I have been using vanta for so long and the feature I like most about this software is its automated evidence collection. I don't have to take thousands of screenshots manually and keep them in a specific folder. Vanta automatically does this for us and reduces our manual efforts. Also it's user interface and the overall experience of using software are so clean. Review collected by and hosted on G2.com.

The only downside of Vanta is its pricing. Its base plan costs around ten thousand dollars, so for smaller teams it can feel a bit costly. Other than that, this product is fine. Review collected by and hosted on G2.com.

The system is very easy to use, and it’s extremely helpful to be able to see at a glance which items need to be addressed. The integration process was quick and straightforward, without requiring a heavy lift from our engineering group. The update emails that call out what needs to be reviewed and resolved are useful as well, and they help us stay on top of everything in an efficient, organized way. Vanta's pricing was also very competitive compared to the other vendors we evaluated during our RFP process. Review collected by and hosted on G2.com.

Several third-party vendors we use didn’t have an integration feature at first. We were able to update and connect those vendors; however, the integration still isn’t fully functional and doesn’t report on all the necessary aspects of the service being used. For example, the system doesn’t seem to recognize when web browser password managers are used. It would be great if these password manager options were visible within the system. Review collected by and hosted on G2.com.

I love how well structured it is and how it’s tailored to the security standard you want to focus on. It clearly shows your organization’s current standing against each available security standard, so you can adjust your priorities and focus where it makes the most sense. I also appreciate that it integrates with almost any platform in your organization, which makes collecting the necessary data much easier. The interface is also very interactive with quick navigation to different controls. I also love the trust center feature allowing clients to gain access to your company's security posture easily and securely. Review collected by and hosted on G2.com.

it may be a little expensive for small businesses but they do have a unique pricing structure that may be able to cater to all clients Review collected by and hosted on G2.com.

I appreciate how Vanta has made a significant difference in the way we manage security, compliance, and governance by reducing the burden of fragmented and manual processes. It centralizes our data collection and automates scheduling, which uplifts our practices towards SOC 2 Type II. The way Vanta integrates with our ecosystem is incredibly valuable, supporting access reviews, surfacing known vulnerabilities for patching, and keeping evidence updated, doing a lot of the heavy lifting. It has rapidly helped us demonstrate to our board, enterprise clients, partners, and investors that we have the right controls in place to keep their data safe. I find the setup process of Vanta intuitive and logical, making it easy to get people on board and understand what comes next, while continuously offering improvements. Review collected by and hosted on G2.com.

One area I have noticed that could be improved is the access requests. It seems to work very well for existing users, but probably not the best for when you've got new onboards and you need to set up their access just prior to them starting. Usually, that's someone else in the team (such as a Manager) requesting access to systems on behalf of the new starter. I think having a flow for setting this up for a new starter might make this process easier. Review collected by and hosted on G2.com.

I think the practicality of being able to integrate things simply is a great advantage. Vanta has several integrations with the systems we already use here at Zenvia, which makes it easier to connect my MDM tools, for example. Additionally, it already provides compliance evidence, such as encrypted hard drives and screen lock policies, and also checks if antivirus is installed. The more I integrate, the more I can automate the collection of compliance evidence for the next audit, which greatly optimizes the entire process. The support team is very effective, with service via support@vanta.com in just a few minutes. The use of embedded Artificial Intelligence in the tool is a great differentiator, as it analyzes risk scopes and suggests ISO 27001 controls, as well as analyzes policies and collects controls and documents for compliance with ISO 27001 in an automated way. I notice a significant performance gain with all these Vanta functionalities compared to my old processes. Review collected by and hosted on G2.com.

I don't like the way the policy management module is implemented. Today, it basically functions as a general repository: all policies are in the same place, everyone can view and also edit them, and this is not granular at all.

In my opinion, there should at least be a more structured document management, by area or by type of document. There are documents with different levels of confidentiality, so it would make sense to allow limiting both access and, especially, editing. It would also be important to be able to control editing based on approving groups, with features more akin to document management tools.

I understand that it is a multidisciplinary tool, but for this type of need, I consider the document management model to be very simplistic. Review collected by and hosted on G2.com.

The best thing is the automated tests in Vanta. Review collected by and hosted on G2.com.

I have been a Vanta customer for several years, and while the platform is generally okay, there are several recurring issues that significantly affect the overall experience.

The biggest problem is customer support. Responses are often generic and filled with assurances that someone will follow up, but actual resolution is frequently delayed or never provided. In many cases, we have had to investigate and resolve the issue ourselves. The account management experience has been similarly frustrating.

