Vanta (company)
American software company
From Wikipedia, the free encyclopedia
Vanta is an American software company that provides a platform for automating information security monitoring and compliance management. Its software is intended to facilitate governance, risk, and compliance (GRC) processes by automating tasks that would otherwise be performed manually. Founded in 2018 during a period of high-profile data breaches in the technology industry, Vanta emerged from the Y Combinator startup accelerator program.
| |
| Type | Private |
|---|---|
| Industry |
|
| Founded | 2018 |
| Founders | Christina Cacioppo, Erik Goldman |
| Headquarters | , US |
Area served | Worldwide |
Number of employees | 1,000+ (2026) |
| Website | www |
In its early years, the company grew with minimal outside investment and operated under a lean business model. Since 2021, it has completed several funding rounds, reaching unicorn status in 2022. In 2023, Vanta introduced artificial intelligence (AI) into its product offerings. In its most recent funding round in 2025, the company was valued at US$4.15 billion.
History
Origins and launch
Vanta was founded in 2018 by Christina Cacioppo and Erik Goldman, both former employees of Dropbox.[a][3] Cacioppo began her career at Dropbox in 2014 as one of their founding product managers in a team building Dropbox Paper.[4][5] Goldman worked at Dropbox as a software engineer.[6] Cacioppo conceived the idea for the company while at Dropbox, where she worked on security compliance contracts during the development of Dropbox Paper. In interviews, she described the compliance process as time-consuming and tedious, which informed her view that similar challenges were faced by other companies.[7]
Cacioppo left Dropbox in 2016 and spent the following year studying the market and interviewing information security professionals.[3][4] Through these interviews, they identified a need for standardized, automated approaches to compliance and security monitoring.[4] In the winter of 2018,[2] they participated in Y Combinator's startup accelerator program and raised US$3 million in seed funding to launch Vanta.[3]
The company was established amid a period of heightened scrutiny following several high-profile data breaches at several technology companies.[4][8] Vanta's initial project offerings were made to help companies attain System and Organization Controls (SOC 2) compliance, a framework used to evaluate an organization's trustworthiness in handling customer data.[9] Notion was among Vanta's early customers and adopted its compliance and security monitoring products.[3]
In its early years under Cacioppo's leadership, Vanta operated with limited external investment and a lean organizational structure, prioritizing speed to market while controlling expenditures.[10][11] Its first investments consisted of US$500,000 from Y Combinator and US$3 million in seed funding. Vanta initially developed its product through projects with individual companies, acting more as a consultant, before standardizing the product to serve a broader customer base.[10] During its first two years, the company maintained minimal formal structure, holding no executive or staff meetings, relying on manually written customer emails rather than an automated system, and keeping costs low through practical measures.[10]
Vanta grew through sales, reaching 600 customers without maintaining a company website.[3] To facilitate its product feedback loop, Vanta hired engineers with customer-facing responsibilities.[10] In 2019, Vanta became a sponsor of This Week in Startups, a technology podcast hosted by investor Jason Calacanis. Through the sponsorship, Vanta engaged with other companies, and the podcast served as a key marketing channel for the company.[12] Vanta had five employees at the beginning of 2019 and nearly 45 by 2020.[7] The company was profitable from 2019 through 2021.[10]
Fundraising and growth
In May 2021, Vanta announced a US$50 million Series A funding round led by Sequoia Capital, with participation from existing Y Combinator investors.[7][13] Sequoia investors noted that part of their interest in investing in Vanta stemmed from the fact that nearly two dozen of their portfolio companies were using Vanta's products. Cacioppo used these companies as references to demonstrate Vanta's market adoption to Sequoia.[3] The company stated that the funding would support product development, expansion of its sales and marketing team, and the opening of a corporate office in New York City.[7][14] Vanta reported in US$10 million in annual recurring revenue (ARR),[15] a fivefold increase from the previous year.[7]
In June 2022, Vanta announced a US$110 million Series B funding round led by Craft Ventures. Existing investors, including Sequoia Capital and Y Combinator, also invested in the round.[16][17] The funding helped Vanta achieve unicorn status with a US$1.6 billion valuation.[11] Investors attributed Vanta's growth to several factors, including its lean operational structure and Cacioppo's direct involvement in product development and customer-facing activities.[10][18] In October 2022, Vanta announced an additional US$40 million raised as part of its Series B funding round, which had been led in June, bringing its total capital raised to US$203 million.[19] The round included participation from cybersecurity company CrowdStrike and several individual investors.[20] In late 2022, Vanta opened its first European corporate office in Ireland to expand its presence in the region in response to Europe's regulatory environment.[10]
In January 2023, Vanta acquired TrustPage, a company based in Royal Oak, Michigan, whose product automated security reviews between vendors and customers. The financial terms of the deal were not disclosed.[21][22] In May 2023, Vanta was included on CNBC’s Disruptor 50 list, which recognizes companies deemed innovative and competitive.[23] In July 2024, Sequoia led a US$150 million Series C funding round in Vanta, bringing the company's valuation to approximately US$2.45 billion.[24][25][26] The round also included investments from Craft Ventures and Y Combinator, two large U.S. banks—Goldman Sachs and JPMorgan Chase—and the venture arms of technology companies including CrowdStrike, Atlassian, HubSpot, and Workday. The funding was intended to support the company's artificial intelligence (AI) product roadmap, retire legacy compliance products, and expand its market presence in the UK and Australia.[27][28]
