April 30, 2026

New in Vanta | April 2026

Written by

Amulya Uppala

Reviewed by

Accelerating security solutions for small businesses
‍

Tagore offers strategic services to small businesses.

A partnership that can scale
‍

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors
‍

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

This past month, the Vanta team launched new features to help you:

‍

Connect Vanta to your AI tools of choice with the remote MCP server
Evaluate vendors across every risk domain with fully parallel, AI-powered assessments
Ask the Vanta Agent questions about your privacy data, personnel, and questionnaire library
Automate customer commitment workflows from contract ingestion to tracked obligations

‍

Connect Vanta to your AI tools of choice with the remote MCP server

AI tools are rapidly changing the way we work, and more users are shifting to tools like Claude Code, Cursor, and more for their day-to-day tasks. These tools offer a simple, no-code method to orchestrate work across their tech stack. With Vanta’s remote MCP server, your trust program can now easily plug into these tools as well.

‍

As of April 15, 2026, the Vanta remote MCP server is available to all customers in Public Preview. The MCP server connects directly to your compliance program in Vanta, including tests, controls, vendors, and more, so AI tools can query your program in real time.

‍

For teams using Claude, there's an additional layer: the Vanta Plugin for Claude bundles the MCP connection with purpose-built remediation skills and slash commands (/vanta:list-tests, /vanta:fix-test). It enables users to discover failing tests, generate infrastructure-as-code fixes grounded in their actual repository, and open pull requests without leaving their editor. This covers 500+ cloud tests across AWS, GCP, and Azure.

‍

Available on Essentials, Plus, Professional, and Enterprise plans.

Help article

‍

Evaluate vendors across every risk domain with Multiple Assessments

Third-party risk is not just about security. Today, teams are responsible for evaluating vendors across privacy, legal, financial, AI, ESG domains, and more, often during a single procurement or renewal event.

‍

With TPRM Multiple Assessments now fully rolled out, teams can run and manage multiple assessments concurrently within a single vendor lifecycle event. Rather than forcing every evaluation into a one-size-fits-all security review, teams can create domain-specific assessments in parallel, assign each to the right owner with tailored evidence collection, and bring everything into a single unified vendor view. AI-powered automation runs across all assessment types simultaneously.

‍

Available to all Advanced TPRM (TPRM + Continuous Monitoring) customers.

‍

More of what's new this month

Expanded Vanta Agent coverage: Privacy (data processors, DPIAs, processing activities), Personnel (task completion, policy acceptance, device compliance at scale), and Questionnaire Automation (search knowledge base and questionnaire library) context now embedded in the Vanta Agent.

‍

Outbound Webhooks: Real-time notifications when specific events occur like vendor creation, Trust Center access requests, questionnaire status changes, and more. No more polling the API.

‍

Auto-tracking and auto-account assignment with Customer Commitments: Commitments are now automatically added to your inventory and automatically assigned to the right account. The full path from contract ingestion to tracked commitments runs end-to-end without manual intervention.

‍

Try it for yourself!

Log in to your Vanta account to try out these new features today. If you’re not a Vanta customer and want to learn more, request a demo.

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager, and stay in the loop on Vanta news on LinkedIn.

Access Review Stage	Content / Functionality
Across all stages	Easily create and save a new access review at a point in time View detailed audit evidence of historical access reviews
Setup access review procedures	Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems	Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta. Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS) Upload access files from non-integrated systems View and select systems in-scope for the review
Review, approve, and deny user access	Select the appropriate systems reviewer and due date Get automatic notifications and reminders to systems reviewer of deadlines Automatic flagging of “risky” employee accounts that have been terminated or switched departments Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section Track progress of individual systems access reviews and see accounts that need to be removed or have access modified Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners	Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access	Focused view of accounts flagged for access changes for easy tracking and management Automated evidence of remediation completion displayed for integrated systems Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results	Auditor can log into Vanta to see history of all completed access reviews Internals can see status of reviews in progress and also historical review detail