I use Vanta to ensure that our product meets security and compliance requirements while keeping product release on schedule. It gives me visibility into the organization's compliance status for frameworks such as SOC2 and ISO 27001, which allows me to coordinate with engineering, security, and compliance teams. I like the continuous monitoring feature the most, as Vanta doesn't just check compliance during audit season but continuously monitors connected systems such as cloud infrastructure, identity providers, and endpoint management. If a new employee's laptop encryption is disabled or critical security settings fall out of compliance, Vanta automatically flags the issue and assigns the appropriate task. Continuous monitoring automatically checks our cloud infrastructure, user access, devices, and security controls around the clock. Instead of waiting for audits, Vanta immediately alerts us to compliance issues, allowing my team to resolve them quickly. This keeps us audit ready, reduces manual efforts, minimizes security risks, and gives me confidence that our product remains compliant as it evolves. Setting up Vanta was easy for us. Review collected by and hosted on G2.com.

There's not a major improvement needed for Vanta, but I would like to see improvement. Configuring the platform for complex environments can take time, especially for organizations using many custom systems. Also, some compliance checks still require manual evidence because they are not fully automated, so these need to be automated first. Review collected by and hosted on G2.com.

As a cloud security engineer, I really appreciate Vanta for its ability to continuously monitor our AWS and Azure environments for compliance and security risks. I check Vanta's dashboard daily to review failed controls and coordinate remediations, which saves me a lot of time compared to manual checks. The integration with platforms like GitHub and endpoint management tools is smooth, allowing for automatic evaluation of security controls such as MFA, encryption, access permissions, and device compliance. I love the feature of continuous monitoring; if anyone creates an AWS resource that doesn't meet our security policy, Vanta detects it automatically and flags it, alerting me so I can address it before it becomes a security risk. It also helps in identifying gaps in real time, centralizes visibility, and reduces manual preparation for audits, which lowers operational costs and enhances regulatory compliance. Review collected by and hosted on G2.com.

I would like to see improvement in some compliance controls which require manual evidence or policy reviews because it cannot be fully automated. Also, organizations which require cloud environment may need additional configuration or supplemental tools to monitor specialized security requirements. Review collected by and hosted on G2.com.

What I like most about Vanta is how it simplifies security and compliance without making the process feel overwhelming. the dashboard is easy to navigate, and the automated monitoring saves a lot of time compared to handling everything manually.it also makes it easier to stay organized by keeping compliance tasks, evidence, and integrations in one place. Overall, it has helped our team work more efficiently and maintain better visibility into our security. Review collected by and hosted on G2.com.

One thing I think could be improved is the initial setup learning curve. I also feel that a few workflows could be more intuitive, but once you're familiar with the platform, it becomes much easier to use. Review collected by and hosted on G2.com.

From an HR and People Operations standpoint, Vanta has made the security and compliance side of onboarding genuinely manageable. New hires get auto-enrolled into the security training and agent install workflow as soon as they're added to our HRIS, which means I'm not chasing people down on Day 1 to complete their compliance items, it just runs in the background. The training is short, well-designed, and doesn't make new hires feel like they're being lectured, which matters when you're trying to make Week 1 feel welcoming, not bureaucratic. Review collected by and hosted on G2.com.

The security training itself is short and well-designed, which matters more than people realize. New hires don't dread it, and that keeps Week 1 feeling welcoming rather than bureaucratic. For our SOC 2 work, the evidence collection happening in the background means audit prep isn't a fire drill, it's a side effect of normal operations.

One small friction point worth naming: new hires unfamiliar with MDM-style agents occasionally get confused by the install flow on Day 1. I've solved this with a one-line heads-up in the welcome email, but it's worth building into your onboarding comms from the start. Review collected by and hosted on G2.com.

I truly appreciate Vanta because it automatically runs over a thousand tests every single hour to ensure our files are locked safely, employee background checks are completed, and only the right people have access to data. I like that Vanta works by plugging directly into all our digital tools such as cloud storage, work emails, and employee management systems. Once connected, it automatically scans the system and sends alerts if something feels wrong. Before Vanta, it was a nightmare to manually copy-paste data and track security compliance and regulatory needs. Vanta has resolved this chaos by automatically scanning the system and putting all the security requirements into an easy-to-comply checklist. Review collected by and hosted on G2.com.

The setup takes time as we have to manually click through and fix configuration settings for days together. Review collected by and hosted on G2.com.

