Vanta Reviews & Product Details

I like how Vanta helps us see the steps needed to ensure compliance, like which documents should be on file and actions for onboarding and offboarding. Their dashboard is very intuitive and easy to use. I appreciate the daily email reminders for tasks, which help me stay on top of compliance. The initial setup was extremely easy with Vanta, as they did most of the work and I just had to follow the online instructions. Review collected by and hosted on G2.com.

The login feature is clumsy. I can only log in using a magic link and have never been able to use credentials or know how to set them up. Also, even though the dashboard is easy to use, it's hard to search for things if you don't know where they are. Sometimes I struggle to find a document or report when I need to update it. Review collected by and hosted on G2.com.

I really appreciate how simple Vanta is. It automatically gathers evidence or identifies failures and gaps in our security stance, which was always a pain in the past. This automation saves us a ton of time and money compared to doing it manually. The initial setup was dead simple, with no complexity other than the SOC 2 process itself. Vanta makes the entire SOC 2 process much easier and more affordable than anything we've done before. Review collected by and hosted on G2.com.

It's very minor, but sometimes when connecting to external systems, it could have a little bit more intelligence. It could just go put the tickets inside of our bug tracking system automatically. It has a button, but you end up manually configuring some stuff it already knows, which is not a huge headache but a nuisance. I think they could improve their product by connecting it fully end-to-end. They could notice a security problem and file that in our bug tracking system, and an agent would automatically pick it up, propose a solution, and alert us to review and merge. Review collected by and hosted on G2.com.

I like Vanta because it helps with monitoring and reporting, especially for compliance with HIPAA and SOC 2. As a monitoring user, I appreciate that the monitoring application is all-inclusive. As an admin, I like having clear action items and a list of tasks to take care of. It's helpful that Vanta automatically runs tests on our infrastructure, monitoring our workers' computers so we can track everything through one dashboard. This setup provides action items for the team to handle quickly. Review collected by and hosted on G2.com.

I think finding tests in the results list is hard sometimes. It takes some minutes to find them, and it's hard to sync that with the linear ticket. So that takes some time. Review collected by and hosted on G2.com.

UX is very good and easy to use, features and functionality work well and offer a good way for organisations to start to build out their security processes, procedures and policies.

The roles and user management meet expectations and the API has been very helpful in building automation between the various IT and security systems. Review collected by and hosted on G2.com.

The API is missing some features which would allow us to take our efficiency further (e.g. creating a security review on an existing vendor).

The vendor-review AI features are a bit basic and need refinement to add true value, such as ability to define the source scope against specific questions (the AI likes to sometimes use the wrong documents to answer specific questions), and the answer format (e.g. make it succinct). I hope Vanta invests more here so we can use it more to speed up our vendor reviews, as they're a huge time sink right now.

Also the access review feature is lacking and we've had to build our own for cases where there is a 1 user : many instances of the user account in the same product. Review collected by and hosted on G2.com.

I like that Vanta simplifies our HR Security workflows by automating onboarding requirements like background checks and training, and it tracks offboarding tasks to maintain a clean security posture. It's great for simplifying our hiring process, especially with quick background check services that work well for international employees. I appreciate how easy it is to centralize policy documentation and configure custom SLAs, ensuring every new hire signs off on time, which helps during security audits. Vanta acts as a complete system for managing our security posture, making the employee lifecycle smoother and keeping us audit-ready without the manual spreadsheet fatigue. I find the integration capability impressive, as it flagged shadow IT apps we weren't aware of, which tightened our security perimeter. The self-guided setup was clear enough that we could connect our integrations and get our first GRC program running smoothly on our own. Review collected by and hosted on G2.com.

I've been using Vanta for a while, and lately, it feels like the platform is getting more complex, what used to be simple now feels a bit cluttered with all the new features and layers of navigation. Review collected by and hosted on G2.com.

I use Vanta for SOC 2 compliance management, and it's amazing how it simplifies everything. Having one place to keep track of everything makes managing compliance so much easier. It's so simple to learn, and I went in as an untrained user last year and was able to learn the software easily. The fact that anyone on our security team can learn the software quickly and help with compliance is so helpful. The initial setup was super straightforward. Our sysadmin had no issues with the process, and it was easy to get it set up. Adding new vendors is easy, and when we had connection issues with a vendor, it was easy to solve. We've integrated it with Slack, GitLab, AWS, Gmail, Figma, and Sentry. Review collected by and hosted on G2.com.

I don't like that there are filters preset when you look at controls and tests. It would be nicer if nothing were filtered so when you check your tests/controls percentages you had an accurate count based on all data. Review collected by and hosted on G2.com.

I use Vanta to automate our compliance controls, and I really like its centralized nature and automation because it saves us a lot of time and makes checking our controls much less confusing. The trust center is another great addition since it provides customers with information on our security and compliance without us having to manually send that info or answer their questions every time. The integration process is easy, especially with Google, AWS, and Namely. The initial setup was extremely easy. I would rate my likelihood of recommending Vanta to a friend or colleague as a 9. Review collected by and hosted on G2.com.

Some of the tests for the controls seem arbitrary, also occasionally it has issues syncing data from other tools but those bugs are usually resolved fairly quickly. Review collected by and hosted on G2.com.

I use Vanta for certification compliance for SOC2, HIPAA, and more. I appreciate knowing all the controls I need to have in place and the ease of managing multiple frameworks. The automated tests make it so much easier than doing it manually. I like that it covers multiple compliance frameworks and is relatively easy to use. Starting with SOC2, I was able to progress significantly with HIPAA, GDPR, and ISO27001, completing HIPAA quickly and making a huge step forward with GDPR. The initial setup was relatively easy, and I got it running quickly. Review collected by and hosted on G2.com.

The percentage of completion on new frameworks does not really show accurately until the framework is actually activated. They do mention this. The percentage complete on new frameworks should be the same before and after the frameworks are turned on/off. Review collected by and hosted on G2.com.

I really like how Vanta simplifies the traditionally complex process of managing security and compliance programs. The strong integrations and clear visibility into compliance status save our team a lot of time. It allows us to stay audit-ready at all times while focusing on building and scaling our business without compromising security or privacy. I also appreciate how intuitive and well-organized the platform is, making it easy for non-experts to quickly understand what's required and what's already covered. Review collected by and hosted on G2.com.

There's a bit of a learning curve early on, especially when configuring controls and integrations for the first time. Some workflows could be a bit more customizable to better match internal processes, and more flexibility in reporting would be helpful. Review collected by and hosted on G2.com.

I like Vanta mostly for its easy-to-use interface. The vendor management piece is particularly noteworthy as it allows us to track vendors in a centralized area and conduct security reviews as part of our procurement process. Setting up Vanta and working on the framework is easy, especially with the ability to manage controls via the 'test' area, which makes starting our compliance journey straightforward. Review collected by and hosted on G2.com.

Security questionnaires still need improvement - there are times where it doesn't understand question context. E.g., OpenAI is different to ChatGPT but it doesn't understand the difference. The interface is still a little clunky and you can't bulk approve easily - I would suggest a shift + down to select multiple questions and approve. Another issue is the universal search in the questionnaire Knowledge Base - you need to be VERY specific on what you want. If you don't write it how the search wants you will not find what you are looking for. Review collected by and hosted on G2.com.