Archer Integrated Risk Management Platform vs. Vanta

Archer is better suited for an environment that has at least some maturity in its program, whatever that program may be. If an organization does not know stakeholders involved, or the workflow for its own process, or has the technology in place to perform vulnerability scans, then Archer will probably not be much help. If an organization knows these items, but it's all paper based or in Excel spreadsheets, or they are struggling to report on them, or notify an individual when it is their time to take action in a process, then Archer can be a tremendous help.

Incentivized

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• Integration capabilities to multiple enterprise systems
• Control standards and Procedures to address multiple regulatory/authoritative sources, standards and frameworks enabling test once satisfy many requiremnts
• Rapid application development and User friendly tool with configuration capability to customize easily without user requiring programming or coding skills

• Integrations with source control and infrastructure providers.
• Guidance around what makes a company's policy secure.
• Portals that supply our auditors with everything they need to write their reports.

Incentivized

• They release time to time updates, which causes issues in the GUI. However, one has to be careful while installing the update.
• There is no open and free academy to learn more about the tool.
• One cannot stay to a particular product version, they have to move to the next version to keep up with the changes.

Incentivized

• Alerts and employee onboarding and offboarding were not entirely complete when we started using the product.
• It would be nice if we could assign policies to specific people in the Vanta app.
• Sometimes, refreshing the tests when you make the changes to pass takes a little more time than desired.

Incentivized

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

Good tool to get the information communicated, approval workflow, and easy to add new findings/questionnaires. Seems to be compatible with different browsers and little downtime. Only request for improvement is to add an export feature with fewer clicks. Maybe batch export.

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

Always available

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

Our RSA Archer team is dedicated to finding solutions for our organization. They haven't mentioned any issues with receiving support with deployment or bug fixes, and generally the platform is very dependable. They are always very excited about delivering a version upgrade and presenting any new features that provide more dashboards or chart types.

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

Microsoft Dynamics is a useful tool with easy integration to toolsets for analytics, and has a remarkable ease of use. The accessibility and discoverability in RSA Archer is more difficult, as sections get densely nested. The search capability in Dynamics is smoother but reliant on complete words being used, whereas RSA Archer searching is full Boolean.

Incentivized

Osano and Vanta both meet our requirements at a comparable rate. When comparing quality of ongoing product support, we felt that Vanta is the preferred option. For feature updates and roadmaps, we preferred the direction of Osano over Vanta.

Incentivized

Works as intended

Incentivized

• We were able to achieve approx 63% gain in operational efficiency.
• Reduce the number of findings and exceptions during an Internal audit to almost zero.
• Get compliance to all client contracts tracked through the tool thus increasing the confidence of clients in our systems and processes.

Incentivized

• In my experience, they aren't really helpful after all. They ended causing more problems when documents went missing on our trust page. They caused us some embarrassment when we referred people to a mostly empty page.
• They are now attempting to, in my opinion, force us to renew service.