External reviews
External reviews are not included in the AWS star rating for the product.
Using Vanta to prepare a SaaS company for a SOC 2 audit
What do you like best about the product?
This is an updated review now that my company has been using Vanta for about two years. We have successfully gone through two SOC 2 type II audits. Vanta clearly understands the pain points SaaS companies face with regards to preparing a company to live by the standards required by SOC 2 controls. The combination of their technology and people has been instrumental in making us successful with compliance. Given our success in using Vanta with SOC 2 we decided to use Vanta to manage CCPA and GDPR compliance as well.
Vanta has continued to make steady improvements to the product since we signed up as well. Whereas the Risk Management component was very limited when we first signed on, it is now quite robust and does an excellent job of walking you through the creation of a Risk Register, creating remediation tasks, etc.
One of the most useful additions is the Vanta Trust Report. The Trust Report is a web page where we can send customers and potential customers to see our compliance status and download documents that are necessary for a security review. This has saved us a lot of time when potential customers are gathering information for a security review.
Vanta has continued to make steady improvements to the product since we signed up as well. Whereas the Risk Management component was very limited when we first signed on, it is now quite robust and does an excellent job of walking you through the creation of a Risk Register, creating remediation tasks, etc.
One of the most useful additions is the Vanta Trust Report. The Trust Report is a web page where we can send customers and potential customers to see our compliance status and download documents that are necessary for a security review. This has saved us a lot of time when potential customers are gathering information for a security review.
What do you dislike about the product?
In my original review there were still a number of rough edges in the product. I'm happy to report that those have all been resolved. The interface makes it easy to find the information I need without being overly complicated.
What problems is the product solving and how is that benefiting you?
Preparing policies, assessing risk, monitoring systems, collecting evidence, and otherwise implementing what is needed for our company to be SOC compliant.
- Leave a Comment |
- Mark review as helpful
Great product and service
What do you like best about the product?
The optimized path and communication to getting the SOC 2 Type 2 was incredible.The sales and onboarding process was informational and consistent with positivity and guidance throughout.
What do you dislike about the product?
I have no improvement suggestions. Easy suggestion is more integrations, however all the ones needed were there for us.
What problems is the product solving and how is that benefiting you?
Soc 2 Type 2 and HIPAA. Benefits were a designed process to not waste time and money on resources that were superfluous to the main goal.
We closed deals because of Vanta. It's that simple.
What do you like best about the product?
Vanta covers nearly everything for SOC2.
What do you dislike about the product?
The risk assessment area could use more instruction.
What problems is the product solving and how is that benefiting you?
Demonstrating adequate security measures in our company. We increased our security to get SOC2 compliant. As promised, the IT assessment performed by our prospects/customers has gone much much better and smoother with Vanta's help.
Recommendations to others considering the product:
Exactly the type of system that we needed to demonstrate SOC2 compliance and manage the process on an ongoing basis.
Vanta review
What do you like best about the product?
A Framework and a focal point to manage all of the SOC2 requirements.
Automation of both the Server-side and the endpoint side
Automation of both the Server-side and the endpoint side
What do you dislike about the product?
Lack of the ability to define certification scope in the system.
I would like to be able to include all of my entities & my server environments in order to improve security, but I am limited to do it just for these in the certification scope.
( I am not the hands-on user)
I would like to be able to include all of my entities & my server environments in order to improve security, but I am limited to do it just for these in the certification scope.
( I am not the hands-on user)
What problems is the product solving and how is that benefiting you?
Advancing towards SOC2 with a Virtual CISO and only a partially dedicated in house person
Anyone considering SOC 2 compliance should use Vanta
What do you like best about the product?
Automated monitoring. Generation of policies. Reminders of review periods.
What do you dislike about the product?
Disappointed that Checkr background checks are no longer a bundled part of the offering.
What problems is the product solving and how is that benefiting you?
Monitoring for SOC 2 type 1 compliance. Plan to use it for SOC 2 type 2 and ISO27001
Vanta as a compliance monitoring service
What do you like best about the product?
Compliance activity automation and alerting
What do you dislike about the product?
