Vanta Reviews & Product Details

From an HR and People Operations standpoint, Vanta has made the security and compliance side of onboarding genuinely manageable. New hires get auto-enrolled into the security training and agent install workflow as soon as they're added to our HRIS, which means I'm not chasing people down on Day 1 to complete their compliance items, it just runs in the background. The training is short, well-designed, and doesn't make new hires feel like they're being lectured, which matters when you're trying to make Week 1 feel welcoming, not bureaucratic. Review collected by and hosted on G2.com.

The security training itself is short and well-designed, which matters more than people realize. New hires don't dread it, and that keeps Week 1 feeling welcoming rather than bureaucratic. For our SOC 2 work, the evidence collection happening in the background means audit prep isn't a fire drill, it's a side effect of normal operations.

One small friction point worth naming: new hires unfamiliar with MDM-style agents occasionally get confused by the install flow on Day 1. I've solved this with a one-line heads-up in the welcome email, but it's worth building into your onboarding comms from the start. Review collected by and hosted on G2.com.

Vanta is really easy to use and integrates well with the tools we already have. The best part is that we don't need to go back and forth with auditors using giant spreadsheets anymore. Everything is in one place. Uploading evidence is simple and saves us a lot of time during audits.

Performance has been solid for us. Our workload isn't huge so we haven't really pushed it to the limits, but we have no complaints there. Support and onboarding were great too, the app is pretty intuitive so we didn't need much hand-holding to get started.

On pricing, it's a bit on the higher side, especially if you're a startup going through your first audit. That said, the ROI is definitely there once you see how much time and effort it saves you. Review collected by and hosted on G2.com.

Some user flows are hidden deep inside specific pages and not easy to find from the main menu. I get that they want to keep the menu clean, but it takes too many clicks to go from a failing test all the way to, say, removing a computer from an employee that left the company. And if you go directly to the computers page, it's not obvious that there's an unassigned computer sitting there. A bit more visibility on those things would help a lot. Review collected by and hosted on G2.com.

I use Vanta to automate and streamline our security compliance processes for SOC 2 certification. It eliminates the manual and time-consuming process of gathering evidence for compliance audits by automatically pulling evidence from our integrated tools, which saves us significant time and reduces human error. I love Vanta's extensive integration ecosystem, as it connects seamlessly with tools like AWS, GitHub, Google Workspace, and many others, making evidence collection almost effortless. The dashboard is very intuitive, allowing me to quickly see our compliance status and identify what needs attention. I also appreciate the automated employee onboarding for security training. Vanta's onboarding documentation and guided setup wizards were really helpful, and their support team was very responsive. Review collected by and hosted on G2.com.

The pricing can be steep for smaller companies or startups, which might make it less accessible for teams just starting their compliance journey. Also, the initial setup and configuration of integrations can take some time, especially if you have a complex tech stack. Some of the reporting features could be more customizable — for instance, generating tailored reports for different stakeholders would be helpful. Review collected by and hosted on G2.com.

Vanta's system integrates with hundreds of different systems, making it easy to automate tasks and tests. Additionally, there are provided templates for almost all documents needed to give you a starting point and guide you in the correct direction for drafting. Beyond checking the box, the Vanta platform guided us seamlessly through the compliance process and fundamentally helped our organization change the way we operate for the better. Whenever confusion or questions came up, our support rep or the customer service team was also very prompt with responding and assisting. They also connected us with potential audit firms and organizations we needed to complete our certifications. We use this platform almost every day even when we're not under audit, and almost any size of organization could benefit from this platform. Review collected by and hosted on G2.com.

Even though Vanta makes compliance so much cheaper than traditional means, it's still a fairly expensive platform, especially for small businesses. They're plans are now more integrated, but the add-ons can add up in cost as well. They'd addressed this with new "packages" to bundle these add-ons in. I do wish some of these add-ons weren't so expensive for smaller startups, which desperately need to the most automation but have the smallest budgets. They continue to add new integrations every month, which makes it work very seamlessly, but still missing a few we'd like. Review collected by and hosted on G2.com.

