Vanta Reviews 

My overall experience with Vanta has been very positive. The onboarding was smooth and well‑structured, with a high level of automation that significantly reduced manual effort. It provided better clarity across compliance activities, saved a lot of time for the security team, and delivered excellent ROI by streamlining audits and ongoing compliance management.

What I like most about Vanta is how easily it integrates with existing tools and environments. The Risk Management and Vendor Risk modules are especially valuable, as they centralize risk visibility, simplify assessments, and make it easier to track and manage risks efficiently across the organization.

One area for improvement would be enhanced visibility into test completion. A dedicated dashboard showing test completion timelines, audit readiness status, and clear KPIs would be helpful. Features to easily update or track testing progress against deadlines would further improve usability and reporting.

Using the Vanta integrations and automated tests was very helpful to reduce our workload to generate the required Audit evidence.

While the Vanta platform itself is user-friendly and easy to use, we were disappointed by the level of support we received. Unfortunately, the CSM was largely absent, which made it difficult to move forward efficiently.

In addition, we feel we were oversold on the integration with OVHcloud, which was a critical component of our project. The integration did not meet the expectations that were set during the sales process, creating challenges and delays on our side.

Overall, the product has strong potential, and I would recommend it, but the customer experience and delivery around support and integrations need significant improvement.

Vanta is a powerful, reliable compliance automation platform that removes much of the stress from security audits and ongoing compliance.

Vanta has proven to be an incredibly powerful tool for our compliance journey. It has guided us seamlessly through the implementation of multiple frameworks, significantly simplifying how we monitor regulatory controls like SOC 2 Type 2 and ISO/IEC 27001. I am particularly impressed by their advancements in AI capabilities; the tool’s ability to identify gaps and provide actionable recommendations is outstanding. It makes maintaining the PDCA (Plan-Do-Check-Act) cycle much more efficient, ensuring our security posture is always improving rather than just being a point-in-time check.

Detailed roadmap, realistic timelines, excellent customer service. Delivered as promised.

Vanta’s automation has drastically reduced the manual work our security team had to do for SOC 2 preparation. The continuous monitoring and integration with tools like GitHub and AWS give us confidence that we stay audit-ready with much less effort.

Before Vanta, compliance was a heavy lift involving spreadsheets and scattered evidence. Now, most of that is automated

The product is easy to use. The integrations and daily alerts for deprecated software, vulnerabilities, and policies and/or documents needing updates keep us on track and quite literally eliminates any concerns or additional effort required regarding the annual recertification audits. We simply give our auditors access to the platform. We usually don't hear much from them - maybe the odd query which is usually addressed in minutes...but that's it. There are no missing documents, or evidence as a result.

One star is generous. My experience with Vanta has been extremely disappointing. The service consistently failed to meet expectations, and despite repeated attempts to resolve issues, I received little meaningful support. After months of delays and lack of progress, it’s clear that the value promised upfront was never delivered. I cannot recommend Vanta based on my experience.

Cannot trust this company! Their CEO, Ms Christina Cacioppo, she is a 'very important person' to answer any email coming from low-lives! And the HR Department is clearly negligent! And yes, this is about the company "vanta.com".

Vanta sent us an invoice reminder for a $15,600 bill that was on an auto-payment scheduled. I responded as soon as I received the invoice to request a delay for us to decide whether we would like to continue the service or not. There was NO note on the invoice specifying that it would be "auto-paid". My request for delay went to apparently went to an undelivered address.

When the invoice due date came, our card was auto-charged. I followed up with Vanta IMMEDIATELY to request clarity and a refund as I understood we had an invoice, not an auto-drafting payment. They were not authorized to auto-draft it.

After following up and escalating the request for several months, the only response I've gotten to date is "look at our terms of service".

We are a potential long-term client, being treated like a number on a spreadsheet. Why?

We are making ZERO draws on Vanta services, yet they are treating us like this. Why?

This has been the most frustrating and unreasonable vendor/client relationship I've ever experienced.