The search functionality is another major weakness. It is difficult to find information unless you already know exactly where it is located. Search results are often incomplete or irrelevant, which makes navigating the platform unnecessarily time-consuming.

Performance is also consistently poor. Pages and actions are often slow, making routine work more frustrating than it should be.

Vanta has also introduced rate limiting within its own user interface. Certain actions or sections become temporarily unavailable because the platform is throttling its own paying users. This is extremely difficult to understand from a product-design perspective and creates unnecessary friction during normal use.

Most integrations work reasonably well, but there are occasional faulty or unreliable integrations that require manual troubleshooting. The desktop agent is particularly problematic. It detects compliance issues based on predefined checks, but provides very little practical guidance on how to understand or resolve them, leaving customers to figure out the next steps independently. Review collected by and hosted on G2.com.

It translates multiple framework controls into actionable items, monitors compliance, and lets you remediate deficiencies quickly. Because controls can be shared across multiple frameworks, fixing a test for one framework also improves compliance with other common requirements, such as patching, user access reviews, backups, and encryption. Automated tests flag when something that was fully compliant in the past needs to be addressed again due to workflow changes, so you don’t have to wait 11 months to discover a deviation at the next audit. Powerful functionality allows you to collect details from all contracts like common obligations such as incident notification SLAs, identify policy inconsistencies and discrepancies between policies and system settings.

The recent integrations of AI agents also supercharge audit responses by finding evidence across multiple systems and combining it into a meaningful narrative. Support is consistently responsive and stays focused on finding a solution. Review collected by and hosted on G2.com.

There’s a lot of information available in the tool that can be very useful for reports, KPIs, and historical evidence for auditors, but it isn’t always exposed or presented in a practical way. For most controls, there’s a large amount of historical data, and it can be difficult to filter down to what I need or to export it in a usable format. Review collected by and hosted on G2.com.

Me gusta la simplicidad de Vanta, tener todo en un solo lugar, y que me alerta de las próximas actividades. Me ayuda a llevar el monitoreo de las integraciones y a disminuir el tiempo en algunas actividades. También me permite planificar actividades con otros equipos internos. Además, encuentro el funcionamiento de la herramienta muy fácil de operar. Review collected by and hosted on G2.com.

Hay algunos controles que deberían estar más alineados a la norma que se cumple, algunos de estos controles contienen mapeos erróneos con las políticas que no deberían estar con el control. En la parte de documentos, piden algo que no debería subirse. He notado que las plantillas de las políticas están mapeadas con controles de normas desactualizadas que no deberían estar ahí, como por ejemplo en la norma ISO27001:2013 vs la 2022. También deben revisar la documentación guía para algunas plataformas que se actualizan, ya que no se ve lo que indica la guía. Review collected by and hosted on G2.com.

Vanta has truly transformed how we handle security and compliance workflows. The platform excels at making vulnerability management both easy and convenient—something that's rare in the compliance space. What I appreciate most is the intuitive way it allows us to manage and resolve security and compliance action items without the usual headaches.

The standout feature for me is the Linear integration. Being able to seamlessly convert vulnerabilities and security callouts into actionable tasks for our engineering team has been a game-changer. It bridges the gap between security/compliance teams and engineering, ensuring nothing falls through the cracks. Instead of manually tracking items in spreadsheets or bouncing between platforms, we can create tasks directly in Linear, which our engineers are already using daily. This integration alone has significantly improved our response time and accountability. Review collected by and hosted on G2.com.

While Vanta is excellent overall, there's definitely room for improvement in how it handles scan management. My main frustration is the lack of an easy way to deactivate scans that aren't relevant to our specific environment. When certain scans become repetitive or don't apply to our infrastructure, it would be incredibly helpful to have a more granular way to turn them off.

Additionally, I wish there was better memory functionality for deactivated action items. Currently, when you deactivate something, your options are limited—you can either deactivate it indefinitely or deal with it repeatedly. What would be ideal is a middle ground: an option for Vanta to "remember" that we've reviewed and dismissed certain items, without having to make permanent deactivation decisions. This would reduce noise and help us focus on genuinely relevant security issues. Review collected by and hosted on G2.com.

Honestly the feature of Vanta that I like the most is its Automated Evidence collection , like before people used to manually take the screenshots and then make a folder for it but it directly checks everything automatically by connecting to AWS , Google Workspace etc. Review collected by and hosted on G2.com.

I think it is a bit costly for small organisations because its basic plan starts from 10k dollars and the worst part about it is that when you renew it or add new frameworks then the bills increases gradually. Review collected by and hosted on G2.com.