I like that Vanta helps us a lot in being SOC 2 compliant. It's also quite helpful as we're working on ISO 27000 certification. Vanta provides a consolidated view of our entire compliance policy, allowing me to monitor anything and everything related to compliance. The timely reminders to update our documents and policies that we might have missed are particularly beneficial. I find the Slack upgrade and the time limit features quite helpful as they give an exact timeline for upgrades. Review collected by and hosted on G2.com.

The search features in Vanta are a bit confusing. Searching for specific policies or compliance issues can be cumbersome, especially if I don't have the links readily available. It's not very user-friendly, and the search functionality doesn't work properly when looking for particular compliance issues or policies. This aspect could be improved a bit. Review collected by and hosted on G2.com.

What I like most about Vanta is how much manual work it removes from our compliance audits. Automated evidence collection and continuous monitoring across our tech stack (AWS, GitHub, Google Workspace, etc.) mean we’re not scrambling to gather screenshots and logs every time an auditor asks for something—it’s already there and kept up to date in real time. The pre-built control mappings for frameworks like SOC 2 and ISO 42001 also saved us a lot of time by clarifying what evidence ties to which requirement. On top of that, the dashboard makes it easy to see at a glance which controls are passing or failing, so we can address issues before they turn into audit findings rather than reacting afterward. Review collected by and hosted on G2.com.

What I dislike about Vanta is that some of the automated checks can be overly rigid or throw false positives, which then forces a manual review just to confirm a control is actually fine. Pricing can also feel steep as you add more integrations or frameworks, and it isn’t always clear or transparent upfront. A few integrations are also shallower than I expected: they’ll flag an issue, but they don’t always provide enough context to resolve it without digging into the underlying system yourself. Customer support has been hit or miss depending on who picks up the ticket, and the UI—while generally clean—can start to feel cluttered once you’re managing multiple frameworks at the same time. Review collected by and hosted on G2.com.

I really like how easy it is to review all documents and controls. The integrations are very useful and give time back to my team. The pricing is very high, though, which makes it hard to sell to smaller customers. That being said, it does the job extremely well. The app itself is always fast and reliable. The automated alerts on controls is very useful. Support is very quick to help Review collected by and hosted on G2.com.

Honestly no real downsides. the automation can get a little aggressive, but better safe than sorry. Review collected by and hosted on G2.com.

It’s very easy to use and intuitive, and it offers a lot of useful features that make it practical and convenient. It has all the integrations we need and the pricing is accesible. Another advantage was that we could create a payment plan, to help our cashflow. The AI features are great when you submit the evidence, as they flag any inadvertence. The onboarding was easy. Highly recommend Review collected by and hosted on G2.com.

Policies to be available in our local language or maybe even the entire interface. It would be very useful because the laws in our country spcify that all official documents should be written in our language (Romanian in my case) Review collected by and hosted on G2.com.

I use Vanta to ensure that our product meets security and compliance requirements while keeping product release on schedule. It gives me visibility into the organization's compliance status for frameworks such as SOC2 and ISO 27001, which allows me to coordinate with engineering, security, and compliance teams. I like the continuous monitoring feature the most, as Vanta doesn't just check compliance during audit season but continuously monitors connected systems such as cloud infrastructure, identity providers, and endpoint management. If a new employee's laptop encryption is disabled or critical security settings fall out of compliance, Vanta automatically flags the issue and assigns the appropriate task. Continuous monitoring automatically checks our cloud infrastructure, user access, devices, and security controls around the clock. Instead of waiting for audits, Vanta immediately alerts us to compliance issues, allowing my team to resolve them quickly. This keeps us audit ready, reduces manual efforts, minimizes security risks, and gives me confidence that our product remains compliant as it evolves. Setting up Vanta was easy for us. Review collected by and hosted on G2.com.

There's not a major improvement needed for Vanta, but I would like to see improvement. Configuring the platform for complex environments can take time, especially for organizations using many custom systems. Also, some compliance checks still require manual evidence because they are not fully automated, so these need to be automated first. Review collected by and hosted on G2.com.

