Agent Index by Heritage Services
Submit / Claim
Home / Agents / Vanta

Vanta

Vendor: Vanta Inc. · HQ: United States · Category: Compliance · Security

Last verified · 9 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

Vanta helps organizations automate compliance programs across many frameworks. It collects evidence from integrations, maps controls, drafts policies, monitors continuously, and automates security questionnaire answers. Positioning includes an agentic trust platform with Trust Center modules. The FedRAMP Marketplace lists Vanta Trust Management Platform (FR2525556241) as Authorized 20x Low (2025-07-25) and Vanta Government Cloud (FR2525556241XM) as Authorized 20x Moderate (2026-04-24). Vanta's September 2026 release notes describe custom agents that run recurring GRC workflows on a schedule or on program changes (public preview, Essentials plans and above; sensitive actions wait for approval), the Vanta MCP server connecting Claude, Cursor, Codex, Slack and other AI tools to controls, evidence, risks and vendors (public preview), and Claude and ChatGPT plug-ins (public preview); Skills are listed as coming soon.

Frameworks (vendor-stated)

SOC 2ISO 27001HIPAAFedRAMPCMMC

Vendor-claimed SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, CMMC, NIST, FedRAMP

Government authorizations

Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.

Program Product Status Scope Source
FedRAMP Vanta Trust Management Platform · FedRAMP Authorized · FR2525556241 · 20x Low · authorized 2025-07-25 FedRAMP Authorized listing Registry
FedRAMP Vanta Government Cloud · FedRAMP Authorized · FR2525556241XM · 20x Moderate · authorized 2026-04-24 FedRAMP Authorized listing Registry

Pricing (as published)

Quote-based. AWS Marketplace lists Essentials from $14,000/year for 1–20 employees (12-month contracts); modules priced separately.

Tasks

evidence collectioncontrol monitoringquestionnaire automationpolicy managementtrust center

Integrations (vendor-listed)

AWSAzureGCPGitHubOktaJira

Names that appeared on the vendor’s integrations page at last check. Missing names are unknown, not “no”. Only some listings have integration data so far.

Sources

  1. vanta.com/pricing (primary)
  2. vanta.com/
  3. vanta.com/products/additional-frameworks
  4. aws.amazon.com/marketplace/pp/prodview-5ophamrbfxt44
  5. fedramp.gov/marketplace/products/FR2525556241/
  6. fedramp.gov/marketplace/products/FR2525556241XM/
  7. vanta.com/products/cmmc
  8. vanta.com/whats-new
  9. vanta.com/integrations

Last verified 20 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Firms that list Vanta as a partner

Shown only when this dataset has a sourced partner-directory row for this tool. A directory listing is not an endorsement.

Auditors by framework

Existing directory filters for frameworks this listing tags, shown only where at least three Verified firms are listed. A tag is vendor-stated relevance, not a certification.

Narrow by region

This listing’s HQ country is United States. That is a starting point only — choose any published country page.

United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Audit firms in the United States (195)

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

Compare Vanta with

Alternatives

  • Drata — Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs. (shared tags: SOC 2, ISO 27001, HIPAA, FedRAMP, CMMC)
  • Secureframe — Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. (shared tags: SOC 2, ISO 27001, HIPAA, FedRAMP, CMMC)
  • 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: SOC 2, ISO 27001, HIPAA, CMMC)
  • Akitra Andromeda AI compliance agents — AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. (shared tags: SOC 2, ISO 27001, HIPAA, CMMC)
  • Complyance GRC AI Agents — Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires. (shared tags: SOC 2, ISO 27001, HIPAA, CMMC)
  • Cypago Agentic Workflows — Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring. (shared tags: SOC 2, ISO 27001, HIPAA, CMMC)

See all Vanta alternatives →

FAQ (from this dataset)

What does Vanta do?

Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.

How much does Vanta cost?

Quote-based. AWS Marketplace lists Essentials from $14,000/year for 1–20 employees (12-month contracts); modules priced separately.

Where is Vanta Inc. headquartered?

United States

Which frameworks does Vanta support?

Frameworks (vendor-stated): SOC 2, ISO 27001, HIPAA, FedRAMP, CMMC. Framework tags indicate relevance, not certification.

What are alternatives to Vanta?

See the Vanta alternatives page for category-sharing listings in relevance order, not a ranking. Vanta alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.