Vanta
Compliance automation and GRC platform (SOC 2, ISO 27001, HIPAA, etc.) with a beta hosted MCP server letting AI agents remediate failing controls.
Last verified:
Vanta is a San Francisco-based, privately held compliance-automation and trust-management company founded in 2018 by Christina Cacioppo and Erik Goldman, having raised roughly $504M through a 2025 Series D at a $4.15B valuation, backed by Sequoia, Y Combinator, and others. It sells continuous control monitoring, evidence collection, vendor risk, and trust-center products across four tiers (Essentials, Plus, Professional, Enterprise) that are entirely quote-based, requiring a sales demo/call to buy since no public pricing is listed. Vanta itself holds SOC 2 Type 2, ISO 27001, ISO 42001, and GDPR compliance, publishes REST APIs (Manage/Build Integrations/Auditor APIs with TypeScript and Java SDKs) with a developer-docs llms.txt, and runs an official beta hosted MCP server (mcp.vanta.com) for browsing controls/evidence and remediating failing compliance tests, alongside an official Claude Code plugin.
Pricing
| Tier | Price | Key features |
|---|---|---|
| Essentials | Custom | One compliance framework, Basic evidence collection, Trust Center access, Vanta AI Agent (basic) |
| Plus | Custom | Access Management, Expanded AI Agent features, Questionnaire automation (25/year) |
| Professional | Custom | Risk management, Advanced reporting (6 customizable reports), Questionnaire automation (144/year) |
| Enterprise | Custom | Fully customizable package, Advanced GRC needs |
Source: https://www.vanta.com/pricing
Agent-readiness
- Discoverability
- 55/100
- Machine-readable content
- 70/100
- Programmatic access
- 55/100
- MCP / agent support
- 75/100
- Self-serve transactability
- 15/100
- Transparency
- 55/100
Security & compliance
- SSO / SAML
- Yes
- Encryption at rest
- Yes
- Encryption in transit
- Yes
- Audit log
- Yes
- Pentest report
- Not publicly documented
"Not publicly documented" means Crail found no public evidence either way — not a confirmed absence. See our methodology. Trust center: https://trust.vanta.com.
FAQ
Does Vanta have a free tier?
No — Vanta does not offer a free tier as of 2026-07-26.
Can you buy Vanta without talking to sales?
No — Vanta requires a sales call to purchase.
Does Vanta have an official MCP (Model Context Protocol) server?
Yes, Vanta publishes an official MCP server (https://developer.vanta.com/docs/vanta-mcp).
What compliance certifications does Vanta hold?
Vanta holds: SOC 2 Type 2, ISO 27001, ISO 42001, GDPR.
Reviews
No reviews yet for Vanta. Be the first to submit a verified review.
Methodology & disclosure
Data verified via agent crawled, last checked 2026-07-26. Agent-readiness methodology version crail-ar-v0.1. No vendor payment influences these scores — see our methodology page.