As a cloud security engineer, I really appreciate Vanta for its ability to continuously monitor our AWS and Azure environments for compliance and security risks. I check Vanta's dashboard daily to review failed controls and coordinate remediations, which saves me a lot of time compared to manual checks. The integration with platforms like GitHub and endpoint management tools is smooth, allowing for automatic evaluation of security controls such as MFA, encryption, access permissions, and device compliance. I love the feature of continuous monitoring; if anyone creates an AWS resource that doesn't meet our security policy, Vanta detects it automatically and flags it, alerting me so I can address it before it becomes a security risk. It also helps in identifying gaps in real time, centralizes visibility, and reduces manual preparation for audits, which lowers operational costs and enhances regulatory compliance. Review collected by and hosted on G2.com.

I would like to see improvement in some compliance controls which require manual evidence or policy reviews because it cannot be fully automated. Also, organizations which require cloud environment may need additional configuration or supplemental tools to monitor specialized security requirements. Review collected by and hosted on G2.com.

What I like most about Vanta is how it simplifies security and compliance without making the process feel overwhelming. the dashboard is easy to navigate, and the automated monitoring saves a lot of time compared to handling everything manually.it also makes it easier to stay organized by keeping compliance tasks, evidence, and integrations in one place. Overall, it has helped our team work more efficiently and maintain better visibility into our security. Review collected by and hosted on G2.com.

One thing I think could be improved is the initial setup learning curve. I also feel that a few workflows could be more intuitive, but once you're familiar with the platform, it becomes much easier to use. Review collected by and hosted on G2.com.

From an HR and People Operations standpoint, Vanta has made the security and compliance side of onboarding genuinely manageable. New hires get auto-enrolled into the security training and agent install workflow as soon as they're added to our HRIS, which means I'm not chasing people down on Day 1 to complete their compliance items, it just runs in the background. The training is short, well-designed, and doesn't make new hires feel like they're being lectured, which matters when you're trying to make Week 1 feel welcoming, not bureaucratic. Review collected by and hosted on G2.com.

The security training itself is short and well-designed, which matters more than people realize. New hires don't dread it, and that keeps Week 1 feeling welcoming rather than bureaucratic. For our SOC 2 work, the evidence collection happening in the background means audit prep isn't a fire drill, it's a side effect of normal operations.

One small friction point worth naming: new hires unfamiliar with MDM-style agents occasionally get confused by the install flow on Day 1. I've solved this with a one-line heads-up in the welcome email, but it's worth building into your onboarding comms from the start. Review collected by and hosted on G2.com.

I truly appreciate Vanta because it automatically runs over a thousand tests every single hour to ensure our files are locked safely, employee background checks are completed, and only the right people have access to data. I like that Vanta works by plugging directly into all our digital tools such as cloud storage, work emails, and employee management systems. Once connected, it automatically scans the system and sends alerts if something feels wrong. Before Vanta, it was a nightmare to manually copy-paste data and track security compliance and regulatory needs. Vanta has resolved this chaos by automatically scanning the system and putting all the security requirements into an easy-to-comply checklist. Review collected by and hosted on G2.com.

The setup takes time as we have to manually click through and fix configuration settings for days together. Review collected by and hosted on G2.com.

The feature I like the most is its continuous monitoring. Instead of waiting until an audit to discover issues, it alerts me immediately if a device becomes non-compliant or if multi-factor authentication is disabled. I also like the centralized dashboard because it gives me a clear view of my organization's overall security and compliance status. It significantly reduces the time I spend on repetitive compliance tasks and manual evidence collection, and it eliminates the need to gather screenshots and documentation from multiple systems before every audit. It simplifies access reviews and policy tracking, which lets my IT team focus more on strengthening infrastructure and supporting employees. The automated monitoring helps us identify security gaps early, reducing operational risk and improving overall compliance. As a real example, during a quarterly access review, Vanta generated an alert that a recently onboarded engineer did not have MFA enabled on their Google Workspace and flagged the control as non-compliant within a few hours, so I contacted the employee, had them enforce MFA through Okta, and verified the change in Vanta. It provides alerts and clear remediation guidance that help me review and resolve compliance issues quickly and keep us audit ready. It's easy to use, and the initial setup was easy. I also use it with Jira for remediation tracking and Slack for notifications. Review collected by and hosted on G2.com.

Vanta is easy to use, but some of the advanced settings and integrations require technical knowledge to configure correctly. Certain alerts can also generate extra investigation work before I can tell whether they're genuine compliance issues. And some of the reporting features lack the level of detail I need for executive presentations. Review collected by and hosted on G2.com.