Vanta (company)

Vanta
TypePrivate
Industry
Founded2018 (2018)
FoundersChristina Cacioppo, Erik Goldman
Headquarters,
US
Area served
Worldwide
Number of employees
1,000+ (2026)
Websitewww.vanta.com

Vanta is an American software company that provides a platform for automating information security monitoring and compliance management. Its software is intended to facilitate governance, risk, and compliance (GRC) processes by automating tasks that would otherwise be performed manually. Founded in 2018 during a period of high-profile data breaches in the technology industry, Vanta emerged from the Y Combinator startup accelerator program.

In its early years, the company grew with minimal outside investment and operated under a lean business model. Since 2021, it has completed several funding rounds, reaching unicorn status in 2022. In 2023, Vanta introduced artificial intelligence (AI) into its product offerings. In its most recent funding round in 2025, the company was valued at US$4.15 billion.

History

Origins and launch

Vanta was founded in 2018 by Christina Cacioppo and Erik Goldman, both former employees of Dropbox.[a][3] Cacioppo began her career at Dropbox in 2014 as one of their founding product managers in a team building Dropbox Paper.[4][5] Goldman worked at Dropbox as a software engineer.[6] Cacioppo conceived the idea for the company while at Dropbox, where she worked on security compliance contracts during the development of Dropbox Paper. In interviews, she described the compliance process as time-consuming and tedious, which informed her view that similar challenges were faced by other companies.[7]

Cacioppo left Dropbox in 2016 and spent the following year studying the market and interviewing information security professionals.[3][4] Through these interviews, they identified a need for standardized, automated approaches to compliance and security monitoring.[4] In the winter of 2018,[2] they participated in Y Combinator's startup accelerator program and raised US$3 million in seed funding to launch Vanta.[3]

The company was established amid a period of heightened scrutiny following several high-profile data breaches at several technology companies.[4][8] Vanta's initial project offerings were made to help companies attain System and Organization Controls (SOC 2) compliance, a framework used to evaluate an organization's trustworthiness in handling customer data.[9] Notion was among Vanta's early customers and adopted its compliance and security monitoring products.[3]

In its early years under Cacioppo's leadership, Vanta operated with limited external investment and a lean organizational structure, prioritizing speed to market while controlling expenditures.[10][11] Its first investments consisted of US$500,000 from Y Combinator and US$3 million in seed funding. Vanta initially developed its product through projects with individual companies, acting more as a consultant, before standardizing the product to serve a broader customer base.[10] During its first two years, the company maintained minimal formal structure, holding no executive or staff meetings, relying on manually written customer emails rather than an automated system, and keeping costs low through practical measures.[10]

Vanta grew through sales, reaching 600 customers without maintaining a company website.[3] To facilitate its product feedback loop, Vanta hired engineers with customer-facing responsibilities.[10] In 2019, Vanta became a sponsor of This Week in Startups, a technology podcast hosted by investor Jason Calacanis. Through the sponsorship, Vanta engaged with other companies, and the podcast served as a key marketing channel for the company.[12] Vanta had five employees at the beginning of 2019 and nearly 45 by 2020.[7] The company was profitable from 2019 through 2021.[10]

Fundraising and growth

In May 2021, Vanta announced a US$50 million Series A funding round led by Sequoia Capital, with participation from existing Y Combinator investors.[7][13] Sequoia investors noted that part of their interest in investing in Vanta stemmed from the fact that nearly two dozen of their portfolio companies were using Vanta's products. Cacioppo used these companies as references to demonstrate Vanta's market adoption to Sequoia.[3] The company stated that the funding would support product development, expansion of its sales and marketing team, and the opening of a corporate office in New York City.[7][14] Vanta reported in US$10 million in annual recurring revenue (ARR),[15] a fivefold increase from the previous year.[7]

In June 2022, Vanta announced a US$110 million Series B funding round led by Craft Ventures. Existing investors, including Sequoia Capital and Y Combinator, also invested in the round.[16][17] The funding helped Vanta achieve unicorn status with a US$1.6 billion valuation.[11] Investors attributed Vanta's growth to several factors, including its lean operational structure and Cacioppo's direct involvement in product development and customer-facing activities.[10][18] In October 2022, Vanta announced an additional US$40 million raised as part of its Series B funding round, which had been led in June, bringing its total capital raised to US$203 million.[19] The round included participation from cybersecurity company CrowdStrike and several individual investors.[20] In late 2022, Vanta opened its first European corporate office in Ireland to expand its presence in the region in response to Europe's regulatory environment.[10]

