Vanta Reviews

We're trying to get SOC 2 compliance, and we're trying to get HIPAA compliance.

We haven't seen any problem with that yet. That said, our company is a tiny 20-person company right now. We're probably six months ahead of where we should be in terms of doing compliance anyhow. We're not really at the critical masses yet, but we're trying to get a head start on it.

In our Vanta infrastructure, there's a mix of on-prem and cloud data. The cloud data is stored under WPH Cloud, which is why we can't access it directly as it's dedicated to CyberArk. We have component clusters and some BDIs on the cloud, and remote users need to access these resources for their DHL-related work. Managing this infrastructure involves using HCP Energy as the hypervisor, and hosting multiple Windows AM VMs, all running on version 22.04.

It helps us track the compliance of the components listed in our partner's directory. We can also check if the password manager, XML, and three log policies have been properly implemented on the desktop. We use JEM Cloud, which is a SaaS solution, and sometimes it experiences access issues. With Vanta, we can work on resolving these issues and ensuring policy compliance. Vanta also helps us maintain compliance with standards like SOC 2 and various data policies, which are essential for our documentation and communication requirements, ultimately ensuring enterprise software policy compliance.

In my role, which primarily involves IT responsibilities, I often deal with various policies. There are instances where specific policies, especially those related to quality, may not be implemented correctly. This primarily occurs with mainframes and devices owned by particular users. In such cases, Vanta helps us enable these policies on the devices and assign them to the relevant users. It also highlights when certain policies, such as version 86.x, are not assigned through SAP. Vanta provides guidance on configuring and mitigating these issues. Additionally, it helps us with GitHub account provisioning and deprovisioning, as well as managing GitHub and Google Workspace Flex. We also use the 1Password password manager, which Vanta assists in overseeing.

We use the solution for automated security and compliance. Most of the time, it is about getting people to certifications.

Task management and vendor assurance are the most valuable features. It is also an easy tool to use.

Vanta is a GRC platform with continuous compliance automation and monitoring. Some things normally take us hours to do in terms of pulling screenshots and configuration. Vanta is continuously plugged into an API and reports back to us so that we can save time, effort, and FTE hours.

Vanta primarily helps our organization with the SOC 2 and the PCI audits, ensuring we're in compliance full-time without having us do internal audits as frequently.

Vanta helps us to achieve ISO 27001 compliance. 

The product has provided automated security controls for our cloud provider. It helps to automate security checks. Vanta offers a list of things that can be done to achieve ISO 27001 compliance. 

I use it for compliance management.

The most valuable feature of Vanta is its prebuilt control frameworks, which enable us to quickly achieve and sustain compliance without the need for extensive manual setup or configuration.