Compare Audit Pro и Vanta

Benefits:

User interface was intuitive - provided a clear "checklist" approach for actions to take and problems to resolve. Vanta Agent (for our laptops and... Read more

User interface was intuitive - provided a clear "checklist" approach for actions to take and problems to resolve. Vanta Agent (for our laptops and (virtual) servers at AWS) is very useful to ensure continuous oversight of what's on the machine and when it needs to be updated. Working with our auditor to get our first SOC2 was also seamless and painless - the auditor plugged right into our Vanta instance and downloaded/monitored everything remotely - no need for screen shots or sending lots of documentation.

Drawbacks:

Would have been nice to have more integrations with some of our existing tools (monday.com, AWS Code Commit, etc.) to make the process even more au... Read more

Would have been nice to have more integrations with some of our existing tools (monday.com, AWS Code Commit, etc.) to make the process even more automated. The automated policy generator is nice for filling holes in an existing policy suite, but isn't great if you have to make a lot of customizations to it as the "automated" part breaks down once you edit it offline. Two minor things in an overall great experience.

Summary:

We needed to get a SOC2 audit completed quickly to satisfy a customer need. Most "traditional" audit shops told us it would take 12 - 15 months. ... Read more

We needed to get a SOC2 audit completed quickly to satisfy a customer need. Most "traditional" audit shops told us it would take 12 - 15 months. With the automation features, customer support, and auditor integration, we were done end-to-end (from signing up with Vanta to receiving our SOC2 report) in just over 5 months. Very smooth process from beginning to end - went almost exactly as advertised during the sales process - that's rare and unexpected these days.

Benefits:

I use Vanta every day for my work in compliance. The main Tasks page is extremely helpful in flagging and identifying where I need to focus my atte... Read more

I use Vanta every day for my work in compliance. The main Tasks page is extremely helpful in flagging and identifying where I need to focus my attention, which allows me to efficiently spend my energy. Being part of a smaller company (for now!), this platform was invaluable during our SOC 2 audit as a source of evidence for many technical and operational controls. My favorite features include a space for hosting security policies (they have so many awesome customizable templates, too) and tracking who has reviewed and accepted them, allowing real-time reporting on technical controls that our customers can view, and vendor and other inventories to keep track of our resources.

Drawbacks:

I look forward to seeing more product enhancements in the future. I would love to see more integrations or an admin-facing API so that the same gro... Read more

I look forward to seeing more product enhancements in the future. I would love to see more integrations or an admin-facing API so that the same groups and dates used in our identity platforms aligned here, and other user-experience efficiencies like bulk sending email reminders or viewing a person's onboarding tasks plus their assigned computer's information within one row on the same page.

Summary:

The support at Vanta is incredible and the platform continues to be a huge asset to our security compliance program.

Benefits:

We love that Vanta has made it easy for us to develop a comprehensive InfoSec program and helped us prepare for our SOC2 audit. Onboarding was stra... Read more

We love that Vanta has made it easy for us to develop a comprehensive InfoSec program and helped us prepare for our SOC2 audit. Onboarding was straightforward and the continuous monitoring ensures ongoing compliance. The product integrates with most of the software we use day-to-day and has saved a lot of time.

Drawbacks:

There are some areas of the UI which are a bit rough around the edges and non-intuitive, I chalk this up to Vanta being a relatively new product. I... Read more

There are some areas of the UI which are a bit rough around the edges and non-intuitive, I chalk this up to Vanta being a relatively new product. It has improved a lot since we became a customer and specific areas such as the employees onboarding/off-boarding flows show that the team is constantly iterating and responsive to user feedback. In addition, I would love to see more automation in the product - we are a smaller company without a dedicated IT team. Vanta does a great job of alerting us to issues, but being able to help us take steps to remediate would be much appreciated.

Summary:

Very good. We have been able to formalize our internal security programs and successfully completed our SOC2 audit. The Vanta team has always bee... Read more

Very good. We have been able to formalize our internal security programs and successfully completed our SOC2 audit. The Vanta team has always been very responsive to our needs, soliciting feedback and promptly answering questions (no matter how basic) and guiding is in the right direction.

Benefits:

Ease of use, support and expertise and confidence in remaining compliant before and after the real SOC-2 process.

Drawbacks:

Only critique is that when we started, Vanta was very new to the market and they lacked some integrations. However, we saw rapid improvements and ... Read more

Only critique is that when we started, Vanta was very new to the market and they lacked some integrations. However, we saw rapid improvements and additional integrations during our initial work with them and they were very responsive to our needs.

Summary:

Having no SOC-2 background, a friend suggested checking out Vanta to speed up the SOC-2 process. We were blown away by the amount of work that nee... Read more

Having no SOC-2 background, a friend suggested checking out Vanta to speed up the SOC-2 process. We were blown away by the amount of work that needed to be completed, but working with Vanta helped automate and most importantly organize the requirements for SOC-2 type 1. Our SOC vendor was impressed by the number of things we had completed and it made our type 1 attestation a cinch - 5 weeks! We're in the process of type 2 (12 months) and Vanta has been a valuable asset to help us maintain our compliance. Without Vanta, we would have had to hire a consultant or FT employee to manage the project.