Vanta is a security and compliance startup based out of San Francisco. They have built software that automates much of the SOC 2 certification and renewal processes.

Historically, companies who were asked to get a SOC 2 report (usually in order to close a deal) were required to hire an auditor, host auditors on-site and capture lots of screenshots before getting their report.

Vanta leverages read-only APIs to run security tests (hourly) that map back to specific SOC 2 requirements. Customers need only work through these failing tests in Vanta to become SOC 2 ready.

Vanta is not an AICPA-accredited auditing firm. Instead, they partner with and train dozens of audit firms (including the Big 4) on how to log into Vanta to file SOC 2 reports on behalf of Vanta customers.

A process that used to take a 20 person startup 4-6 months now takes 2-4 weeks with Vanta. And a process that used to be managed by a C-Level can now be delegated to a more junior-level team member.