Workstreet logo
BlogSecurity
May 29, 2024

How Workstreet hits efficiency targets with Vanta

Written by
Vanta
Reviewed by
No items found.

Accelerating security solutions for small businesses 

Tagore offers strategic services to small businesses. 

A partnership that can scale 

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

Streamlining security for hyper-growth companies 

Workstreet offers managed security services to help rapidly scaling technology companies grow. 

A winning partnership 

Workstreet prioritized finding a managed compliance partner with an intuitive platform, deep customizations, and leading track record.

Innovation unlocks efficiency and differentiation

By partnering with Vanta, Workstreet has been able to meet its efficiency targets and drive outsized client impact in a saturated market.

The company

Enhancing client growth through strategic security services 

Established in 2019 with headquarters in Colorado, Workstreet stands out as a premier Managed Security Service Provider (MSSP) dedicated to supporting hyper-growth technology businesses with security and compliance needs. Workstreet approaches its vCISO and security services as strategic accelerators for client growth, helping clients establish, maintain, and demonstrate their security and privacy functions. 

Workstreet focuses on building security and compliance programs for clients at every stage of their security journey. Whether helping clients get audit-ready for the first time, or supporting them to externally demonstrate trust, Workstreet approaches security and compliance program management proactively, helping their clients maximize growth opportunities through strong security practices. Workstreet also helps clients navigate the complexity of an evolving security landscape, focusing on AI governance. With Workstreet, clients can concentrate on closing more deals and expanding offerings, while knowing that their security posture will drive growth, instead of hinder it. 

Workstreet team via Zoom meeting.
Workstreet team.

The challenge

Inability to scale to support growing needs 

Travis Good, co-founder and CEO of Workstreet, started the company after successfully scaling venture-backed software businesses. His vision was to create a vCISO service that guides growing technology companies along each step of their security journey. Workstreet’s clients typically come to them for support in taking the first steps towards becoming SOC 2 or ISO 27001 compliant, navigating both local and international requirements, like GDPR, or adapting to the dynamic landscape of regulations, like AI governance. 

During his extensive experience as an operator, Travis saw firsthand the challenges that come with building and managing a compliance organization manually. “The amount of time we spent in spreadsheets and going back and forth to decipher what we had to do across various controls was pretty exceptional,” says Travis. This manual process not only consumed significant time and effort, but also diverted focus from critical areas like product development and sales. 

Additionally, managing a security program manually meant that Travis had to consider bringing on additional headcount faster than expected, especially as his security requirements grew. In particular, lack of scalability across frameworks was an acute pain point.  “If we expanded the security requirements that we had to meet it was like starting over every time,” says Travis. 

The solution

Partnering with the market leader to unlock efficiency 

As Travis founded Workstreet and entered the MSSP space, it was clear he needed a solution to address his pain points head-on. To start, Travis prioritized finding the premier partner that could scale to meet the needs of his growing team. In particular, ease of use was a critical requirement, “[Vanta] is a much easier platform to use [compared to the competition] and is much more intuitive. It just makes sense, from risk management to control mappings and tests. Vanta is a good, intuitive piece of software and makes it easier for us to operate,” says Travis.

Product quality also played a major role in forming Workstreet’s partner preferences, with Vanta leading the pack, “[The partner console] is amazingly simple. It makes not just operating a client’s compliance program efficient, but the administration of the program as well. It works exactly how we would want it to work,” says Travis. Travis also sees Vanta’s product quality as helping drive client satisfaction, “We find a lot of the work we end up doing is migrating customers over [to Vanta] and then they’re pleasantly surprised that all the things they once did manually or did across 3 or 4 tools are now centralized and automated in Vanta.” Finally, Travis cites Vanta’s ease of customizations as a contributor to a stellar product experience,  “Our client programs aren’t cookie cutter and every company is different, so when we need to do customizations the way that Vanta works is just intuitive to us,” says Travis. 

Partnering with the market leader was another core consideration for Travis. “Vanta consistently has beat the market by 6-12 months in terms of releasing new features and those new features make it so much easier for us to support our customers over the long term,” says Travis. The rapid pace of innovation, coupled with robust partner support has solidified Vanta as Workstreet’s partner of choice, “Vanta is a really cool company and you want to work with people that you like. We’ve been impressed across the board with the folks at Vanta”, says Travis. 

The impact

Elevating growth and efficiency to new levels 

In partnering with Vanta as Workstreet’s preferred compliance platform, Travis has experienced firsthand the impact of Vanta’s innovation in helping to transform the security space from “the dark ages into the modern era in a very short amount of time.” This has helped Workstreet drive client impact to new heights. Beyond product quality and external output, Travis has also been impressed by the efficiency Vanta has brought to Workstreet. “Vanta is a huge part of us hitting our efficiency targets,” says Travis. “We can operate our business extremely efficiently – we can get people trained on Vanta and operating on the platform very quickly”, says Travis. 

Travis sees the collaboration between Vanta and Workstreet as a strategic alliance of market leaders, emphasizing the benefits of their close relationship. “We can leverage our expertise running the premier platform in this space. We want to be the premier MSP in the market and aligning with the premier managed compliance platform is a huge boon for us,” says Travis. 

Looking ahead, Travis is optimistic about a continued deep partnership between Vanta and Workstreet. “We consider Vanta to be a core part of what we do and how we deliver our service. Ideally you want to work with a best-in-breed partner, and that’s where Vanta comes in for us,” says Travis. 

Access Review Stage Content / Functionality
Across all stages
  • Easily create and save a new access review at a point in time
  • View detailed audit evidence of historical access reviews
Setup access review procedures
  • Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews
  • Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems
  • Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta.
  • Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS)
  • Upload access files from non-integrated systems
  • View and select systems in-scope for the review
Review, approve, and deny user access
  • Select the appropriate systems reviewer and due date
  • Get automatic notifications and reminders to systems reviewer of deadlines
  • Automatic flagging of “risky” employee accounts that have been terminated or switched departments
  • Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section
  • Track progress of individual systems access reviews and see accounts that need to be removed or have access modified
  • Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners
  • Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests
  • Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access
  • Focused view of accounts flagged for access changes for easy tracking and management
  • Automated evidence of remediation completion displayed for integrated systems
  • Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results
  • Auditor can log into Vanta to see history of all completed access reviews
  • Internals can see status of reviews in progress and also historical review detail
FEATURED VANTA RESOURCE

The ultimate guide to scaling your compliance program

Learn how to scale, manage, and optimize alongside your business goals.