In June 2025, Vanta was named a leader in an International Data Corporation (IDC) MarketScape report evaluating GRC software vendors.[29] The following month, Vanta closed a US$150 million Series D funding round at a valuation of US$4.15 billion,[30] a 69 percent increase from the previous year.[31] The fundraising was led by Wellington Management and previous investors Sequoia, Goldman Sachs, JPMorgan Chase, and Craft Ventures. With this round, the company had raised a total of US$504 million since 2021.[32] Cacioppo declined to comment on the company's ARR but confirmed that the average transaction size and growth rate had increased. She also stated that none of the US$150 million raised in the previous year had been used.[33]
The company also confirmed the acquisition of Riskey, an Israeli company that developed an AI-based risk monitoring and incident categorization product, for an undisclosed amount.[34][35] Cacioppo stated that Vanta was open to acquiring companies with adjacent product offerings to further expand its product suite, and that the funding could be used for additional acquisitions as the company saw fit.[35] Vanta also said the funds would support the expansion of its AI offerings and noted that it had opened a corporate office in London and a data center in Australia within the past year.[32]
In April 2026, Vanta reported 1,000 employees, over 16,000 customers, and $300 million in ARR, a threefold increase over the previous two years. The company attributed its growth to increased enterprise adoption of AI and growing demand for oversight of shadow IT.[36]
Corporate affairs
Vanta is headquartered in San Francisco, California, United States.[37] The company operates with a primarily remote workforce and maintains offices to support hybrid work in the United States, the United Kingdom, Ireland, and Australia.[38] Vanta also hosts an annual conference, VantaCon.[39] Their chief executive officer (CEO) is Christina Cacioppo.[10]
The company adopted a purple llama as its mascot,[10][40] citing the animal's protective instincts and its use as a guard animal capable of emitting an alarm-like sound when detecting predators. In an interview, Cacioppo said the choice was intended to reflect Vanta's focus on security without being overly literal.[41] The company selected the color purple, stating that it was intended to convey seriousness and calm. Vanta's llama mascot is named Ilma, a name described as loosely translating to "resolute protector" in German.[42] The name "Vanta" is derived from the word "advantage".[11]
Products and services
Overview
Vanta is an agentic trust platform that provides automated compliance and continuous governance, risk, and compliance (GRC) management.[43][44][45] The product is used to manage security and compliance requirements through automation and reduce manual processes.[35]
In its early years, the company focused on helping customers achieve compliance with specific security certifications.[46] Over time, the product expanded to support broader GRC and trust management use cases,[47][48] including risk management, identity and access management, trust centers, and security questionnaire automation.[46][44] In addition to its software products, Vanta provides services through an in-house team and external implementation partners, including technical support, security consulting, and assistance with client onboarding and product use.[2]
Vanta's integrates with over 400 software apps and includes a native AI agent.[29][49] It also has a dashboard where users can monitor security and compliance across their existing technology stack, surface metrics and insights, and generate reports.[50][51] The platform includes a library of policies and frameworks and supports the use of data ingested from third-party sources.[52] Vanta supports compliance certification across a range of industry standards, including SOC 2, ISO 42001, ISO 27001, Health Insurance Portability and Accountability Act (HIPAA),[44] General Data Protection Regulation (GDPR) and FedRAMP.[35][53]
Features
One of its product features, Access Review, manages and evaluates user access controls.[39][54] The feature is intended for administrators to review application access rights, detect anomalies, and take preventive actions, such as revoking access when necessary.[39] When an exposure is identified, Vanta generates alerts within the platform, which may be reviewed by auditors and shared through integrated communication tools.[19] The platform can also be used to facilitate compliance certification across a range of industry standards, while supporting internal security posture and documentation.[35]
In addition, Vanta offers a Third-Party Risk Management feature that supports vendor risk assessments by analyzing external documentation, completing security questionnaires, and evaluating a vendor's security posture.[52] In its Vanta Exchange feature, the platform allows for collaboration between organizations and third parties by enabling the exchange of security information, testing data integrations, and collecting documentation required for compliance.[54]
Vanta began launching AI product capabilities in 2023, including integrations with large language model (LLM) providers.[b][46] These features expanded Vanta's functionality by generating recommendations for tests and policies aligned with specific compliance frameworks.[52] Vanta's AI products use machine learning (ML) to extract and contextualize data from internal reports and existing frameworks to support users with defined security and compliance requirements.[51][50]
In 2025, Vanta launched its agentic AI offering.[55][44] Although Vanta's agent incorporates human review, the agent is intended to accelerate compliance processes that were previously handled manually.[35] Vanta also offers an AI chatbot that assists users by answering questions and helping complete reports and questionnaires based on documents uploaded to the platform.[40] The company does not train its models using customer data.[35]