The thing which we as a team like the most about Vanta is its automated evidence collection feature like you don't need to manually take the screenshots and keep it to a particular folder Vanta automatically does this and helps in reducing the manual efforts also its super fast onboarding feature is very nice , also it is very easy to use so beginners don't get overwhelmed Review collected by and hosted on G2.com.

Honestly saying the pricing of Vanta can be improved a bit , like for larger teams it can be okay but for smaller teams it can feel a bit pricey because I think its base plan costs around ten thousands dollars Review collected by and hosted on G2.com.

What I like best about Vanta is the integration and automatic controls that greatly assist with compliance across various frameworks, significantly reducing manual effort. Additionally, the Vendor Risk Management section is very convenient, especially since the Trust Center link is automatically provided, streamlining the process and making it easier to manage vendor compliance efficiently. Review collected by and hosted on G2.com.

Vanta can feel overwhelming at first with so many features and compliance tasks. Some automated alerts are repetitive, and occasionally the AI hallucinates policy placements. With proper tuning, though, it becomes a powerful tool for streamlining compliance. Review collected by and hosted on G2.com.

The user interface is very easy to use. It makes filling out a form or keeping our SOC2 controls up to date incredibly easy and pain-free. We've added multiple integrations that assist with offboarding and maintaining accurate test results. Set-up was very easy with the given tutorials. When we got stuck, we would reach out to our support team and get instant help. Set-up was very easy with the given tutorials. When we got stuck, we would reach out to our support team and get instant help. Review collected by and hosted on G2.com.

It's a bit expensive, but it basically replaces an employee. For us, this was the reason to spend the money on such an application. Review collected by and hosted on G2.com.

I have been using vanta for so long and the feature I like most about this software is its automated evidence collection. I don't have to take thousands of screenshots manually and keep them in a specific folder. Vanta automatically does this for us and reduces our manual efforts. Also it's user interface and the overall experience of using software are so clean. Review collected by and hosted on G2.com.

The only downside of Vanta is its pricing. Its base plan costs around ten thousand dollars, so for smaller teams it can feel a bit costly. Other than that, this product is fine. Review collected by and hosted on G2.com.

The system is very easy to use, and it’s extremely helpful to be able to see at a glance which items need to be addressed. The integration process was quick and straightforward, without requiring a heavy lift from our engineering group. The update emails that call out what needs to be reviewed and resolved are useful as well, and they help us stay on top of everything in an efficient, organized way. Vanta's pricing was also very competitive compared to the other vendors we evaluated during our RFP process. Review collected by and hosted on G2.com.

Several third-party vendors we use didn’t have an integration feature at first. We were able to update and connect those vendors; however, the integration still isn’t fully functional and doesn’t report on all the necessary aspects of the service being used. For example, the system doesn’t seem to recognize when web browser password managers are used. It would be great if these password manager options were visible within the system. Review collected by and hosted on G2.com.

I love how well structured it is and how it’s tailored to the security standard you want to focus on. It clearly shows your organization’s current standing against each available security standard, so you can adjust your priorities and focus where it makes the most sense. I also appreciate that it integrates with almost any platform in your organization, which makes collecting the necessary data much easier. The interface is also very interactive with quick navigation to different controls. I also love the trust center feature allowing clients to gain access to your company's security posture easily and securely. Review collected by and hosted on G2.com.

it may be a little expensive for small businesses but they do have a unique pricing structure that may be able to cater to all clients Review collected by and hosted on G2.com.

I appreciate how Vanta has made a significant difference in the way we manage security, compliance, and governance by reducing the burden of fragmented and manual processes. It centralizes our data collection and automates scheduling, which uplifts our practices towards SOC 2 Type II. The way Vanta integrates with our ecosystem is incredibly valuable, supporting access reviews, surfacing known vulnerabilities for patching, and keeping evidence updated, doing a lot of the heavy lifting. It has rapidly helped us demonstrate to our board, enterprise clients, partners, and investors that we have the right controls in place to keep their data safe. I find the setup process of Vanta intuitive and logical, making it easy to get people on board and understand what comes next, while continuously offering improvements. Review collected by and hosted on G2.com.

