TL;DR

• Challenge: Dust needed to prove enterprise-grade trust and security fast to win deals, without slowing its pace of innovation. Once audit-ready, the team needed to keep up with remediation and renewals without adding manual work.
• Solution: With Vanta’s SOC 2 automation and Trust Center, Dust achieved SOC 2 Type II audit readiness in three weeks with minimal engineering lift. Dust then connected Vanta MCP to its own agents, which combined Vanta’s live compliance posture with business context to surface what needs attention and where the work belongs.
• ROI: Dust reduced its compliance workload by 50%, freeing up resources to focus on enterprise expansion and helping the company win big deals faster than ever. With agents in the loop, Dust now spends about one day a month on compliance, and the rest is automated. GRC shifted from reactive to preemptive, with less coordination and better timing.

‍

The company

Building and securing human-agent collaboration

Dust is the multiplayer AI platform for human-agent collaboration. Teams use it to deploy agents that update Salesforce records, open GitHub issues, and generate documents. Because those agents run inside enterprise systems and touch real company data, security has been foundational to how Dust builds from day one.

‍

The challenge

Proving security at startup speed, then keeping it proven

Dust was scaling fast, and enterprise buyers were going to want proof of its security posture before signing.  As they grew, so did the complexity of maintaining that trust. With a lean security team, Dust needed to meet increasingly demanding customer requirements without pulling resources away from building its product.

‍

What Dust tried first: The product was evolving faster than any manual process could document. Dust needed to signal credibility to enterprise customers but reputation alone wasn’t enough. Customers wanted to see more proof of its security posture before signing deals.

‍

Dust’s pivot point: Dust didn’t want to sacrifice product development momentum to in-house compliance work, so Dust chose Vanta’s Agentic Trust Platform. The team wanted a name enterprise buyers already trusted and a platform that could keep pace with a shifting AI regulatory environment.

‍

Why Dust chose Vanta: With Vanta, Dust could maintain a live view into its controls, evidence, and overall compliance posture. As the company grew, Vanta grew with them, offering Dust the ability to connect Vanta MCP to its own agents to further reduce compliance costs and better maintain ongoing compliance. 

‍

“We’re not a shop that picks a vendor because it’s the cheapest. We optimize for quality, and Vanta struck us as the category-defining company.”

Zeid Marouf, Security Engineer, Dust

‍

The Vanta impact

Dust connected Vanta MCP to its own agents to reduce coordination costs

Vanta gave Dust a live view into its controls, evidence, and overall compliance posture. As Dust grew, the team saw an opportunity to take automation further by connecting that trusted GRC context to its own agents, turning compliance insights into action across the business.

‍

For a company building agents to eliminate exactly this kind of coordination work, Dust saw an opportunity to connect Vanta MCP to its own agent workflows.  “As Dust grows, we need to earn the trust of larger customers while keeping the pace that got us here,” says Gabriel Hubert, Co-founder and CEO. “Connecting our agents to Vanta is one way we’re building for that: giving a small team the capacity to handle increasingly demanding security requirements.” 

‍

Once Dust agents had access to the trusted GRC context already living in Vanta, the agents could assess live compliance posture and business context across Engineering, Operations, and IT. From there, the agents surface what changed, what needs attention, and where the work belongs, and help prepare the next action.

‍

Humans stay in charge of what matters most. Zeid, Dust’s security engineer, handles high-stakes tasks, reviews, and approvals. The agents do the spotting, routing, and prep work that used to eat up his time. Today, compliance takes about one day a month of his hands-on time.

‍

“We moved from reactive compliance work to preemptive security work. Instead of discovering gaps through reminders or during certification preparation, we can identify them early and connect them to work already happening in the company. The biggest gain is less coordination and better timing, not just fewer clicks.”

Zeid Marouf, Security Engineer, Dust

‍

Here’s how Dust deployed Vanta: 

‍

‍

An important shift is that Vanta is no longer only where Dust checks its compliance posture. It becomes the trusted GRC context its agents can build on. 

‍

‍

Dust’s agents can reason over what Vanta knows about the compliance program and connect it to the work already happening across the company.

‍

“Vanta tells us what the frameworks require and where our posture stands. The agents connect that posture to the work happening across the company. GRC stops being a parallel reactive track used solely to prove our credentials or qualify for a certification. It becomes a core driver of the security program, shaping priorities, remediation, vendor renewals, and investment decisions.”

Zeid Marouf, Security Engineer, Dust