I really like how easy it is to review all documents and controls. The integrations are very useful and give time back to my team. The pricing is very high, though, which makes it hard to sell to smaller customers. That being said, it does the job extremely well. The app itself is always fast and reliable. The automated alerts on controls is very useful. Support is very quick to help Review collected by and hosted on G2.com.

Honestly no real downsides. the automation can get a little aggressive, but better safe than sorry. Review collected by and hosted on G2.com.

It’s very easy to use and intuitive, and it offers a lot of useful features that make it practical and convenient. It has all the integrations we need and the pricing is accesible. Another advantage was that we could create a payment plan, to help our cashflow. The AI features are great when you submit the evidence, as they flag any inadvertence. The onboarding was easy. Highly recommend Review collected by and hosted on G2.com.

Policies to be available in our local language or maybe even the entire interface. It would be very useful because the laws in our country spcify that all official documents should be written in our language (Romanian in my case) Review collected by and hosted on G2.com.

I use Vanta to ensure that our product meets security and compliance requirements while keeping product release on schedule. It gives me visibility into the organization's compliance status for frameworks such as SOC2 and ISO 27001, which allows me to coordinate with engineering, security, and compliance teams. I like the continuous monitoring feature the most, as Vanta doesn't just check compliance during audit season but continuously monitors connected systems such as cloud infrastructure, identity providers, and endpoint management. If a new employee's laptop encryption is disabled or critical security settings fall out of compliance, Vanta automatically flags the issue and assigns the appropriate task. Continuous monitoring automatically checks our cloud infrastructure, user access, devices, and security controls around the clock. Instead of waiting for audits, Vanta immediately alerts us to compliance issues, allowing my team to resolve them quickly. This keeps us audit ready, reduces manual efforts, minimizes security risks, and gives me confidence that our product remains compliant as it evolves. Setting up Vanta was easy for us. Review collected by and hosted on G2.com.

There's not a major improvement needed for Vanta, but I would like to see improvement. Configuring the platform for complex environments can take time, especially for organizations using many custom systems. Also, some compliance checks still require manual evidence because they are not fully automated, so these need to be automated first. Review collected by and hosted on G2.com.

As a cloud security engineer, I really appreciate Vanta for its ability to continuously monitor our AWS and Azure environments for compliance and security risks. I check Vanta's dashboard daily to review failed controls and coordinate remediations, which saves me a lot of time compared to manual checks. The integration with platforms like GitHub and endpoint management tools is smooth, allowing for automatic evaluation of security controls such as MFA, encryption, access permissions, and device compliance. I love the feature of continuous monitoring; if anyone creates an AWS resource that doesn't meet our security policy, Vanta detects it automatically and flags it, alerting me so I can address it before it becomes a security risk. It also helps in identifying gaps in real time, centralizes visibility, and reduces manual preparation for audits, which lowers operational costs and enhances regulatory compliance. Review collected by and hosted on G2.com.

I would like to see improvement in some compliance controls which require manual evidence or policy reviews because it cannot be fully automated. Also, organizations which require cloud environment may need additional configuration or supplemental tools to monitor specialized security requirements. Review collected by and hosted on G2.com.

What I like most about Vanta is how it simplifies security and compliance without making the process feel overwhelming. the dashboard is easy to navigate, and the automated monitoring saves a lot of time compared to handling everything manually.it also makes it easier to stay organized by keeping compliance tasks, evidence, and integrations in one place. Overall, it has helped our team work more efficiently and maintain better visibility into our security. Review collected by and hosted on G2.com.

One thing I think could be improved is the initial setup learning curve. I also feel that a few workflows could be more intuitive, but once you're familiar with the platform, it becomes much easier to use. Review collected by and hosted on G2.com.

