New in Vanta | October 2024

In the last month, the Vanta team launched new features to help you:

• Accelerate compliance with additional tools and partners
• Track the positive impact of your security and compliance program
• Pursue and scale additional frameworks like DORA, NIS 2, and CPS 234
• Prioritize vendor security reviews more effectively
• Integrate and automate with even more third-party systems
• Extend the power of Vanta even further with our REST API, now generally available

‍

New capabilities accelerate compliance for startups

As startups begin their compliance journey, it’s important that they secure critical compliance frameworks to build credibility with customers. But, with an overwhelming amount of processes and requirements, the journey is often far from simple. New and upcoming enhancements across Vanta’s tools, partners, and expertise now make it easier than ever for startups to get compliant fast and stay compliant with ease. 

‍

These new capabilities include:

‍

• Personalized compliance roadmaps in-app that give clear next steps
• Streamlined employee background checks in Vanta, powered by Certn
• Fully embedded cyber insurance through Vouch
• Discounted privacy compliance from Osano
• Bundled partner services like complimentary pen tests, vCISO engagements, security program development, and more

‍

<div style="padding:56.25% 0 0 0;position:relative;"><iframe src="https://player.vimeo.com/video/1009933301?h=b70ce981d9&amp;badge=0&amp;autopause=0&amp;player_id=0&amp;app_id=58479" frameborder="0" allow="autoplay; fullscreen; picture-in-picture; clipboard-write" style="position:absolute;top:0;left:0;width:100%;height:100%;" title="Compliance in a Box"></iframe></div><script src="https://player.vimeo.com/api/player.js"></script>

‍

These enhancements make Vanta the go-to tool for growing startups to go from zero to compliance, fast. For more information, check out the launch blog.

‍

Push Trust Center activity into HubSpot & Salesforce: 

Vanta Trust Center helps security teams support their sales teams by streamlining security reviews and closing deals fast. All told, a Trust Center can deflect up to 87% of security reviews, automating the time consuming process of NDA collection, reviewing and approving document access, and more. 

‍

Vanta already integrates with Salesforce, to automatically approve access for contacts in your CRM, and now Vanta integrates with Hubspot to do the same.

‍

In addition, now you can push key customer activity from your Trust Center into Hubspot or Salesforce, where your sellers are already spending their days working. From logging actions like document access requests and downloads, to creating new leads in your CRM where none existed—these security-driven insights allow sellers get a better understanding of their customers. 

‍

‍

Learn more about connecting Trust Center to your CRM here.

‍

New frameworks available: DORA, NIS 2, CPS 234

Vanta now supports three new frameworks that are now generally available globally:

‍

DORA: The Digital Operational Resilience Act (DORA) is a European Union (EU) regulation aimed at ensuring that financial institutions and related entities can withstand, respond to, and recover from information and communication technology (ICT) disruptions, enhancing overall cybersecurity and operational resilience. All affected companies must be compliant with DORA by January 17, 2025.

‍

NIS 2: The NIS 2 Framework establishes a cybersecurity directive to address the growing complexity of threats to essential services and digital infrastructure across the European Union.

‍

CPS 234: An Australian Prudential Regulation Authority (APRA) standard that mandates financial institutions to implement robust information security measures to protect sensitive data and ensure resilience against cyber threats.

‍

You can find a full list of the 30+ frameworks that Vanta supports here.

‍

Prioritize vendor security reviews 

Vanta Vendor Risk Management makes it easy to automate security reviews for your vendors, but when you work with dozens or even hundreds of vendors, those reviews can quickly add up. To help GRC teams better focus their attention on what matters most, you can now identify and prioritize security reviews based on multiple characteristics, including:

• Whether a security review is the first for a vendor
• The urgency of the due date
• Whether all evidence is available and the review is ready for analysis
• Inherent risk level

‍

The VRM user experience is also now more intuitive than ever. With a new tab-based navigation, GRC teams can easily manage multi-step vendor security reviews, and modify the security review decision from any point along the process.

‍

‍

You can learn more about how Vanta Vendor Risk Management helps you to proactively manage third-party risk here. 

‍

New and enhanced integrations deliver additional automation to your program

In September, we introduced five new integrations–Cobalt, SoSafe, Pro Backup, FaceUp, and TaskP3. These new integrations power automated workflows across vulnerability management, user access, task tracking, and more. We also released a key update to our AWS integration, expanding support to two additional AWS regions–APAC - Malaysia, and Canada West - Calgary. Organizations with cloud infrastructure deployed across these international data centers can now experience the deep level of automation offered by Vanta’s AWS integration.

‍

Explore all our integrations or tell us about any others you’d like to see.

‍

Extend the power of Vanta even further with the Vanta API, now generally available 

We are excited to announce that our REST API is now generally available, with support for over 150 endpoints that provide the flexibility and power to transform how Vanta is used. 

‍

The REST API can help you:

• Automate manual processes: Automatically upload documents or assign owners to resources in bulk—reducing clicks and human error
• Centralize your reporting: Extract key data from Vanta and seamlessly integrate it into external reports, helping you view insights across all your tools in one place
• Boost your security response time: Trigger workflows that allow you to address security gaps faster, ensuring your team stays one step ahead
• Create custom integrations: Run automated tests on systems Vanta doesn’t already connect with, including on-premise or custom applications

‍

Plus, Vanta provides over nine API guides that make it easy to implement common use cases, like vulnerability management, personnel monitoring, scoping resources, and querying test results. Check out our developer docs to learn more.