BlogCompany news
January 31, 2024

Celebrating new milestones plus enterprise-ready features and more AI capabilities

Written by
Vanta
Reviewed by
No items found.

Accelerating security solutions for small businesses 

Tagore offers strategic services to small businesses. 

A partnership that can scale 

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

Today we’re excited to share several milestones as we continue on our mission to secure the internet and protect consumer data. 

  • In FY ‘24, we crossed $100M in ARR, nearly doubling our customer base to 7,000 companies globally, including Atlassian, Chili Piper, Flo Health and Quora. Almost 1 in 4 Vanta customers are now based outside of the U.S. as we’ve accelerated our international momentum in EMEA and APAC

And we’re just getting started. 

As we continue to reimagine GRC tools for the future of trust, we’ve built enterprise-ready features and rolled out additional Vanta AI capabilities along with support for the NIST AI Risk Management Framework. 

Enterprise-ready features for sophisticated GRC teams

Combining a breadth of workflows with a depth of automation, Vanta helps your GRC and information security teams scale your compliance program, unify risk management, and streamline security reviews with: 

  • 300 pre-built integrations providing continuous, real-time monitoring of security and compliance across cloud providers, HRIS, datastore providers, and many more
  • Vanta API to build private integrations with internal systems or public integrations accessible by Vanta customers
  • Increased customization for GRC practitioners, including the ability to create custom frameworks and customize Vanta’s built-in automated tests
  • Executive reporting to prioritize and act on the key risks, measure the success of your security program, and easily report the impact to stakeholders (currently in preview)
  • Enterprise-ready capabilities such as Single Sign On, Workspaces, custom Role-Based Access Control, and more

Monitor and mitigate AI risk with NIST AI RMF

As the pace and complexity of AI innovation increases, it’s more important than ever for companies to mitigate the risks associated with the use and development of AI tools. That’s why we’re excited to announce that the NIST AI Risk Management Framework is now available in preview, with general availability to follow in the coming weeks. 

With Vanta’s NIST AI RMF solution, you’re equipped with comprehensive guidance for setting up an AI governance program while having the flexibility to tailor the requirements to your needs. Paired with automated evidence collection and continuous monitoring, Vanta enables teams to innovate with AI technologies while growing trust with customers.

Unlocking additional Vanta AI capabilities

Since introducing Vanta AI last fall, we’ve continued to expand the use of AI within Vanta to further automate tedious and manual tasks so you can manage your security and compliance programs with less work and more confidence. 

Starting today, you can customize the questions Vanta AI uses to analyze security documents within Vanta’s Vendor Risk Management solution, reducing the time and effort to conduct thorough vendor security reviews. 

With AI Data Import for Access Reviews, you can automatically upload user access information from images and PDFs. Now when you perform access reviews for internal tools or on-premises systems that do not have a direct integration with Vanta, you no longer need to manually enter this information. 

Partnering with A-LIGN to scale trust management 

Last but not least, today we’re also announcing our partnership with A-LIGN, a technology-enabled security and compliance partner trusted by more than 4,000 global organizations. 

With Vanta and A-LIGN, customers can now get the best of both worlds—a scalable platform to automate up to 90% of the evidence collection needed to complete a SOC 2 or ISO 27001 audit, and a highly-regarded firm to complete the audit. 

Vanta covers all of A-LIGN’s evidence requirements directly in its platform, ensuring a seamless handoff to auditors. Combining Vanta’s flexible platform with A-LIGN’s broad range of services gives companies of all sizes a scalable solution for growing and evolving their compliance program with maximum efficiency. 

Advancing the future of trust in an AI world

We couldn’t be prouder of today’s milestones and we’re excited to continue building the future of trust by putting customers first, biasing for action, leading with resilience, deciding with frameworks, presuming good intent, and doing what it says on the tin — all in service of our mission to secure the internet and protect consumer data. 

Access Review Stage Content / Functionality
Across all stages
  • Easily create and save a new access review at a point in time
  • View detailed audit evidence of historical access reviews
Setup access review procedures
  • Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews
  • Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems
  • Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta.
  • Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS)
  • Upload access files from non-integrated systems
  • View and select systems in-scope for the review
Review, approve, and deny user access
  • Select the appropriate systems reviewer and due date
  • Get automatic notifications and reminders to systems reviewer of deadlines
  • Automatic flagging of “risky” employee accounts that have been terminated or switched departments
  • Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section
  • Track progress of individual systems access reviews and see accounts that need to be removed or have access modified
  • Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners
  • Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests
  • Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access
  • Focused view of accounts flagged for access changes for easy tracking and management
  • Automated evidence of remediation completion displayed for integrated systems
  • Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results
  • Auditor can log into Vanta to see history of all completed access reviews
  • Internals can see status of reviews in progress and also historical review detail
FEATURED VANTA RESOURCE

The ultimate guide to scaling your compliance program

Learn how to scale, manage, and optimize alongside your business goals.