In January 2023, Vanta acquired TrustPage, a company based in Royal Oak, Michigan, whose product automated security reviews between vendors and customers. The financial terms of the deal were not disclosed.[21][22] In May 2023, Vanta was included on CNBC’s Disruptor 50 list, which recognizes companies deemed innovative and competitive.[23] In July 2024, Sequoia led a US$150 million Series C funding round in Vanta, bringing the company's valuation to approximately US$2.45 billion.[24][25][26] The round also included investments from Craft Ventures and Y Combinator, two large U.S. banks—Goldman Sachs and JPMorgan Chase—and the venture arms of technology companies including CrowdStrike, Atlassian, HubSpot, and Workday. The funding was intended to support the company's artificial intelligence (AI) product roadmap, retire legacy compliance products, and expand its market presence in the UK and Australia.[27][28]

In June 2025, Vanta was named a leader in an International Data Corporation (IDC) MarketScape report evaluating GRC software vendors.[29] The following month, Vanta closed a US$150 million Series D funding round at a valuation of US$4.15 billion,[30] a 69 percent increase from the previous year.[31] The fundraising was led by Wellington Management and previous investors Sequoia, Goldman Sachs, JPMorgan Chase, and Craft Ventures. With this round, the company had raised a total of US$504 million since 2021.[32] Cacioppo declined to comment on the company's ARR but confirmed that the average transaction size and growth rate had increased. She also stated that none of the US$150 million raised in the previous year had been used.[33]

The company also confirmed the acquisition of Riskey, an Israeli company that developed an AI-based risk monitoring and incident categorization product, for an undisclosed amount.[34][35] Cacioppo stated that Vanta was open to acquiring companies with adjacent product offerings to further expand its product suite, and that the funding could be used for additional acquisitions as the company saw fit.[35] Vanta also said the funds would support the expansion of its AI offerings and noted that it had opened a corporate office in London and a data center in Australia within the past year.[32]

In April 2026, Vanta reported 1,000 employees, over 16,000 customers, and $300 million in ARR, a threefold increase over the previous two years. The company attributed its growth to increased enterprise adoption of AI and growing demand for oversight of shadow IT.[36]

Corporate affairs

Vanta is headquartered in San Francisco, California, United States.[37] The company operates with a primarily remote workforce and maintains offices to support hybrid work in the United States, the United Kingdom, Ireland, and Australia.[38] Vanta also hosts an annual conference, VantaCon.[39] Their chief executive officer (CEO) is Christina Cacioppo.[10]

The company adopted a purple llama as its mascot,[10][40] citing the animal's protective instincts and its use as a guard animal capable of emitting an alarm-like sound when detecting predators. In an interview, Cacioppo said the choice was intended to reflect Vanta's focus on security without being overly literal.[41] The company selected the color purple, stating that it was intended to convey seriousness and calm. Vanta's llama mascot is named Ilma, a name described as loosely translating to "resolute protector" in German.[42] The name "Vanta" is derived from the word "advantage".[11]

Products and services

Overview

Vanta is an agentic trust platform that provides automated compliance and continuous governance, risk, and compliance (GRC) management.[43][44][45] The product is used to manage security and compliance requirements through automation and reduce manual processes.[35]

In its early years, the company focused on helping customers achieve compliance with specific security certifications.[46] Over time, the product expanded to support broader GRC and trust management use cases,[47][48] including risk management, identity and access management, trust centers, and security questionnaire automation.[46][44] In addition to its software products, Vanta provides services through an in-house team and external implementation partners, including technical support, security consulting, and assistance with client onboarding and product use.[2]

Vanta's integrates with over 400 software apps and includes a native AI agent.[29][49] It also has a dashboard where users can monitor security and compliance across their existing technology stack, surface metrics and insights, and generate reports.[50][51] The platform includes a library of policies and frameworks and supports the use of data ingested from third-party sources.[52] Vanta supports compliance certification across a range of industry standards, including SOC 2, ISO 42001, ISO 27001, Health Insurance Portability and Accountability Act (HIPAA),[44] General Data Protection Regulation (GDPR) and FedRAMP.[35][53]

Features

One of its product features, Access Review, manages and evaluates user access controls.[39][54] The feature is intended for administrators to review application access rights, detect anomalies, and take preventive actions, such as revoking access when necessary.[39] When an exposure is identified, Vanta generates alerts within the platform, which may be reviewed by auditors and shared through integrated communication tools.[19] The platform can also be used to facilitate compliance certification across a range of industry standards, while supporting internal security posture and documentation.[35]

In addition, Vanta offers a Third-Party Risk Management feature that supports vendor risk assessments by analyzing external documentation, completing security questionnaires, and evaluating a vendor's security posture.[52] In its Vanta Exchange feature, the platform allows for collaboration between organizations and third parties by enabling the exchange of security information, testing data integrations, and collecting documentation required for compliance.[54]

Vanta began launching AI product capabilities in 2023, including integrations with large language model (LLM) providers.[b][46] These features expanded Vanta's functionality by generating recommendations for tests and policies aligned with specific compliance frameworks.[52] Vanta's AI products use machine learning (ML) to extract and contextualize data from internal reports and existing frameworks to support users with defined security and compliance requirements.[51][50]

