It provides a centralised location for our ISMS which enables us to comply with different information security frameworks such as ISO 27001, ISO 42001 and SOC 2. Review collected by and hosted on G2.com.

Unfortunately Vanta doesn't provide us with the functionality to house everything from our ISMS within Vanta. There are still things we need to store outside of Vanta within Spreadsheets. Eventually, we want to house our full ISMS within Vanta.

This includes recording incidents and continual improvement actions. Review collected by and hosted on G2.com.

The dashboards/product landing pages are very useful. I like seeing the action items clear and centered. The notifications sent by the platform are excellent to remind myself (the assigned owner) and others to complete action items. Vanta also has a good number of integrations that are reliable and allow us to manage multiple items in a single place. Review collected by and hosted on G2.com.

Some things are hard to find and not very intuitive. There was a recent update on organization-level tests that no longer work across multiple products (for us, we have two products in Vanta but track organization-level in our 'main' product). This change broke our percentages so the product is less reliable now than it was before. Review collected by and hosted on G2.com.

Vanta's automated continuous monitoring is the biggest win — it constantly pulls evidence from JumpCloud, Google Workspace, AWS, and our other integrated tools, so we always know our compliance posture without manual audits. The access review workflows save us significant time each quarter, and the integration ecosystem is broad enough to cover most of our stack out of the box. Review collected by and hosted on G2.com.

The user access review workflow is tedious — exporting CSVs from each tool, uploading them, and manually matching users is time-consuming, especially for tools without a direct integration. Some integration coverage feels shallow (data syncs but doesn't always pick up the right evidence), and the UI can be slow to load when navigating between sections. Pricing also scales steeply as you add frameworks. Review collected by and hosted on G2.com.

Honestly I like its automated evidence collection feature a lot like you don't have to take screenshots manually and save them to a particular folder Vanta automatically does it for you. also its user interface is really good. Review collected by and hosted on G2.com.

I think the downside about this platform is its pricing like its basic plan even is so costly so I don't think its convenient for smaller teams and except this things are good Review collected by and hosted on G2.com.

I like that Vanta because it gives me visibility into compliance progress without requiring me to understand every technical detail. My role isn't security focused, but I still need accurate information before enterprise prospects review our documentation. Also AI automated evidence collection has reduced the amount of back and forth with engineering because much of the required information is already available when I need it. I still review everything before it's shared, but there's far less uncertainty than there used to be. There was definitely a learning curve around some compliance concepts as its interface was little complex for me to understand, but once that clicked, preparing security documentation became much more predictable. That's probably the part I appreciate the most. and Vanta support is always there whenever i get stuck somewhere so i really don't feel any problem now with using the platform Review collected by and hosted on G2.com.

I don't have many complaints i really love using Vanta, but sometimes it can generate quite a few notifications when multiple compliance activities are happening at the same time. None of them are incorrect, yet it takes a bit of sorting to figure out which updates actually need my attention and which are simply informational. if i had more control over how those notifications are grouped or prioritized would make it easier to stay focused without checking every single alert which will improve its perfomace even more. Review collected by and hosted on G2.com.

I use Vanta for security compliance, and it has turned the manual gathering of evidence into an automated and continuous process. I connect Vanta directly to cloud services and identity platforms, which automatically monitors controls, tracks policy sign-offs, and highlights security gaps in real-time. It makes risk management straightforward by leveraging automated questionnaire responses and a Live Trust Center where clients and auditors can review security credentials on demand. I dive into Vanta’s dashboard whenever I need an end-to-end view of our security posture, audit progress, and sales pipeline readiness. I can run periodic access reviews across AWS, GitHub, and SAAS applications from a central dashboard to ensure only authorized employees have access to company resources. Vanta ensures that former employees or offboarded contractors instantly lose privileges. The initial setup was handled by Vanta vendors, so it was not my concern. Review collected by and hosted on G2.com.

I am frustrated with the frequent automated test failures for minor configuration drifts, which necessitate routine maintenance to keep the dashboard operational. Review collected by and hosted on G2.com.

"The most valuable aspect of Vanta is the ability to centralize security monitoring across our entire infrastructure. Instead of manually gathering statistics from dozens of disconnected services, I have a single pane of glass for all our security metrics.

As a manager, I particularly appreciate the task assignment functionality. It allows me to delegate specific tests and remediation tasks to employees within their respective domains. This distributed approach not only ensures that the right experts are handling the right issues but also helps in balancing the workload across the team, making our compliance process much more efficient." Review collected by and hosted on G2.com.

In my experience, the UI is currently Vanta's most significant drawback. The primary issue is the lack of seamless navigation between related data points, which forces constant switching between different modules. For instance, you cannot directly open a linked computer's details from the employee list, which is a major friction point in a manager's workflow. These small but frequent inconveniences and the absence of intuitive cross-linking make it difficult to access information quickly, often leading to a fragmented and less efficient user experience. Review collected by and hosted on G2.com.

I like that Vanta is configurable, which is really useful for us because we have several frameworks to adhere to, and each year, new ones are added. Vanta allows us to have the same controls being mapped to different frameworks, so we avoid having to search for the same information several times a year. We just use one control and link it to different frameworks. It's also great that you can create custom frameworks, configure it to match the requirements of different frameworks, and you only have to work on a control once a year. This saves a lot of time and avoids unnecessary duplication of work. Review collected by and hosted on G2.com.

What doesn't work well is the policy alerting when it's about to expire because we can see it's about to expire, but we don't see a test saying it needs to be reviewed within a month. So I need to manually go and check which ones are about to expire, and I asked Vanta support about this. But it was not solved. Review collected by and hosted on G2.com.

I really appreciate how Vanta has automated 90% of our evidence collection across over 35 security frameworks like HIPAA. The platform checks our system configuration on an hourly basis, which gives me peace of mind knowing we won't accidentally fall out of compliance. Implementing this platform has completely changed our auditing process by hooking directly into our cloud infrastructure and automatically pulling evidence in real time. The biggest win for us was Vanta's massive integration ecosystem, which connected out of the box with almost every application and tool we already use. This automation saved us weeks of manual data gathering. The initial deployment was smooth, too. Review collected by and hosted on G2.com.

During deployment, I found that the automated tests triggered a nonstop wave of notifications even for minor issues. Review collected by and hosted on G2.com.

I find Vanta incredibly helpful for our ISO 27001 certification process. It allows us to work in a structured way and keeps everything in one place, ensuring good process organization. The reminders about tasks and updates we need to handle are very useful. My favorite feature is definitely the AI assistant, which acts as a great sounding board and partner to help me understand different tests, requirements, and how to take the correct actions. I also good really good support and help from our CSM Jamie! Review collected by and hosted on G2.com.

I believe the search function for searching across different tests is pretty poor. The search result isn't always very smart, and I think that's an area for improvement. Review collected by and hosted on G2.com.