I truly appreciate Vanta because it automatically runs over a thousand tests every single hour to ensure our files are locked safely, employee background checks are completed, and only the right people have access to data. I like that Vanta works by plugging directly into all our digital tools such as cloud storage, work emails, and employee management systems. Once connected, it automatically scans the system and sends alerts if something feels wrong. Before Vanta, it was a nightmare to manually copy-paste data and track security compliance and regulatory needs. Vanta has resolved this chaos by automatically scanning the system and putting all the security requirements into an easy-to-comply checklist. Review collected by and hosted on G2.com.

The setup takes time as we have to manually click through and fix configuration settings for days together. Review collected by and hosted on G2.com.

The feature I like the most is its continuous monitoring. Instead of waiting until an audit to discover issues, it alerts me immediately if a device becomes non-compliant or if multi-factor authentication is disabled. I also like the centralized dashboard because it gives me a clear view of my organization's overall security and compliance status. It significantly reduces the time I spend on repetitive compliance tasks and manual evidence collection, and it eliminates the need to gather screenshots and documentation from multiple systems before every audit. It simplifies access reviews and policy tracking, which lets my IT team focus more on strengthening infrastructure and supporting employees. The automated monitoring helps us identify security gaps early, reducing operational risk and improving overall compliance. As a real example, during a quarterly access review, Vanta generated an alert that a recently onboarded engineer did not have MFA enabled on their Google Workspace and flagged the control as non-compliant within a few hours, so I contacted the employee, had them enforce MFA through Okta, and verified the change in Vanta. It provides alerts and clear remediation guidance that help me review and resolve compliance issues quickly and keep us audit ready. It's easy to use, and the initial setup was easy. I also use it with Jira for remediation tracking and Slack for notifications. Review collected by and hosted on G2.com.

Vanta is easy to use, but some of the advanced settings and integrations require technical knowledge to configure correctly. Certain alerts can also generate extra investigation work before I can tell whether they're genuine compliance issues. And some of the reporting features lack the level of detail I need for executive presentations. Review collected by and hosted on G2.com.

What I like best about Vanta is how much time it saves... It takess lot of the manual work out of compliance by automating evidence collection and monitoring, which makes staying audit-ready much easier. I also like that it gives us a clear and professional way to showcase Fenergo's security and compliance posture through the Trust Center, helping build trust with customers and prospects.. Review collected by and hosted on G2.com.

Vanta has been really useful overall, but I think some areas could be more flexible. There are times when workflows don't quite match how we operate, and it can take a bit of digging to understand why a test has failed or what action is needed. More customization and clearer guidance would help. Review collected by and hosted on G2.com.

Vanta’s AI has saved me more than once by catching small issues before they turned into last-minute surprises. I almost forget the integrations are even there, and I honestly think that’s exactly how they should work. It’s one of those platforms that quietly earns its place and keeps doing its job in the background. Review collected by and hosted on G2.com.

The UI is pretty good, but a few of its settings take more clicks than I expected. A few of the workflows assume that every company follows the same compliance process, thus explaining their rigidity. Review collected by and hosted on G2.com.

Vanta covers compliance, TPRM, access reviews, trust centre, and risk management in one platform. As a small InfoSec function, not having to stitch together multiple tools is a genuine force multiplier Review collected by and hosted on G2.com.

Some of the newer AI and automation features feel like they're still maturing - useful in principle, but not yet reliable enough to lean on for high-stakes decisions. Review collected by and hosted on G2.com.

I use Vanta for automating security compliance and to monitor our cloud structure. It easily integrates with systems like AWS, Google Workspace, GitHub, and endpoint management tools to collect audit evidence, monitor security controls, and identify compliance gaps wherever necessary, and it simplifies audit preparation for frameworks such as SOC 2 and ISO 27001. The feature I like the most is the automation it provides. Instead of manually collecting evidence and checking security controls, Vanta continuously performs these tasks in the background, which significantly reduces audit preparation time. It gives me a centralized, real-time view of compliance status, failed security checks, and remediation tasks across all integrated systems. During a SOC 2 audit, Vanta automatically collected evidence from AWS and other similar platforms throughout the year, so instead of spending several weeks gathering screenshots and access logs manually, everything was already organized in one dashboard. We completed auditor requests within days and reduced audit preparation time by nearly half while improving accuracy and transparency. It automatically checks controls such as MFA enforcement, device encryption, employee onboarding, user access reviews, and cloud security configuration through integrated systems. Failed checks generate alerts and remediation tasks for the appropriate teams, and this continuous automation keeps compliance up to date and ensures we are always audit ready throughout the year. I like the continuous evidence collection, which ensures evidence is always current, significantly reduces repetitive administrative work, and minimizes human error. IT security has benefited the most, since it reduces their manual workload now that it's automated and reduces human errors. There is a 60-70% reduction in audit time, we reduced compliance-related manual tasks, responded to auditors faster, and identified security gaps much earlier through continuous monitoring. It collaborates well between teams, hands off the work smoothly, and the remediation of tasks is well organized with easy transitions. The initial setup was moderately easy for us. Review collected by and hosted on G2.com.

