I think the practicality of being able to integrate things simply is a great advantage. Vanta has several integrations with the systems we already use here at Zenvia, which makes it easier to connect my MDM tools, for example. Additionally, it already provides compliance evidence, such as encrypted hard drives and screen lock policies, and also checks if antivirus is installed. The more I integrate, the more I can automate the collection of compliance evidence for the next audit, which greatly optimizes the entire process. The support team is very effective, with service via support@vanta.com in just a few minutes. The use of embedded Artificial Intelligence in the tool is a great differentiator, as it analyzes risk scopes and suggests ISO 27001 controls, as well as analyzes policies and collects controls and documents for compliance with ISO 27001 in an automated way. I notice a significant performance gain with all these Vanta functionalities compared to my old processes. Review collected by and hosted on G2.com.

I don't like the way the policy management module is implemented. Today, it basically functions as a general repository: all policies are in the same place, everyone can view and also edit them, and this is not granular at all.

In my opinion, there should at least be a more structured document management, by area or by type of document. There are documents with different levels of confidentiality, so it would make sense to allow limiting both access and, especially, editing. It would also be important to be able to control editing based on approving groups, with features more akin to document management tools.

I understand that it is a multidisciplinary tool, but for this type of need, I consider the document management model to be very simplistic. Review collected by and hosted on G2.com.

The best thing is the automated tests in Vanta. Review collected by and hosted on G2.com.

I have been a Vanta customer for several years, and while the platform is generally okay, there are several recurring issues that significantly affect the overall experience.

The biggest problem is customer support. Responses are often generic and filled with assurances that someone will follow up, but actual resolution is frequently delayed or never provided. In many cases, we have had to investigate and resolve the issue ourselves. The account management experience has been similarly frustrating.

The search functionality is another major weakness. It is difficult to find information unless you already know exactly where it is located. Search results are often incomplete or irrelevant, which makes navigating the platform unnecessarily time-consuming.

Performance is also consistently poor. Pages and actions are often slow, making routine work more frustrating than it should be.

Vanta has also introduced rate limiting within its own user interface. Certain actions or sections become temporarily unavailable because the platform is throttling its own paying users. This is extremely difficult to understand from a product-design perspective and creates unnecessary friction during normal use.

Most integrations work reasonably well, but there are occasional faulty or unreliable integrations that require manual troubleshooting. The desktop agent is particularly problematic. It detects compliance issues based on predefined checks, but provides very little practical guidance on how to understand or resolve them, leaving customers to figure out the next steps independently. Review collected by and hosted on G2.com.

It translates multiple framework controls into actionable items, monitors compliance, and lets you remediate deficiencies quickly. Because controls can be shared across multiple frameworks, fixing a test for one framework also improves compliance with other common requirements, such as patching, user access reviews, backups, and encryption. Automated tests flag when something that was fully compliant in the past needs to be addressed again due to workflow changes, so you don’t have to wait 11 months to discover a deviation at the next audit. Powerful functionality allows you to collect details from all contracts like common obligations such as incident notification SLAs, identify policy inconsistencies and discrepancies between policies and system settings.

The recent integrations of AI agents also supercharge audit responses by finding evidence across multiple systems and combining it into a meaningful narrative. Support is consistently responsive and stays focused on finding a solution. Review collected by and hosted on G2.com.

There’s a lot of information available in the tool that can be very useful for reports, KPIs, and historical evidence for auditors, but it isn’t always exposed or presented in a practical way. For most controls, there’s a large amount of historical data, and it can be difficult to filter down to what I need or to export it in a usable format. Review collected by and hosted on G2.com.

Me gusta la simplicidad de Vanta, tener todo en un solo lugar, y que me alerta de las próximas actividades. Me ayuda a llevar el monitoreo de las integraciones y a disminuir el tiempo en algunas actividades. También me permite planificar actividades con otros equipos internos. Además, encuentro el funcionamiento de la herramienta muy fácil de operar. Review collected by and hosted on G2.com.