I find Vanta very useful for tracking SOC2 and GDPR, managing tasks and focusing on important things. I love how easy it is to use, with simple control and visualization as well. It's very easy to assign tasks, track status, and it also analyzes progress in real time. The integration with Azure is super easy. Review collected by and hosted on G2.com.

I would like Vanta to have a feature like GitHub's 'dependabot', which could tell you what you need to modify and with one click make a PR. Review collected by and hosted on G2.com.

I like the consolidation of processes and information in one place that Vanta offers. I also enjoy the constant improvements they make. Integrating Vanta with platforms like BambooHR and Google is really useful and makes my workflow more efficient. Additionally, I found that setting up Vanta initially was very simple. Review collected by and hosted on G2.com.

access management needs several improvements. The initial approver of a request should be chosen by the person requesting access, for example, user A wants to request access to application X. When creating the request, user A should be able to choose their manager to approve their request. In the current model, the approvers are predefined by application. Review collected by and hosted on G2.com.

I really appreciate how Vanta simplifies and automates compliance work that would otherwise be very manual and time-consuming. The platform is intuitive, helps keep everything organized in one place, and makes audit readiness much less stressful. Automating evidence collection and control monitoring helps us stay organized and audit-ready without constantly chasing documentation. Vanta provides better visibility into our security posture, making managing compliance more efficient. Review collected by and hosted on G2.com.

I would say making some workflows and integrations a bit more intuitive, especially navigating more advanced features. There are times when customization or reporting could be more flexible, and having even more guidance within the platform for certain tasks would be helpful. It would be helpful to have more flexibility in building custom reports and tailoring dashboards based on different stakeholder's needs. More options to customize workflows, notifications and control ownership would also make the platform feel more adaptable to different teams and processes. Well, it took some time to get used to it and still learning. Review collected by and hosted on G2.com.

I find Vanta incredibly useful for compliance frameworks and documentation, including HiTrust and SOC 2. It really helps with recurring documentation, like quarterly access reviews, and saves us from creating tickets in a PSA system. Having a dedicated platform for tracking compliance docs means our auditor can see all evidence through Vanta without us digging through tickets. I appreciate that Vanta provides most of a compliance framework's documentation, which saves us from having someone spend weeks sifting through policies manually. The creation of most default controls for a framework gives a great overview of a compliance framework, and it's fine that it goes a little overboard because I'd rather have too much documentation than too little. The initial setup of Vanta was easy, I'd rate it an 8 out of 10. Review collected by and hosted on G2.com.

The AI processing could be improved. It re-runs every single time new evidence is added, which can be annoying. It would be better if there was a 'process with AI' button so it waits until all evidence is added before processing. Also, the 'Policies' templates are a bit rigid, making manual edits difficult. If you manually edit them, it seems like you have to discard all Vanta features/templates related to that policy in the future. Review collected by and hosted on G2.com.

Vanta is the right balance of monitoring, alerting, and tracking to make it easy to meet SOC 2 Type 1 and 2 requirements. We also have started using it for ISO 27001:2022. You can choose to use all of their features or some of their features with no pain. Their SSO platform makes it easy to monitor employee computers, servers, and SLA's. Review collected by and hosted on G2.com.

Vanta has made great progress on the overall bugs and user interface but there is still a lot to be desired. It almost always opens a new tab so if you're really cranking on something, you end up with a million tabs. Also, there choice in buttons is kind of annoying and flat. You'll be looking for an upload button or something and it is hiding in the same color as everything else. A little contrast would go a long way as you're going through repititive processes on pages that look alike but sometimes aren't Review collected by and hosted on G2.com.

It’s very easy to use, and it guides you through the steps in a natural way. The best part is the automations and integrations, because they save a lot of time and make the whole compliance process much more efficient. The AI reviews are useful, and the number of frameworks available is very good. Review collected by and hosted on G2.com.

I work with a not-so-common framework, and it isn’t updated on time or maintained consistently. It’s frustrating having to add controls manually. Support could also be better, and I think they should add more capabilities to the lower tiers so they can stay competitive. Review collected by and hosted on G2.com.