It’s a comprehensive, central place to keep track of compliance. It also offers a solid set of integrations that help with fulfilling compliance tasks. On top of that, audits can be handled within the same application, which helps avoid inefficiencies. Review collected by and hosted on G2.com.

- I have had some issues with how Tests and Documents are integrated

- The tests page filters sometimes show a different count than the tests displayed

- There is a lag between the Vanta Agent and the outcome in compliance tasks

- We have ran into some issues with the Vanta Agent, like not reporting correctly some security configuration settings from user's laptops, showing as being installed correctly but not reporting activity

- We have seen the HubSpot integration reporting incorrect information

- The menu could be sometimes confusing, especially between Documents, Controls and Policies

- Changing the owner of some resources is not standard, sometimes the owner is visible but other times it is hidden behind an option Review collected by and hosted on G2.com.

I really like how Vanta helps with drafting, especially by bringing specific company information into a template to streamline the process. I appreciate how it's evaluated across controls policy documentation, allowing me to save previous drafts and create new versions. This makes handling compliance information simpler, without starting from scratch, since all my data is already in one place. Review collected by and hosted on G2.com.

As much as I do know the Vanta agent, it could be improved in the sense that there are times that I will have to repeatedly tell it to remove highlight areas for specific brackets that work as placeholders within templates. I would prompt specifically to be removing this and replace it with information from our company, and it won't be doing it. So if there are times that I have to, or it will actually change it, and there can be some parts of it that aren't fully correct. It takes all these tasks without having to be asked multiple times. Review collected by and hosted on G2.com.

What I like best about Vanta is the centralized visibility it provides into our security and compliance posture. The automated monitoring of controls, integrations with our infrastructure and security tools, and continuous identification of issues help us detect gaps and prioritize remediation efforts. It also simplifies evidence collection and makes it easier to track compliance requirements and maintain visibility across the organization. Review collected by and hosted on G2.com.

One area that could be improved is the clarity and prioritization of some alerts and failed controls. At times, determining the exact root cause and the specific remediation steps requires additional investigation outside the platform. More detailed technical guidance and context for remediation would help security teams resolve issues faster and improve the overall workflow. Review collected by and hosted on G2.com.

I use Vanta to manage our SOC 2 and HIPAA compliance. It's organized and easy to use and understand, which keeps us from having to rely on spreadsheets or misunderstandings. I also find the built-in tool for auditors to complete audits really beneficial. The integrations are helpful as they monitor and help us stay up to date. Switching to Vanta from OneTrust was a good move because Vanta is more organized, easier to use, and helps us actually complete our SOC. The initial setup was easy with just a quick onboarding. Review collected by and hosted on G2.com.

I think the performance of the site can be slow to refresh sometimes. Sometimes the tests or percentages of completion for tests or goals are not accurate until refresh, or sometimes show something is wrong but when you do it's actually passing and just hasn't updated. Review collected by and hosted on G2.com.

I think the support that we received from Vanta's team is really good, and they're very responsive with addressing any questions or updates to their software. I've met with the development team personally to help design the next kind of iteration of the Vanta software, and they definitely take their customers' feedback very seriously and try to build a better product. The actual platform is fairly intuitive to understand, and I like the user interface and how it organizes a great amount of information to keep track of open items. The Vanta tool is easy to track and follow, helping with what open items are needed, getting back on track, and tracking due dates—essential for compliance or certifications like SOC 2. Setup was super easy as everything was very well laid out from the onboarding team, with templates and instructions detailed enough to get a small team started in the right direction. Review collected by and hosted on G2.com.

I think there's some strides that they could make in the nesting of certain features. For example, access reviews are a little bit difficult to find since they're pretty far nested underneath different tabs and groupings. The navigation aspects of the site could be better routed. Review collected by and hosted on G2.com.

I really like Vanta's centralized aspect. Everything is captured and tracked in one main location, which means I don't have to go hunting around in multiple places to piece together information related to enterprise risk management or management's risk mitigation plans. This centralized repository allows all updates to be reflected there, and reporting can be had from that one central place. It really helps tremendously, particularly for external audit readiness like for SOC 2, as it provides a clear picture of where we stand with outstanding documents and tests we've passed, so we always know our standing. Review collected by and hosted on G2.com.

There are some manual processes in Vanta that make things cumbersome. Specifically, in the action tracker, the notes section is a manual process where people can overwrite things that are already there. I don't get automatic notifications when someone makes updates, so I have to manually check if updates have been made. It's a bit of a pain. Review collected by and hosted on G2.com.

I use Vanta for SOC 2 compliance and it maintains all the documentation required for SOC 2 audits, like vendor reviews, in a neat and tidy process. I like the risk management features as well. Vanta's ease of use is something I really appreciate, with everything collected in one place, making audits so much simpler and quicker. Having the ability to flag failing tests throughout the year is also a huge help, as it saves us a lot of work correcting issues later. Review collected by and hosted on G2.com.

It can be a little bit hard to find the features. I feel like maybe the top-level naming could be clearer. Some of the drop-downs and things don't have tooltips that would make them a lot easier to navigate. For example, when you're doing a review of a vendor, there's something called a security owner and a business owner. I actually don't know what those mean, so I just kind of guessed. Adding more tooltips with explanations like, 'hey, this is required' or 'why this is required' would be very helpful. Trying to find things in documentation or trying to figure it out with an AI is kind of painful, and I would prefer not to have to do that. Review collected by and hosted on G2.com.

I really like the user interface and user experience of Vanta. It's very intuitive for me, the management team, as well as all our stakeholders, whether they are internal employees or any external firms we work with. It's unified and cohesive, making it seamless for almost anyone to understand. Review collected by and hosted on G2.com.

I think specifically for the vulnerabilities that we had, there's room for improvement. Even though it's not completely a Vanta issue, it has to do with how we're triaging and prioritizing them. Often, we have labels for GitHub vulnerabilities like critical, high, medium, low. But at the end of the day, if we had any missed day, it just showed that we were not compliant. I feel like there could be some sort of variability there so that if someone is approaching the platform, they can see the degrees to the vulnerabilities or outstanding things. Review collected by and hosted on G2.com.

I like that Vanta simplifies and automates our SOC 2 certification efforts every year. They give us access to competent auditors, which is really helpful. I appreciate their robust system and the lots of integrations they offer. It's great that Vanta essentially has their own auditor hub, and they refer auditors to us, saving a lot of time and making everything more streamlined and easier. The platform is especially useful as auditors can go in and see everything that has been uploaded, making things really clear and upfront for us. The initial setup was extremely easy and seamless, which is part of the reason we stay with it. Review collected by and hosted on G2.com.

I think sometimes moving around how they do certain tests, and I used to be able to easily hover over users when deactivating someone and pull up their profile. Now it's a little harder to do that, and there's more menus to go into to deprovision them, which used to be a lot simpler, I feel. Review collected by and hosted on G2.com.

Vanta's continuous monitoring does a lot of the heavy lifting for our ISO 27001 program. The integrations pull evidence automatically, so instead of chasing screenshots before an audit we get a live view of where our controls actually stand. The access and vendor tracking has been especially valuable for us — seeing who has access to what, keeping personnel onboarding and offboarding visible, and having vendor risk in one place has taken real manual effort off our plate. Over time it has become a reliable single source of truth for our compliance posture. Review collected by and hosted on G2.com.

There is a real learning curve at the start. Getting comfortable with how the platform is structured, understanding what each failing test actually means, and knowing how to action it takes time, so it helps to have someone able to invest in that initial setup phase. Review collected by and hosted on G2.com.