Vanta Reviews & Product Details

What I like most about Vanta is how it streamlines security compliance and automates tasks that would otherwise take a lot of manual effort. As a software engineer, I really value the clean, intuitive interface, the straightforward workflows, and the way it brings security-related work into a single, centralized platform. Its integrations and automation features make it easier to monitor security requirements, keep track of compliance progress, and ultimately save valuable development time. Review collected by and hosted on G2.com.

Although Vanta provides a strong overall experience, the initial setup and configuration can be time-consuming, particularly when you’re connecting multiple tools and trying to understand all the available features. I also think some areas would benefit from additional customization options so workflows can be better tailored to different development environments. That said, once everything is set up and configured, the platform becomes much easier to manage and maintain. Review collected by and hosted on G2.com.

Great support, fairly straightforward to use (lots of templates available to help you get started so you don't get super lost). The checklist is super helpful to keep track of what remains and integrations with other tools (eg, HRIS, repos, etc.) make it pretty straightforward to enforce company rules. The web app is solid -- straightforward, never had issues with it. As far as pricing is concerned, all major vendors came in at fairly comparable price, so this wasn't much of a differentiator. I didn't get to use their AI/intelligence much as an end-user, but seems like the offering there should be very good (many obvious places where it could be used to level up templates). Review collected by and hosted on G2.com.

The last time I used Vanta, there were a ton of forms and templates that felt like they could have been auto-filled a little better. Hoping they have an agent that can do most of this now. Review collected by and hosted on G2.com.

What I like most about Vanta is that it brings different compliance activities together in one place. The dashboard is straightforward and easy to follow, and the automated evidence collection saves a lot of time compared with trying to manage everything manually. Review collected by and hosted on G2.com.

Some sections can feel a bit overwhelming when you’re just getting started, especially when you have to manage multiple frameworks and controls at once. I also think there’s room to improve how certain workflows and notifications can be customized, so they better match different needs. Review collected by and hosted on G2.com.

I like the solution’s flexibility and how everything ties together. I’ve seen both technical and non-technical individuals, with little to no Vanta experience, navigate the software successfully. The wide range of integrations supports the different sizes of companies I work with, and the cost is lower than other vendors in the GRC software space.

Additionally, my customers and I have experienced fewer than a handful of performance issues. The AI and agent included in the solution also help end users self-serve by quickly finding answers or by notifying Vanta when something is more critical. Review collected by and hosted on G2.com.

Vanta is an amazing solution. Like other GRC tools, Vanta acts like a vacuum: it pulls in many different items and marks them as in scope for whatever frameworks an organization is using. That can be really helpful for understanding the full compliance scope. However, it can also be confusing for customers, because when they open the software, they may find there’s more to remediate or sort through than they expected. Review collected by and hosted on G2.com.

Vanta is extremely useful for collecting evidence and mapping controls across frameworks. Working with auditors who are trained on Vanta also speeds up audit timeframes significantly, and it makes communication and evidence follow-ups much easier. Review collected by and hosted on G2.com.

Vanta can make it easy to over-document and end up flooding the system with too much information. For example, I struggle with some of the connectors for asset management because the filtering has (historically, at least) not allowed me to work effectively with our current estate data. The issue is that our data on my company’s end isn’t as clean as Vanta seems to require, which makes those connectors harder to use in practice. Review collected by and hosted on G2.com.

I like Vanta’s simplicity and the interface, which shows me what I need without making me read a manual. That makes it easier for people across the company to adopt and use its features in their day-to-day work. Vanta has built-out workflows, and when something isn’t compliant, its remediation suggestions usually show us what we need to do or at least help us get moving. I also find the My Work tab helpful for seeing what I need to do, what’s out of line, and what’s coming up or about to expire. The AWS integration is very deep and gives us detail about things like backups and password security that we might otherwise overlook. Some AWS workflows are simplified enough for me to handle even though I’m not an AWS engineer, and our engineers find the guidance useful for understanding and solving issues. I can add notes and turn off flags when we have a reason to safely ignore them, which helps clear clutter and noise. I also appreciate the ChatGPT integration: it can pull information from Vanta and SharePoint to answer questions, which reduces tickets and work for the IT desk. Vanta helps us automate vendor questionnaires and build a registry of answers, saving time. We can also create questionnaires suited to a company’s size and maturity to get a quick snapshot of its security maturity. The initial setup was very easy. A Vanta engineer helped us bring in our SharePoint materials, identify duplicate policies and differences between them, and combine policies. Vanta also identified policies we were missing and provided templates to fill out. Within a couple of days, it found enough existing work to take us from 0% to about 80% of the way toward ISO 27001. Review collected by and hosted on G2.com.

I find that Vanta doesn’t have a lot of integrations, and some of the ones it does have aren’t that deep. The Rippling integration isn’t that great, so I have to get reports from HR and upload them as evidence instead of having them flow in automatically. Keeping account logins in sync between Intra, Rippling, and Vanta can also break, so I have to do some manual touch-ups. We’re also missing integrations for some third-party AI and financial tools we use. Review collected by and hosted on G2.com.

Vanta makes compliance feel effortless. The automation features save hours of manual work, and the platform’s clarity helps everyone on the team stay aligned. I especially appreciate how intuitive the dashboard is.... it gives a real-time pulse on our security posture without needing to dig through spreadsheets or audit trails!! Review collected by and hosted on G2.com.

Occasionally, some integrations take a bit of fine-tuning to sync perfectly, and certain alerts could use more context or flexibility. But overall, the product team is clearly responsive, and improvements roll out frequently. Review collected by and hosted on G2.com.

It integrates with multiple tools, automates tracking of any anomalies with respect to the respective controls, provide guidance on how to resolve those anomalies and also share timely notifications to resolve them over email which enables us to remain on top of our compliance requirements. Review collected by and hosted on G2.com.

We have realized that probably auditor view doesn't allow auditors to look at everything we have uploaded as evidences, because, during multiple audits in the past auditors have asked us to share evidences which we had already uploaded on Vanta, but they didn't have access to it. This happens in very few cases, but causes some amount of rework and time delays in audit. Pricing of the tool is also on the higher side. Review collected by and hosted on G2.com.

Getting started with Vanta was honestly super easy, and their customer support team actually helps wherever we get stuck. I love the automated evidence collection feature because it pulls compliance data straight from our cloud vendors, so I never have to beg sales reps for their security documents. Review collected by and hosted on G2.com.

The platform gets a little confused if a smaller maritime supplier is running their databases on super outdated, non-standard servers. I usually end up having to ping the support desk to help me manually clear the error codes just so my main compliance dashboard stops flashing red all week. Review collected by and hosted on G2.com.

I’m happy with the speed of product development and with how quickly Vanta itself is being adapted to the European regulatory landscape. Review collected by and hosted on G2.com.

The product feels quite complex at the moment. When I ask Vanta AI to explain how to use some of the newer features, it can take a while to get a clear, refined answer. I also think the integrations still need to be expanded for a start-up/scale-up tech stack, since it currently seems to support enterprise company stacks first (for example, there isn’t an option to create workflows with Linear). Review collected by and hosted on G2.com.