Vanta

Automate compliance, security, and trust with the #1 Agentic Trust Platform.

[Vanta @TrustVanta]

Vanta has been named a Leader in The @forrester Wave™: Governance, Risk, and Compliance Platforms, Q2 2026, in our first inclusion in the evaluation.

We’re incredibly excited about this recognition and what we feel it says about the work our team has been building toward.

In the report, Forrester recognized our continuous controls monitoring capabilities, ease of implementation, broad integrations, and embedded AI agents that perform “high-impact tasks beyond basic summarization or content generation.”

We’re especially proud to be recognized in an evaluation that addresses Continuous Risk Management alongside long-established GRC vendors.

To us, it reflects where security and compliance are heading: more automated, more continuous, and increasingly AI-enabled.

Read the full report: https://t.co/oDy7qokR7e

[Vanta @TrustVanta]

Vanta NYC reporting for duty 🫡

[Vanta @TrustVanta]

ATTN: Bay Area Security and GRC builders! 👋

Your AI vendors are a risk you haven't mapped yet. Teams are adding AI tools faster than you can assess them, and shadow AI is creating compliance blind spots most programs weren't built to catch.

Join us June 25th at Vanta HQ for our Risk-athon, a hands-on workshop where you'll build AI vendor discovery, due diligence, and continuous monitoring workflows live in Vanta.

Bonus: you'll come away with CPE credit!

Seats are limited, register asap: https://t.co/pAZoXFC8fn

[Vanta @TrustVanta]

10 seconds after enabling 2FA

[Vanta @TrustVanta]

Some people have surveys. We have the Vanta Community. 📢 💜

[Vanta @TrustVanta]

Another great #NYTechWeek in the books 🗽

Over the course of five events, we had the chance to connect with founders, operators, investors, and builders from across the startup ecosystem. One highlight: bringing Calm-pliance Cafe to the Lower East Side, where our CEO @christinacaci joined Anarghya Vardhana for a fireside chat and Q&A with founders.

A few days, a handful of events, and countless conversations later, we're still thinking about the ideas, questions, and debates that kept popping up across the city.

Same time next year, NYC? 💜

[Vanta @TrustVanta]

Not to sound like a risk register, but...

Likelihood of us being excited about this award: High.

Honored to be recognized in the Best Risk Management Solution category for this year's #SCAwardsEurope! 🏆

[Vanta @TrustVanta]

Somewhere out there, an internal risk team and a vendor risk team are both very confident that "everything is fine.”

And they're right... if "fine" means spending countless hours debating the risk matrix, blatantly missing connections that expose your business to risk, and stewing up tension in team meetings.

Newest episode of Security Theater with @yayalexisgay ⤵️

[Vanta @TrustVanta]

Connecting an LLM to your data is the easy part.

In compliance and security, the cost of a wrong answer isn't a bad user experience. It's a failed audit.

We wrote about what lives in the gap between a raw LLM integration and AI you can trust with your compliance program: https://t.co/SkP9OiHqKS

[Vanta @TrustVanta]

@SlackHQ status: deep focus mode

[Vanta @TrustVanta]

@yayalexisgay @alexrkonrad Love to see it 💟

[Vanta @TrustVanta]

We're joining our friends at @StationDC_HQ to host an afternoon for founders and security practitioners in the DC area on June 16.

Panels and roundtables on building and scaling compliance programs, like SOC 2, FedRAMP, CMMC, and everything in between. Bring the questions you've been sitting on.

Get the details and register to attend: https://t.co/5mHcJQeH6N

[Vanta @TrustVanta]

Compliance shouldn't be the thing that derails your momentum. But for a lot of startups, it is.

We made a series about that.

Back to Basics is a new series breaking down what startups need to know about security and compliance (before it becomes a fire drill).

Francesca kicks it off by answering a question many founders put off: when should you actually start thinking about compliance?

[Alex Konrad @alexrkonrad]

"As annoying as competition is, it totally makes us better, and it's way better for the customer."

@TrustVanta CEO Christina Cacioppo (@christinacaci) has gotten used to newer startups talking a big game as the new 'Vanta 2.0'

Her advice for handling big-talk: send a Slack message or one-pager to your leaders breaking down what's new, what's worth watching, and what to do about it.

What she won't do, she tells The Upstarts Podcast, is mention the competition by name, even when they're scandalous.

"I subscribe to the 'never let them see you blink' school of thought. Maybe I have to blink somewhere else, but yeah, that's not here."

[Vanta @TrustVanta]

A year ago, @perk_global was a travel company.
Then they acquired a bank.

Overnight: six compliance frameworks, a regulated balance sheet, and a security team with a lot more ground to cover... questionnaires, audit prep, access reviews, all of it.

Here's what they didn't do: hire their way out of it.

50% less time on questionnaires. 49 of 50 now resolved without the security team touching them. Equivalent of two full-time hires saved.

The compliance footprint kept growing. The headcount didn't have to.

Read the full study: https://t.co/BifbyU1khr

[Vanta @TrustVanta]

To build or to buy? That’s the question.

AI coding makes building tools like GRC easy. It feels free!

It’s not. Writing code is only 20% of the total cost. The remaining 80% goes into owning, maintaining, and securing it over time.

Even if AI does cut development time by 50%, the total cost could still end up up to 6x more expensive than buying over five years.

If it isn’t core to your product, it’s probably not worth owning forever.

Hear from Anarghya on how to avoid an expensive mistake: https://t.co/ExxyymaCxL

[Vanta @TrustVanta]

Us waiting for you to complete your security training.

[Vanta @TrustVanta]

One thing about GRC leaders...pack enough of them into a room, give them some BonBon candy, and the conversations practically run themselves.

Llamazing, honestly.🦙

Recapping some of our favorite moments from Vanta Delivers x NY Trust Tour, thanks to everyone who joined us!

[Vanta @TrustVanta]

Read how we build AI you can actually stake your compliance program on:
https://t.co/zaRgBzyJE0

[Vanta @TrustVanta]

A lot of AI features in B2B software are just chatboxes with a personality. They make a product feel modern without doing any real work.

We call it AI sprinkle, and we don't ship it.

Our SVP of Engineering, @IcchaSethi, wrote about how we build AI at Vanta--a framework we call Trustcraft. No training on customer data. Every feature dogfooded on our own compliance program first. Eval discipline that catches regressions before customers ever feel them.

The bar we hold ourselves to: if a compliance team can’t stake their program on it, it doesn’t ship.🚫🚢

Link in the comments. 🔽