compliance frameworks by translating abstract requirements into concrete, actionable steps. Their guided approach helps implement controls correctly the first time, eliminating costly rework.
Cross-Framework Efficiency: Managing multiple compliance frameworks (SOC 2, ISO 27001, etc.) used to mean duplicating effort across overlapping controls. Vanta maps these relationships, allowing us to satisfy multiple requirements with single implementations.
Continuous Compliance Monitoring: Rather than treating compliance as a periodic "sprint" before audits, Vanta provides real-time visibility into compliance status. This shift from point-in-time to continuous monitoring means we catch issues early before they become audit findings.
Control Implementation Guidance: Vanta demystifies complex compliance frameworks by translating abstract requirements into concrete, actionable steps. Their guided approach helps implement controls correctly the first time, eliminating costly rework.
Cross-Framework Efficiency: Managing multiple compliance frameworks (SOC 2, ISO 27001, etc.) used to mean duplicating effort across overlapping controls. Vanta maps these relationships, allowing us to satisfy multiple requirements with single implementations.
showing 21 - 30