Vanta Scorecard

Score by criterion

• Framework coverage15% of total

  5/5

  Claims 35+ frameworks, with every framework in our matrix confirmed on its product pages.

  Level 5: All of level 3, plus three or more of ISO 42001, NIST CSF, NIST 800-53, FedRAMP or CMMC.

• Automated evidence20% of total

  5/5

  400+ integrations, the largest claim in this set, with continuous monitoring and a public API.

  Level 5: 300 or more published integrations, continuous tests, and a public API or custom integration builder.

• Audit path15% of total

  2/5

  A partner auditor network, or bring your own auditor. Auditor review inside the platform was not confirmed on the pages we read.

  Level 2: A named partner network of audit firms, or auditors can review evidence inside the platform.

• Pricing transparency10% of total

  1/5

  Four plan names are published (Essentials, Plus, Professional, Enterprise), with no dollar figures.

  Level 1: Plan names and inclusions are published, with no numbers.

• Trust and questionnaires10% of total

  4/5

  A dedicated trust center product and AI questionnaire answering, capped by plan (25 a year on Plus, 144 on Professional).

  Level 4: Both, with AI-assisted questionnaire answering.

• Vendor risk management10% of total

  4/5

  Vendor inventory, automated vendor discovery, and AI-powered security reviews.

  Level 4: All of level 3, plus automated review of vendor security documents.

• Customisation10% of total

  3/5

  A dedicated custom frameworks product. Custom automated tests were not confirmed.

  Level 3: Custom frameworks can be built.

• User sentiment10% of total

  5/5

  4.6 out of 5 from 2,723 reviews on G2, the largest review base of the six.

  Level 5: Average 4.5 or higher with 200 or more reviews.