Vanta 2025: Looking back, looking ahead

Reflecting on 2025, the word we keep returning to is trust. We talk about it a lot at Vanta because it's the foundation our customers operate on.

‍

Last year, that felt more true than ever. The bar for trust keeps rising. Regulations intensified. Threats evolved faster. Customers and investors asked harder questions. And in an era defined by AI, trust is no longer a checkpoint—it’s a continuous system that has to work every day.

‍

That’s the mission that drives us. We want to help you earn and prove trust. Trustworthy companies move faster. They unlock growth sooner. And they spend more of their time building what they actually meant to build in the first place.

‍

Here’s what earning and proving trust looked like for our customers and us in 2025—and what’s coming next.

‍

What we built

The headline for us last year was the launch of our Agentic Trust Platform.

‍

It’s the natural evolution of everything we’ve built so far. Vanta started with automated compliance, helping companies pass audits faster. That grew into trust management, connecting controls, people, vendors, and assets so customers can stay secure as they scale.

‍

Now, the Agentic Trust Platform brings compliance, risk, and proof into one connected system, powered by intelligence and automation, that understands your security posture and helps you improve it continuously.

‍

‍

A major part of this evolution is the Vanta AI Agent: a context-aware, always-on partner that helps draft policies, collect evidence, answer questionnaires, and streamline reviews. With the introduction of AI Agent 2.0 in November, the Agent now has deeper program awareness, personalized recommendations, and end-to-end workflow orchestration to keep your entire trust program in sync without manual effort.

‍

Customers felt the impact immediately:

‍

“The Vanta AI Agent complements my team's expertise by filling in knowledge gaps, helping us learn faster, and double-checking critical information—ultimately saving us 12 hours weekly.”

—Anne Simpson, Head of Privacy, Security, and Compliance, IT, Databook

‍

‍

Trust today also extends far beyond internal controls, which is why we invested deeply in our risk foundation. Our acquisition of Riskey gave customers something they had been asking for: ongoing, real-time vendor monitoring instead of static, point-in-time reviews. Now, teams can see emerging vulnerabilities, leaked credentials, misconfigurations, and breach activity as it unfolds—not months later.

‍

At VantaCon, we also introduced the Vanta Risk Graph. Instead of treating risks in isolation, Vanta Risk Graph connects signals across people, vendors, systems, assets, and controls, helping teams understand how issues relate, where they originate, and what to do next.

‍

Early design partners have told us how transformative this connected visibility will be:

‍

“A single, connected view of where internal and external risks intersect will help us prioritize and respond even faster.”

—Heidi Pili, GRC leader at ShipBob 

‍

For enterprises operating across multiple business units, we launched Organizations Center—giving leaders one intelligent system of record for scoping, frameworks, and audits, while still keeping environments separated where needed.

‍

And with Customer Commitments, teams can finally track and uphold every contractual promise they make (including breach notifications, SLAs, subprocessor updates, and more) with automated workflows so nothing slips through the cracks. As one customer said at VantaCon: It turns compliance obligations into operational clarity and customer trust.

‍

Running Vanta on Vanta

We continue to run our entire security and compliance program in Vanta. This year, our internal security team completed another SOC 2 Type II audit, and we did the entire process inside the platform: evidence prep, auditor collaboration, and reviews.

‍

Our auditor, Schellman, used our Information Request List portal to outline exactly what they needed, and Vanta handled the rest—automatically collecting evidence, routing reviews, and flagging anything that needed attention, all in one place. The result? Only two clarifying meetings for the entire audit—a huge time savings and proof that streamlined workflows make a big impact. 

‍

Using our own product keeps us honest, too. Our security team partnered closely with product, engineering, and design to surface every friction point we encountered and turn those insights into improvements. Many of the workflows our customers use today were shaped directly by those lived experiences.

‍

Internally, the numbers tell a similar story. We monitor nearly 1,000 controls with 912 automated tests across 10 frameworks, track more than 1,000 people and assets, and manage 267 vendors, all within Vanta. We were proud to achieve FedRAMP 2.0 Low Authorization and become one of the first companies to earn ISO 42001 certification for AI management systems. We also launched our AI Security Assessment to help companies measure and improve their own AI security posture.

‍

Our customers 

We grew to more than 14,000 customers across 102 countries, from fast-growing startups like Clay and Harvey to global enterprises like Snowflake. Each one pushed us to think differently about what trust needs to look like at different stages and different scales.

‍

We saw founders using Vanta to unlock new markets and stand up enterprise-ready security and compliance programs long before they had full security teams. We saw mid-market companies scaling their frameworks globally. And we saw large enterprises streamline the complexity that comes with thousands of employees, dozens of business units, and hundreds of vendors.

‍

A few moments stood out:

• Ramp showed what automation looks like when you're growing fast, as they replaced spreadsheets with systems that actually scale with the business
• Anthropic both builds AI and uses it to run their program as they streamline policies, triage risks, and tackle massive questionnaires
• The Golden State Warriors reminded us that trust is their homecourt advantage, and how they keep fans coming back

‍

We’re honored to be part of those moments, and we’re grateful for every customer who shared feedback, pushed us, or partnered with us to shape Vanta this year.

‍

Building community, not just software

One of the best parts of 2025 was connecting with so many of you, especially in person. These conversations about what’s working, what’s breaking, and what you care about shape our roadmap. 

‍

We want to hear from you, so we did our best to show up where you were. We hosted thousands at 21 customer events across nine different cities on three continents. We also hosted get-togethers at major industry events like SXSW Sydney, Sifted London, RSAC, and Black Hat. 

‍

And because meaningful conversations don’t only happen at events, we expanded our global footprint with new offices in London and Sydney, so our teams can be even closer to the challenges and regulations our customers face locally.

‍

To keep the conversations going, we’ll take VantaCon on the road in 2026. This year, we’ll see you in New York, Berlin, London, and Sydney so we can continue the conversations and further build the trust community.

‍

We’re in this for the long haul 

In 2025, we raised a $150M Series D at a $4.15B valuation. This investment allows us to go deeper on the things that matter most: AI, platform depth, and the overall customer experience of running your trust program in Vanta.

‍

We were humbled by the recognition that followed—from making the Forbes Cloud 100 for the third consecutive year, to being named a Leader in the IDC GRC Marketscape, to continuing as the #1 rated GRC product on G2. These moments aren’t the goal, but they reaffirm that the work matters.

‍

‍

And the work is only getting more important. Security is becoming more complex, not less. Companies are becoming more interconnected, not less. The attack surface keeps expanding, and customer expectations keep rising.

‍

So in 2026, our focus is straightforward: Make trust easier to manage day to day, and easier to prove when it matters. That means more connected tools, less manual work, and systems that keep up as your company changes—without requiring big budgets or headcount. 

‍

Thank you

Last year reminds us how much trust is earned in small moments. A faster questionnaire turnaround. A clearer risk report. A vendor issue caught early. A customer saying, “This saved us a week.”

‍

Thank you to everyone who shared feedback, challenged us, partnered with us, or tried something new we released this year. We don’t take your trust for granted, and your feedback and care drive us to keep building.

‍

If you’re ready to see how Vanta works for your team, request a demo.