C1Risk vs. Vanta

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• Integrations with source control and infrastructure providers.
• Guidance around what makes a company's policy secure.
• Portals that supply our auditors with everything they need to write their reports.

Incentivized

• Alerts and employee onboarding and offboarding were not entirely complete when we started using the product.
• It would be nice if we could assign policies to specific people in the Vanta app.
• Sometimes, refreshing the tests when you make the changes to pass takes a little more time than desired.

Incentivized

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

Always available

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

Osano and Vanta both meet our requirements at a comparable rate. When comparing quality of ongoing product support, we felt that Vanta is the preferred option. For feature updates and roadmaps, we preferred the direction of Osano over Vanta.

Incentivized

Works as intended

Incentivized

• In my experience, they aren't really helpful after all. They ended causing more problems when documents went missing on our trust page. They caused us some embarrassment when we referred people to a mostly empty page.
• They are now attempting to, in my opinion, force us to renew service.