New in Vanta | September 2025

This past month, the Vanta team launched new features to help you: 

• Structure risk registers the way your business is organized
• Systematically track and resolve issues with issue management
• Simplify and streamline stakeholder contributions with the my work page
• Automate vendor security reviews with AI-powered insights
• Keep your knowledge base fresh, accurate, and trustworthy with new verification settings
• Unlock more automation with six new integrations on the Vanta platform

‍

Structure risk registers the way your business is organized

Internal risk management today is often fragmented. Each function—legal, IT, HR, finance—tracks risk differently, usually in spreadsheets or siloed tools. Severity and impact are defined inconsistently and  accountability is unclear. The result is manual, reactive reporting where issues surface too late and responses cost more than they should.

‍

Vanta’s multiple risk registers change this by giving every function its own structured space to manage the risks they know best. Legal can focus on regulatory obligations, IT on vulnerabilities, finance on exposures, and HR on people-related risks. Each department gets autonomy to own and track its domain, while Vanta applies a consistent framework across all registers. Risks are defined, measured, and prioritized in the same way everywhere in the organization. This balance of expertise and standardization means functions no longer work at cross-purposes, and leadership gains confidence that risk is being managed proactively and consistently across the business. 

‍

Multiple risk registers is currently in preview and will be generally available in October on our Scale and Enterprise plans, and as an add-on for Growth customers.

‍

Systematically track and resolve issues with issue management

Issues can come from anywhere—internal audits, external audits, or day-to-day operations. It’s not enough to simply fix them; you also need to demonstrate to auditors that you’re taking a structured, reliable approach to tracking and resolving them.

‍

Vanta’s new issue management module gives you a centralized, purpose-built way to track and resolve issues across your security and compliance programs. You can bulk-import issues, log evidence, assign owners, and follow a consistent workflow to ensure nothing slips through the cracks.

‍

It’s more than just a to-do list. With issue management, you capture the outcomes that matter—tying each issue to the relevant risks, controls, and policies for a complete picture of your program’s health. With AI-powered recommendations, Vanta suggests the right controls so you never lose sight of how issues impact program health across all frameworks. Everything is auditable, reportable, and connected so when audit season comes, you’re not scrambling: You have a clear record of what happened, how it was addressed, and who was responsible.

‍

‍

Issue management is generally available to all customers on Growth plans and above.

‍

Simplify and streamline stakeholder contributions with the My Work page 

Trust is a team sport; security and compliance teams rely on strong collaboration from many internal stakeholders at the organization to maintain a continuous state of compliance. Teams that use Vanta to manage their security and compliance program can assign tasks and action items to individuals or teams, to create clear ownership and accountability. Now, these stakeholders have one simple, centralized page to view all of their assigned tasks in Vanta, on the my work page.

‍

Tasks are organized by urgency and the specific nature of the assignment, whether approval is needed or the actual work itself. Users can use this centralized list to easily click into each outstanding item, taking them right to the task that needs attention. With the my work page in Vanta, work is centralized, streamlined, and made more efficient for every kind of stakeholder.

‍

‍

My work is generally available for all Vanta customers.

‍

Automate vendor security reviews with AI-powered insights  

The new AI security review summary transforms how security teams approach vendor reviews by replacing manual, repetitive tasks with AI automation. Instead of sifting through vendor security reviews and pages of gathered evidence to understand a vendor’s security posture, teams now have instant, AI-generated overviews at the ready. The summary highlights key findings, strengths, and risk up front, allowing reviewers to quickly understand where attention is needed while reducing time and effort required for thorough due diligence. It even automatically compares evidence from prior reviews and highlights only the new or updated information, so teams can focus on what’s changed and make decisions faster.

‍

‍

The AI security review summary feature is available to all VRM add-on customers. Learn more about vendor risk management here.

‍

Keep your knowledge base fresh, accurate, and trustworthy with new verification settings 

Companies rely on the knowledge base to provide accurate, up-to-date responses and documentation to power both Questionnaire Automation and their Trust Centers. But keeping that information current requires an automated system and governance. Without clear ownership, review cadences, and safeguards against outdated content, teams risk relying on stale information, resulting in diminished potential misrepresentation of security practices.

‍

Now, we’re introducing new governance settings for the knowledge base. Every item—whether a document or a response in the response library—now can have a designated owner, a defined review cadence, and an expiration date. These are reinforced by automated workflows and notifications, ensuring updates happen on time. Teams can gain visibility into the overall health of the knowledge base, making it easier than ever to keep content fresh, accurate, and trustworthy.

‍

This feature is available today for customers using Trust Center or Questionnaire Automation, on a core plan or above. Learn more in this Help Center article. 

‍

Unlock more automation with six new integrations on the Vanta platform 

This month, Vanta introduced six new integrations to the ecosystem. Vanta users can integrate with Tailscale, Keeper, SimpleBackups, Four/Four and Bocada to streamline user access monitoring and centralize key compliance evidence. Users can integrate with HirePass to satisfy compliance background check requirements and easily bring the relevant evidence into Vanta. 

Explore all our integrations or tell us about others you’d like to see.

‍

Try it for yourself!

Log in to your Vanta account to try out these new features today. If you’re not a Vanta customer and want to learn more, request a demo.

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager and stay in the loop on Vanta news on LinkedIn.