Great support, fairly straightforward to use (lots of templates available to help you get started so you don't get super lost). The checklist is super helpful to keep track of what remains and integrations with other tools (eg, HRIS, repos, etc.) make it pretty straightforward to enforce company rules. The web app is solid -- straightforward, never had issues with it. As far as pricing is concerned, all major vendors came in at fairly comparable price, so this wasn't much of a differentiator. I didn't get to use their AI/intelligence much as an end-user, but seems like the offering there should be very good (many obvious places where it could be used to level up templates).

The AI assistant explains how to resolve tests.

Without a doubt, I like Vanta’s cross-framework mapping. A single policy or piece of evidence can satisfy overlapping requirements across PCI, SOC 2, and ISO without duplicating effort.