A llama sitting at a computer with the words product update.

November 13, 2023

New in Vanta | October 2023

Written by

Brian Kuan

Product Marketing Manager

Reviewed by

Accelerating security solutions for small businesses
‍

Tagore offers strategic services to small businesses.

A partnership that can scale
‍

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors
‍

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

This past month, we announced the single destination to showcase your security posture, Vanta Trust Center, 19 new integrations, Private Links for Vendor Risk Management, and more:

‍

Redesigned Vulnerabilities page
Automated evidence collection for Access Reviews
Cyber Essentials & Essential Eight
Plus additional updates!

‍

Introducing Vanta Trust Center

‍

Last week, we launched Vanta Trust Center, a centralized source of truth for companies to showcase their security posture confidently.

‍

Following Vanta’s acquisition of Trustpage earlier this year, Trust Center combines the capabilities of Trustpage Trust Centers and Vanta Trust Reports, making it easier than ever for customers to automatically manage their workflows and accelerate the security review process — all from within Vanta. Reach out to your Customer Success Manager to learn more!

‍

19 new integrations: Shopify, OysterHR, Securily…

‍

Last month, we released 19 new integrations, ranging from Access-only integrations, HRIS, and Documents — built by Vanta and our partners.

‍

Access Reviews customers now have additional systems for access-only integrations, including Shopify, Sophos, and Maptician. We’ve added OysterHR and Payworks as HRIS integrations, and our Connectors API partners built Documents integrations to Securily and Software Secured. For integration requests, whether you want to integrate with your in-house tools or an unsupported vendor, please fill out the integrations feedback form.

‍

View available integrations

‍

Private Links for Vendor Risk Management

‍

Vendor Risk Management customers can now generate links for vendor document uploads.

‍

Private Links create a unique page for each vendor and allow those vendors to upload all their security documents directly onto that page. This means that vendors can now track the progress of what they have or haven’t provided — streamlining the vendor security review process.

‍

Redesigned Vulnerabilities page

‍

We’ve redesigned our Vulnerabilities page to make it more powerful than ever before.

‍

Vanta’s Vulnerabilities page helps to automate proof of your company’s vulnerability management program to your auditor. We’ve made various user experience improvements to make it even better, including the ability to bulk ignore actions, new vulnerability-centric workflows, a new navigation bar, and more!

‍

‍Log in to try Vulnerabilities

‍

Automated evidence collection for Access Reviews

‍

We’ve shipped new functionality for evidence collection to further automate the access review process.

‍

Vanta will now automatically upload completed Access Review reports as evidence to meet controls around access reviews — helping to ensure that customers upload completed Access Reviews for their auditors.

‍

Learn more about Access Reviews

‍

Cyber Essentials & Essential Eight

‍

We’re excited to announce two new frameworks, Cyber Essentials and Essential Eight, to further support the complex security and compliance needs of our international customers.

‍

Cyber Essentials and Essential Eight are frameworks that provide organizations around Europe and APAC respectively with a baseline strategy to protect against cyber attacks. Both are designed to mitigate threats to domestic systems and reduce the impact of cyber attacks.

‍

See our Release Notes for all updates this month.

‍

Try it out

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager. And stay in the loop on Vanta news via LinkedIn.

‍

Or see it live - What’s New in Vanta: November Webinar

Join us for our monthly “What’s New in Vanta” webinar taking place November 21, 11am PT/2pm ET. This series provides you a live look at some of our newest releases and product improvements. This month we’ll talk through Private Links for Vendor Risk Management, automated evidence collection for Access Reviews, the redesigned Vulnerabilities page, and more!

‍

Access Review Stage	Content / Functionality
Across all stages	Easily create and save a new access review at a point in time View detailed audit evidence of historical access reviews
Setup access review procedures	Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems	Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta. Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS) Upload access files from non-integrated systems View and select systems in-scope for the review
Review, approve, and deny user access	Select the appropriate systems reviewer and due date Get automatic notifications and reminders to systems reviewer of deadlines Automatic flagging of “risky” employee accounts that have been terminated or switched departments Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section Track progress of individual systems access reviews and see accounts that need to be removed or have access modified Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners	Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access	Focused view of accounts flagged for access changes for easy tracking and management Automated evidence of remediation completion displayed for integrated systems Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results	Auditor can log into Vanta to see history of all completed access reviews Internals can see status of reviews in progress and also historical review detail