Hay algunos controles que deberían estar más alineados a la norma que se cumple, algunos de estos controles contienen mapeos erróneos con las políticas que no deberían estar con el control. En la parte de documentos, piden algo que no debería subirse. He notado que las plantillas de las políticas están mapeadas con controles de normas desactualizadas que no deberían estar ahí, como por ejemplo en la norma ISO27001:2013 vs la 2022. También deben revisar la documentación guía para algunas plataformas que se actualizan, ya que no se ve lo que indica la guía. Review collected by and hosted on G2.com.

Vanta has truly transformed how we handle security and compliance workflows. The platform excels at making vulnerability management both easy and convenient—something that's rare in the compliance space. What I appreciate most is the intuitive way it allows us to manage and resolve security and compliance action items without the usual headaches.

The standout feature for me is the Linear integration. Being able to seamlessly convert vulnerabilities and security callouts into actionable tasks for our engineering team has been a game-changer. It bridges the gap between security/compliance teams and engineering, ensuring nothing falls through the cracks. Instead of manually tracking items in spreadsheets or bouncing between platforms, we can create tasks directly in Linear, which our engineers are already using daily. This integration alone has significantly improved our response time and accountability. Review collected by and hosted on G2.com.

While Vanta is excellent overall, there's definitely room for improvement in how it handles scan management. My main frustration is the lack of an easy way to deactivate scans that aren't relevant to our specific environment. When certain scans become repetitive or don't apply to our infrastructure, it would be incredibly helpful to have a more granular way to turn them off.

Additionally, I wish there was better memory functionality for deactivated action items. Currently, when you deactivate something, your options are limited—you can either deactivate it indefinitely or deal with it repeatedly. What would be ideal is a middle ground: an option for Vanta to "remember" that we've reviewed and dismissed certain items, without having to make permanent deactivation decisions. This would reduce noise and help us focus on genuinely relevant security issues. Review collected by and hosted on G2.com.

Vanta has made our compliance process much easier to manage . it automatically collects a lot of the evidence we need and keeps everything organized , which saves our team a lot of manual work . the platform is also fast and the dashboard is easy to understand . Review collected by and hosted on G2.com.

the pricing is probably the biggest downside , especially for startups and smaller teams . a few advanced features also take some time to get familiar with , but overall the platform has been stable . Review collected by and hosted on G2.com.

Honestly the feature of Vanta that I like the most is its Automated Evidence collection , like before people used to manually take the screenshots and then make a folder for it but it directly checks everything automatically by connecting to AWS , Google Workspace etc. Review collected by and hosted on G2.com.

I think it is a bit costly for small organisations because its basic plan starts from 10k dollars and the worst part about it is that when you renew it or add new frameworks then the bills increases gradually. Review collected by and hosted on G2.com.

Honestly , the best thing about it is like I don't need to manually take thousands of screenshots and keep them in a folder , this tool automatically does it for me , it helps us in security and audits . its performance is really good. The user Interface is also good Review collected by and hosted on G2.com.

the only thing I don't like about it is its high cost , like it is very costly for the teams which has lesser number of employees other than this everything is alright Review collected by and hosted on G2.com.

We use Vanta mainly for SOC2 compliance and to make sure we have all items listed in a way that we can easily track them, understand what their current status is and also who is responsible for each item. Vanta gives us the visibility and easy handling of tasks. Review collected by and hosted on G2.com.

So far, I can’t say there’s anything I don’t like about Vanta. We’re a startup with fewer than 10 employees, and we really value easy access and a quick, clear summary of our status. Up to this point, Vanta has delivered on both of those needs. Review collected by and hosted on G2.com.

The Feature of Vanta that helped our team the most is its automated evidence collection feature , it automates the human efforts because we don't have to take screenshots manually and keep it in a particular folder , Vanta itself does it for us . Its user interface is also good Review collected by and hosted on G2.com.

The thing which I don't like about Vanta or I should say the downside about Vanta is its pricing like it can feel a bit costly to small teams or startups , everything else than pricing is good Review collected by and hosted on G2.com.