One area I have noticed that could be improved is the access requests. It seems to work very well for existing users, but probably not the best for when you've got new onboards and you need to set up their access just prior to them starting. Usually, that's someone else in the team (such as a Manager) requesting access to systems on behalf of the new starter. I think having a flow for setting this up for a new starter might make this process easier. Review collected by and hosted on G2.com.

I think the practicality of being able to integrate things simply is a great advantage. Vanta has several integrations with the systems we already use here at Zenvia, which makes it easier to connect my MDM tools, for example. Additionally, it already provides compliance evidence, such as encrypted hard drives and screen lock policies, and also checks if antivirus is installed. The more I integrate, the more I can automate the collection of compliance evidence for the next audit, which greatly optimizes the entire process. The support team is very effective, with service via support@vanta.com in just a few minutes. The use of embedded Artificial Intelligence in the tool is a great differentiator, as it analyzes risk scopes and suggests ISO 27001 controls, as well as analyzes policies and collects controls and documents for compliance with ISO 27001 in an automated way. I notice a significant performance gain with all these Vanta functionalities compared to my old processes. Review collected by and hosted on G2.com.

I don't like the way the policy management module is implemented. Today, it basically functions as a general repository: all policies are in the same place, everyone can view and also edit them, and this is not granular at all.

In my opinion, there should at least be a more structured document management, by area or by type of document. There are documents with different levels of confidentiality, so it would make sense to allow limiting both access and, especially, editing. It would also be important to be able to control editing based on approving groups, with features more akin to document management tools.

I understand that it is a multidisciplinary tool, but for this type of need, I consider the document management model to be very simplistic. Review collected by and hosted on G2.com.

The best thing is the automated tests in Vanta. Review collected by and hosted on G2.com.

I have been a Vanta customer for several years, and while the platform is generally okay, there are several recurring issues that significantly affect the overall experience.

The biggest problem is customer support. Responses are often generic and filled with assurances that someone will follow up, but actual resolution is frequently delayed or never provided. In many cases, we have had to investigate and resolve the issue ourselves. The account management experience has been similarly frustrating.

The search functionality is another major weakness. It is difficult to find information unless you already know exactly where it is located. Search results are often incomplete or irrelevant, which makes navigating the platform unnecessarily time-consuming.

Performance is also consistently poor. Pages and actions are often slow, making routine work more frustrating than it should be.

Vanta has also introduced rate limiting within its own user interface. Certain actions or sections become temporarily unavailable because the platform is throttling its own paying users. This is extremely difficult to understand from a product-design perspective and creates unnecessary friction during normal use.

Most integrations work reasonably well, but there are occasional faulty or unreliable integrations that require manual troubleshooting. The desktop agent is particularly problematic. It detects compliance issues based on predefined checks, but provides very little practical guidance on how to understand or resolve them, leaving customers to figure out the next steps independently. Review collected by and hosted on G2.com.

It translates multiple framework controls into actionable items, monitors compliance, and lets you remediate deficiencies quickly. Because controls can be shared across multiple frameworks, fixing a test for one framework also improves compliance with other common requirements, such as patching, user access reviews, backups, and encryption. Automated tests flag when something that was fully compliant in the past needs to be addressed again due to workflow changes, so you don’t have to wait 11 months to discover a deviation at the next audit. Powerful functionality allows you to collect details from all contracts like common obligations such as incident notification SLAs, identify policy inconsistencies and discrepancies between policies and system settings.

The recent integrations of AI agents also supercharge audit responses by finding evidence across multiple systems and combining it into a meaningful narrative. Support is consistently responsive and stays focused on finding a solution. Review collected by and hosted on G2.com.

There’s a lot of information available in the tool that can be very useful for reports, KPIs, and historical evidence for auditors, but it isn’t always exposed or presented in a practical way. For most controls, there’s a large amount of historical data, and it can be difficult to filter down to what I need or to export it in a usable format. Review collected by and hosted on G2.com.