Even though it's highly effective, I find the customization and reporting capabilities somewhat limited for organizations with unique compliance requirements. Some integrations require additional manual configuration. And for complex environments, I need extra tools to get complete visibility and meet specialized security or regulatory needs. Review collected by and hosted on G2.com.

What I like best about Vanta is how it brings security compliance into one organized, easy-to-manage platform. The dashboard is clean and intuitive, making it simple to see which security controls are complete and which ones still require attention. Instead of tracking evidence manually, the automated integrations collect information from many of the tools our team already uses, which saves a significant amount of time and reduces repetitive work.

I also appreciate the continuous monitoring features because they help identify potential issues early instead of waiting until an audit. That gives our team more confidence that we're staying compliant throughout the year rather than scrambling before review time. The onboarding experience was straightforward, and the documentation made it easy to understand what each control required.

One benefit I didn't expect was how much easier collaboration became. Since evidence, tasks, and compliance progress are all centralized, everyone has visibility into what needs to be done without relying on long email threads or spreadsheets. Overall, Vanta has made the compliance process more efficient, transparent, and much less stressful. Review collected by and hosted on G2.com.

One area where Vanta could improve is making some of the compliance requirements more beginner-friendly. While the platform automates a lot of evidence collection, there are still controls that require manual interpretation, and it isn't always immediately clear what specific documentation is expected. More in-app examples or guided recommendations would help newer users complete these tasks with greater confidence.

As our organization connected more integrations, the amount of information in the dashboard increased significantly. Although it's comprehensive, it can sometimes feel overwhelming when trying to prioritize what needs immediate attention. Additional filtering, customizable views, or AI-powered prioritization could make the experience even more efficient.

Overall, these are usability improvements rather than major issues. The platform performs well and is reliable, but adding more contextual guidance and making navigation easier for first-time users would make an already strong product even better. Review collected by and hosted on G2.com.

It gives structure when going for certifications (ie ISO 27001, SOC2, GDPR) in complex business environments.

When setup properly, it gives a good view of progress towards framework compliance.

Questionnaire automation looks promising to safe time filling those out. Review collected by and hosted on G2.com.

The pre-made frameworks have a lot of overlapping similar tests & controls. It would make the process of collecting evidence more streamlined if these were combined better.

The automated tests look promising but in practice the auditors have still been requesting documented evidence that should have been covered by these automated tests.

Features that seem to me should be part of the basic package, such as filtering on a product for automated questionnaire answering, are charged as additional packages. Review collected by and hosted on G2.com.

I use Vanta as a compliance toolset for ISO 27001 and appreciate how it consolidates all tests, SLAs, and necessary proof for our audits in one place—not just for the yearly audit cycle, but also as a great daily tool for operations and traction. I like that Vanta makes vendor risk management very easy by analyzing all documents like SOC and ISO reports, and provides a well-thought-out questionnaire feature that we can send to vendors. The AI that automatically fills in forms and helps identify risks and findings early is incredibly helpful. It's also fantastic for auto-populating answers from major companies like AWS and Google using their own trust pages and reports. Additionally, the initial setup of Vanta was straightforward. Review collected by and hosted on G2.com.

A lot of policy templates are not well suited for Sweden. For example, the Code of Conduct includes unnecessary points like not bringing firearms into the office, which is not relevant to Swedish laws. There are also some policy templates that conflict with each other, and it's hard to find where and when. We used AI outside of Vanta to identify a lot of errors like that. Review collected by and hosted on G2.com.

Vanta is a fantastic tool for keeping track of all the processes that require our attention, it greatly facilitates assistance, saves us time, and helps keep the controls OK. Review collected by and hosted on G2.com.

If I had to add something to Vanta to improve it, it would be the communication between organizations, and secondly, make Vanta as a monitoring application a bit more stable in terms of failures or errors in device synchronization. Review collected by and hosted on G2.com.