Nothing I dislike, expecting more features in the future
What problems is the product solving and how is that benefiting you?
Making sure our compliance policies and processes standards are maintained over time.
Early warnings when shortcomings are identified. Simplifies awareness, supervisory work
Early warnings when shortcomings are identified. Simplifies awareness, supervisory work
Peace of mind and hundreds of hours saved
What do you like best about the product?
Vanta starts providing peace of mind minutes after the initial setup is completed. I can sleep properly knowing that there are no red flag related with configuration, security, or compliance.
I trust Vanta to notify me when a test is not passing anymore. It might go from a missconfiguration of an employee's computer to a security vulnerability. I can focus on the rest of my work and just go back when a next step is needed.
I trust Vanta to notify me when a test is not passing anymore. It might go from a missconfiguration of an employee's computer to a security vulnerability. I can focus on the rest of my work and just go back when a next step is needed.
What do you dislike about the product?
There's nothing that we dislike about the platform. We did had a few issues connecting the Vanta agent in some cases, but the support was helpful and super quick.
What problems is the product solving and how is that benefiting you?
We started using Vanta becase we wanted to get a SOC2 Type 2 certification. We knew that it will take us a lot of time to setup all the requirements and we decided to go with Vanta to save time, keep the information organized, and be notified of any organizational issue.
Recommendations to others considering the product:
You are probably considering Vanta because of a SOC2/ISO certification. It's also likely that you are not an expert on the topic. If both statements are true, I can ensure you that Vanta is a good choice in terms of onboarding and help with the process (they will introduce you a few auditors you can choose from). Lastly, keep in mind that you will be using this platform for a long time if you consider going with a SOC2 Type 2 certification (in terms of monitoring time and later the certification renewal). If that's the case, check if the rest of alternatives gives you the same peace of mind with all the automated alerts that Vanta has. We are happy with them and we also know that they cover every compliance requirement, given that we already got our first certification.
Modern compliance technology that syncs with your existing cloud security infrastructure
What do you like best about the product?
They understood how a fully remote, cloud native software company like ourselves operates. No questions about phone line security or outdated anti-virus software.
Their 2 sided marketplace is a great resource as you consider other parts of your security stack like Auditing, MDM, Training, Background Checks, etc..
The customer support team is exceptional. Highly informed and give great recommendations.
Their 2 sided marketplace is a great resource as you consider other parts of your security stack like Auditing, MDM, Training, Background Checks, etc..
The customer support team is exceptional. Highly informed and give great recommendations.
What do you dislike about the product?
They are missing some future compliance programs for us e.g. HITRUST. And they are still a young company so there are minor UI issues when it comes to understanding how alerts are generated.
What problems is the product solving and how is that benefiting you?
An all-in-one place for our Security policies and compliance. The single biggest benefit has been bringing everything out of Google Drive and into Vanta. Vanta automates a majority of what we need to pass compliance audits.
Vanta makes compliance possible for small teams
What do you like best about the product?
Vanta provides a low friction path to SOC2 certification, enabling our small team to go from zero to starting our observation period in under 30 days. Our Customer Success team was always available to answer questions, offer advice, and keep us moving forward. I can't imagine going through compliance preparation and the audit without Vanta.
What do you dislike about the product?
Limited integration with lesser known service providers, however, Vanta continues to improve their coverage and is responsive to feature requests.
What problems is the product solving and how is that benefiting you?
Our business never had a good answer to how we addressed compliance. Vanta has given us the tools, guidance, and partnerships to build a comprehensive compliance regime in record time.
Recommendations to others considering the product:
Vanta immediately impressed us with their product and their commitment to client success. Their deep network of contacts has allowed us to find the best match for our needs on penetration testing and audit partner selection.
Excellent product & great staff
What do you like best about the product?
Cost savings and speed of execution of the SOC 2 accreditation process. Vanta is also very responsive to feedback and their staff are well trained in the product too.
What do you dislike about the product?
Reporting is fixed and 'clunky'. Better access to data via an API would be good
What problems is the product solving and how is that benefiting you?
SOC 2 Type 2 certification for Tessian.com
showing 941 - 950