GRC-Boxx vs. Secureframe vs. Vanta

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• API driven capabilities offer a very easy way to connect your systems to their application.
• It was mostly intuitive to figure out what needed to be configured.
• I like how responsive they have been and how they have been able to outline the entire process for us from the start to the end.

Incentivized

• In my opinion, they make it very hard to contact them when you need something.
• In my experience, they write their contracts to make it difficult to cancel service.
• In my experience, they have no policy for refunds in addition to their [...] contacts.

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

Always available

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

Vanta's reporting was far superior, the price was competitive but my engineers running the project said that working with vanta would save them significant amount of time. Secondly vanta had more integrations so they could plug directly into the systems we use!

Incentivized

Works as intended

Incentivized

• We were able to close contracts because we had our SOCII compliance in place
• SOCII certification process was reduced by at least 80%

Incentivized