Always improving, with great support and rarely any bugs. The sync integrations are fast and reliable, and overall it’s a wonderful tool to use. Review collected by and hosted on G2.com.

Pricing could be improved. As an Information Security Officer with over five years in the field, I don’t think it makes sense for purchasing the framework for GDPR or CCPA, for example, to be priced the same as SOC 2 Type II or ISO 27001. ISO 27001 and SOC 2 Type II require so many controls and tests, whereas GDPR is much less involved, and I believe that difference should be reflected in the pricing models Vanta adopts. Review collected by and hosted on G2.com.

Vanta democratizes SOC 2, ISO, and other certification preparation and audits. It tells me exactly what to do, when to do it, and what I’m missing along the way. I could have hired a larger, expensive consulting firm to handle all of this work for me, but with Vanta I didn’t need to. That’s allowed me to repurpose those budget dollars to where they’re most needed: my security stack. Review collected by and hosted on G2.com.

While Vanta makes it simple to prepare for and pass a SOC 2 certification audit, it can feel fairly rigid. What I like most is that you can connect your infrastructure and security tech stack and it does the rest—that’s literally how and why it works so well. It handles the control testing for you.

That said, there are often systems I can’t connect because privacy requirements don’t allow it, and there isn’t (as far as I know) much wiggle room in those situations. Also, when you connect anything, it seems to see everything and often surfaces systems, vendors, or issues that are irrelevant—basically false positives—that you then have to keep explaining away on each sync. Maybe they’ve solved this and I’m just not aware of where the magic “fix it” button is. Review collected by and hosted on G2.com.

Vanta’s ability to automate continuous compliance monitoring is a significant operational asset. The platform’s integration with our tech stack allows for real-time evidence collection, which has drastically reduced the manual administrative burden that usually accompanies security audits. I particularly value the centralized dashboard for tracking framework progress; it provides clear visibility into our security posture across SOC 2 and other standards, making it much easier to coordinate internal tasks without relying on fragmented spreadsheets or constant status meetings. Review collected by and hosted on G2.com.

While the automation is robust, there is a learning curve associated with setting up the initial mappings correctly across complex, multi-tool environments. I’ve also found that as we scale, managing third-party vendor risks can occasionally feel manual if the vendor isn't already within the Vanta ecosystem. Additionally, while the dashboard is great for high-level monitoring, I would appreciate more advanced, customizable reporting options to tailor views for different internal stakeholders without needing to export data to external tools for further analysis. Review collected by and hosted on G2.com.

It provides a centralised location for our ISMS which enables us to comply with different information security frameworks such as ISO 27001, ISO 42001 and SOC 2. Review collected by and hosted on G2.com.

Unfortunately Vanta doesn't provide us with the functionality to house everything from our ISMS within Vanta. There are still things we need to store outside of Vanta within Spreadsheets. Eventually, we want to house our full ISMS within Vanta.

This includes recording incidents and continual improvement actions. Review collected by and hosted on G2.com.

The prompt responses that come with articulate and clear steps on how to troubleshoot, which come with options incase the 1st option doesn't work then there is a fall back option. Also, during business hours (which I'm glad it's 24/7 Mon-Fri), Vanta support comes back to me as I'm interacting with my clients within around 1-1.5 hours. Review collected by and hosted on G2.com.

On a few occassions, the representatives that is working with me seems to have his/her hands tied as the rep(s) in context of the last few issues I faced with the vanta portal (not related to customer inquiries, but rather training material on vanta academy), the rep interacting with me sends me messages that he/she is awaiting a response. Review collected by and hosted on G2.com.

The dashboards/product landing pages are very useful. I like seeing the action items clear and centered. The notifications sent by the platform are excellent to remind myself (the assigned owner) and others to complete action items. Vanta also has a good number of integrations that are reliable and allow us to manage multiple items in a single place. Review collected by and hosted on G2.com.

Some things are hard to find and not very intuitive. There was a recent update on organization-level tests that no longer work across multiple products (for us, we have two products in Vanta but track organization-level in our 'main' product). This change broke our percentages so the product is less reliable now than it was before. Review collected by and hosted on G2.com.

Vanta's automated continuous monitoring is the biggest win — it constantly pulls evidence from JumpCloud, Google Workspace, AWS, and our other integrated tools, so we always know our compliance posture without manual audits. The access review workflows save us significant time each quarter, and the integration ecosystem is broad enough to cover most of our stack out of the box. Review collected by and hosted on G2.com.

The user access review workflow is tedious — exporting CSVs from each tool, uploading them, and manually matching users is time-consuming, especially for tools without a direct integration. Some integration coverage feels shallow (data syncs but doesn't always pick up the right evidence), and the UI can be slow to load when navigating between sections. Pricing also scales steeply as you add frameworks. Review collected by and hosted on G2.com.

Honestly I like its automated evidence collection feature a lot like you don't have to take screenshots manually and save them to a particular folder Vanta automatically does it for you. also its user interface is really good. Review collected by and hosted on G2.com.

I think the downside about this platform is its pricing like its basic plan even is so costly so I don't think its convenient for smaller teams and except this things are good Review collected by and hosted on G2.com.

I use Vanta for security compliance, and it has turned the manual gathering of evidence into an automated and continuous process. I connect Vanta directly to cloud services and identity platforms, which automatically monitors controls, tracks policy sign-offs, and highlights security gaps in real-time. It makes risk management straightforward by leveraging automated questionnaire responses and a Live Trust Center where clients and auditors can review security credentials on demand. I dive into Vanta’s dashboard whenever I need an end-to-end view of our security posture, audit progress, and sales pipeline readiness. I can run periodic access reviews across AWS, GitHub, and SAAS applications from a central dashboard to ensure only authorized employees have access to company resources. Vanta ensures that former employees or offboarded contractors instantly lose privileges. The initial setup was handled by Vanta vendors, so it was not my concern. Review collected by and hosted on G2.com.

I am frustrated with the frequent automated test failures for minor configuration drifts, which necessitate routine maintenance to keep the dashboard operational. Review collected by and hosted on G2.com.

"The most valuable aspect of Vanta is the ability to centralize security monitoring across our entire infrastructure. Instead of manually gathering statistics from dozens of disconnected services, I have a single pane of glass for all our security metrics.

As a manager, I particularly appreciate the task assignment functionality. It allows me to delegate specific tests and remediation tasks to employees within their respective domains. This distributed approach not only ensures that the right experts are handling the right issues but also helps in balancing the workload across the team, making our compliance process much more efficient." Review collected by and hosted on G2.com.

In my experience, the UI is currently Vanta's most significant drawback. The primary issue is the lack of seamless navigation between related data points, which forces constant switching between different modules. For instance, you cannot directly open a linked computer's details from the employee list, which is a major friction point in a manager's workflow. These small but frequent inconveniences and the absence of intuitive cross-linking make it difficult to access information quickly, often leading to a fragmented and less efficient user experience. Review collected by and hosted on G2.com.