From an HR and People Operations standpoint, Vanta has made the security and compliance side of onboarding genuinely manageable. New hires get auto-enrolled into the security training and agent install workflow as soon as they're added to our HRIS, which means I'm not chasing people down on Day 1 to complete their compliance items, it just runs in the background. The training is short, well-designed, and doesn't make new hires feel like they're being lectured, which matters when you're trying to make Week 1 feel welcoming, not bureaucratic. Review collected by and hosted on G2.com.

The security training itself is short and well-designed, which matters more than people realize. New hires don't dread it, and that keeps Week 1 feeling welcoming rather than bureaucratic. For our SOC 2 work, the evidence collection happening in the background means audit prep isn't a fire drill, it's a side effect of normal operations.

One small friction point worth naming: new hires unfamiliar with MDM-style agents occasionally get confused by the install flow on Day 1. I've solved this with a one-line heads-up in the welcome email, but it's worth building into your onboarding comms from the start. Review collected by and hosted on G2.com.

I truly appreciate Vanta because it automatically runs over a thousand tests every single hour to ensure our files are locked safely, employee background checks are completed, and only the right people have access to data. I like that Vanta works by plugging directly into all our digital tools such as cloud storage, work emails, and employee management systems. Once connected, it automatically scans the system and sends alerts if something feels wrong. Before Vanta, it was a nightmare to manually copy-paste data and track security compliance and regulatory needs. Vanta has resolved this chaos by automatically scanning the system and putting all the security requirements into an easy-to-comply checklist. Review collected by and hosted on G2.com.

The setup takes time as we have to manually click through and fix configuration settings for days together. Review collected by and hosted on G2.com.

The feature I like the most is its continuous monitoring. Instead of waiting until an audit to discover issues, it alerts me immediately if a device becomes non-compliant or if multi-factor authentication is disabled. I also like the centralized dashboard because it gives me a clear view of my organization's overall security and compliance status. It significantly reduces the time I spend on repetitive compliance tasks and manual evidence collection, and it eliminates the need to gather screenshots and documentation from multiple systems before every audit. It simplifies access reviews and policy tracking, which lets my IT team focus more on strengthening infrastructure and supporting employees. The automated monitoring helps us identify security gaps early, reducing operational risk and improving overall compliance. As a real example, during a quarterly access review, Vanta generated an alert that a recently onboarded engineer did not have MFA enabled on their Google Workspace and flagged the control as non-compliant within a few hours, so I contacted the employee, had them enforce MFA through Okta, and verified the change in Vanta. It provides alerts and clear remediation guidance that help me review and resolve compliance issues quickly and keep us audit ready. It's easy to use, and the initial setup was easy. I also use it with Jira for remediation tracking and Slack for notifications. Review collected by and hosted on G2.com.

Vanta is easy to use, but some of the advanced settings and integrations require technical knowledge to configure correctly. Certain alerts can also generate extra investigation work before I can tell whether they're genuine compliance issues. And some of the reporting features lack the level of detail I need for executive presentations. Review collected by and hosted on G2.com.

What I like best about Vanta is how much time it saves... It takess lot of the manual work out of compliance by automating evidence collection and monitoring, which makes staying audit-ready much easier. I also like that it gives us a clear and professional way to showcase Fenergo's security and compliance posture through the Trust Center, helping build trust with customers and prospects.. Review collected by and hosted on G2.com.

Vanta has been really useful overall, but I think some areas could be more flexible. There are times when workflows don't quite match how we operate, and it can take a bit of digging to understand why a test has failed or what action is needed. More customization and clearer guidance would help. Review collected by and hosted on G2.com.

Vanta’s AI has saved me more than once by catching small issues before they turned into last-minute surprises. I almost forget the integrations are even there, and I honestly think that’s exactly how they should work. It’s one of those platforms that quietly earns its place and keeps doing its job in the background. Review collected by and hosted on G2.com.

The UI is pretty good, but a few of its settings take more clicks than I expected. A few of the workflows assume that every company follows the same compliance process, thus explaining their rigidity. Review collected by and hosted on G2.com.