Workspaces (exactly what we needed). Remediation instructions (a true differentiator, over competitors) Vendor Management (closed a gap, strong early use case of AI)
July 11, 2025
The risk management module has a number of immaturities and limitations. For example, current risk (where you are today) is automatically calculated by Vanta and it is not possible to produce this score yourself. It's a very basic calculation method, where the risk score goes from the inherent to residual score only once all assigned controls are passing. It goes from 'zero to hero' just like that, which is often not an accurate reflection of your real, current risk score. It cannot take into account control effectiveness, or the difference between compliant vs secure.
July 8, 2025