The feature I like the most is its continuous monitoring. Instead of waiting until an audit to discover issues, it alerts me immediately if a device becomes non-compliant or if multi-factor authentication is disabled. I also like the centralized dashboard because it gives me a clear view of my organization's overall security and compliance status. It significantly reduces the time I spend on repetitive compliance tasks and manual evidence collection, and it eliminates the need to gather screenshots and documentation from multiple systems before every audit. It simplifies access reviews and policy tracking, which lets my IT team focus more on strengthening infrastructure and supporting employees. The automated monitoring helps us identify security gaps early, reducing operational risk and improving overall compliance. As a real example, during a quarterly access review, Vanta generated an alert that a recently onboarded engineer did not have MFA enabled on their Google Workspace and flagged the control as non-compliant within a few hours, so I contacted the employee, had them enforce MFA through Okta, and verified the change in Vanta. It provides alerts and clear remediation guidance that help me review and resolve compliance issues quickly and keep us audit ready. It's easy to use, and the initial setup was easy. I also use it with Jira for remediation tracking and Slack for notifications. Review collected by and hosted on G2.com.

Vanta is easy to use, but some of the advanced settings and integrations require technical knowledge to configure correctly. Certain alerts can also generate extra investigation work before I can tell whether they're genuine compliance issues. And some of the reporting features lack the level of detail I need for executive presentations. Review collected by and hosted on G2.com.

What I like best about Vanta is how much time it saves... It takess lot of the manual work out of compliance by automating evidence collection and monitoring, which makes staying audit-ready much easier. I also like that it gives us a clear and professional way to showcase Fenergo's security and compliance posture through the Trust Center, helping build trust with customers and prospects.. Review collected by and hosted on G2.com.

Vanta has been really useful overall, but I think some areas could be more flexible. There are times when workflows don't quite match how we operate, and it can take a bit of digging to understand why a test has failed or what action is needed. More customization and clearer guidance would help. Review collected by and hosted on G2.com.

Vanta’s AI has saved me more than once by catching small issues before they turned into last-minute surprises. I almost forget the integrations are even there, and I honestly think that’s exactly how they should work. It’s one of those platforms that quietly earns its place and keeps doing its job in the background. Review collected by and hosted on G2.com.

The UI is pretty good, but a few of its settings take more clicks than I expected. A few of the workflows assume that every company follows the same compliance process, thus explaining their rigidity. Review collected by and hosted on G2.com.

Vanta covers compliance, TPRM, access reviews, trust centre, and risk management in one platform. As a small InfoSec function, not having to stitch together multiple tools is a genuine force multiplier Review collected by and hosted on G2.com.

Some of the newer AI and automation features feel like they're still maturing - useful in principle, but not yet reliable enough to lean on for high-stakes decisions. Review collected by and hosted on G2.com.

I use Vanta for automating security compliance and to monitor our cloud structure. It easily integrates with systems like AWS, Google Workspace, GitHub, and endpoint management tools to collect audit evidence, monitor security controls, and identify compliance gaps wherever necessary, and it simplifies audit preparation for frameworks such as SOC 2 and ISO 27001. The feature I like the most is the automation it provides. Instead of manually collecting evidence and checking security controls, Vanta continuously performs these tasks in the background, which significantly reduces audit preparation time. It gives me a centralized, real-time view of compliance status, failed security checks, and remediation tasks across all integrated systems. During a SOC 2 audit, Vanta automatically collected evidence from AWS and other similar platforms throughout the year, so instead of spending several weeks gathering screenshots and access logs manually, everything was already organized in one dashboard. We completed auditor requests within days and reduced audit preparation time by nearly half while improving accuracy and transparency. It automatically checks controls such as MFA enforcement, device encryption, employee onboarding, user access reviews, and cloud security configuration through integrated systems. Failed checks generate alerts and remediation tasks for the appropriate teams, and this continuous automation keeps compliance up to date and ensures we are always audit ready throughout the year. I like the continuous evidence collection, which ensures evidence is always current, significantly reduces repetitive administrative work, and minimizes human error. IT security has benefited the most, since it reduces their manual workload now that it's automated and reduces human errors. There is a 60-70% reduction in audit time, we reduced compliance-related manual tasks, responded to auditors faster, and identified security gaps much earlier through continuous monitoring. It collaborates well between teams, hands off the work smoothly, and the remediation of tasks is well organized with easy transitions. The initial setup was moderately easy for us. Review collected by and hosted on G2.com.

Even though it's highly effective, I find the customization and reporting capabilities somewhat limited for organizations with unique compliance requirements. Some integrations require additional manual configuration. And for complex environments, I need extra tools to get complete visibility and meet specialized security or regulatory needs. Review collected by and hosted on G2.com.