In 2025, Vanta launched its agentic AI offering.[55][44] Although Vanta's agent incorporates human review, the agent is intended to accelerate compliance processes that were previously handled manually.[35] Vanta also offers an AI chatbot that assists users by answering questions and helping complete reports and questionnaires based on documents uploaded to the platform.[40] The company does not train its models using customer data.[35]

See also

Notes

  1. ↑ Some sources incorrectly cite 2017 as Vanta's founding year.[1] The company was founded in 2018, following its participation in Y Combinator's startup accelerator program that winter.[2]
  2. ↑ The AI functionality integrates models from providers such as OpenAI and Anthropic, among others.[40]

References

  1. ↑ "Vanta". Sequoia Capital. Archived from the original on January 2, 2026. Retrieved January 30, 2026.
  2. 1 2 3 "Vanta". Y Combinator. Archived from the original on December 23, 2025. Retrieved January 30, 2026.
  3. 1 2 3 4 5 6 Konrad, Alex (May 4, 2021). "Vanta Goes From Low-Profile Startup To $500 Million Valuation With $50 Million Sequoia Series A". Forbes. Archived from the original on January 25, 2026.
  4. 1 2 3 4 Nash, Ashley (June 8, 2022). "Building a More Trustworthy Internet". Sequoia Capital. Archived from the original on November 17, 2025. Retrieved January 23, 2026.
  5. ↑ "Christina Cacioppo – Co-Founder and CEO, Vanta". Tech Crunch. Archived from the original on 10 March 2025.
  6. ↑ Rafieyan, Darius (May 6, 2024). "Ali Partovi learned to code in a war zone. Now, he's trying to build a new kind of venture fund". Business Insider. Archived from the original on July 9, 2024.
  7. 1 2 3 4 5 Rinker, Brian (May 4, 2021). "YC alum Vanta raises $50 million Series A by Sequoia Capital to monitor security for SaaS startups". San Francisco Business Times. American City Business Journals.
  8. ↑ Bergman, Ben; Muppidi, Sri (June 20, 2024). "Sequoia-backed security startup Vanta will see its valuation soar past $2 billion in new funding round, sources say". Business Insider. Archived from the original on June 21, 2024.
  9. ↑ "Announcing Vanta's $50 Million Series A from Sequoia Capital". Vanta. May 4, 2021. Archived from the original on January 22, 2026. Retrieved January 26, 2026.
  10. 1 2 3 4 5 6 7 8 9 Liu, Phoebe (June 25, 2023). "How Christina Cacioppo Built Startup Vanta Into A $1.6 Billion Unicorn To Automate Complicated Security Compliance Issues". Forbes. Archived from the original on October 11, 2025.
  11. 1 2 3 McBride, Sarah (June 8, 2022). "Lessons From the Newest Unicorn Startup: Be Frugal, and Drink Costco Coffee". Bloomberg News.
  12. ↑ Appleton Grant, Elaine (August 7, 2025). "The Secret Strategy That Built These Billion-Dollar B2B Startups: Podcast Ads". Inc.
  13. ↑ Shen, Lucinda (May 5, 2021). "Venture Deals". Fortune. Archived from the original on April 24, 2025. Retrieved January 29, 2026.
  14. ↑ Wiggers, Kyle (May 4, 2021). "Cybersecurity compliance startup Vanta raises $50M". VentureBeat.
  15. ↑ "Sequoia Capital-Backed Vanta Raises $50M To Expand Its Cybersecurity Platform". CB Insights. May 6, 2021. Archived from the original on September 22, 2023. Retrieved January 29, 2026.
  16. ↑ "Announcing Vanta's $110 Million Series B". Vanta. June 8, 2022. Archived from the original on January 22, 2026. Retrieved January 28, 2026.
  17. ↑ Schubarth, Cromwell (August 16, 2022). "Vanta, Empower Finance, ArtsAI among top Bay Area companies on Inc. 5000 list for 2022". Silicon Valley Business Journal. American City Business Journals. Archived from the original on August 16, 2022. Retrieved January 25, 2026.
  18. ↑ Schubarth, Cromwell (June 8, 2022). "The Funded: Security startup Vanta sees valution soar to $1.6B in latest megadeal". Silicon Valley Business Journal. American City Business Journals.
  19. 1 2 Wiggers, Kyle (October 12, 2022). "Vanta lands $40M to automate cybersecurity compliance". TechCrunch. Archived from the original on August 18, 2025.
  20. ↑ Mathews, Jessica; Fordyce, Jackson (October 17, 2022). "Venture Deals". Fortune. Archived from the original on July 25, 2025. Retrieved January 25, 2026.
  21. ↑ "Reimagining the future of trust with Trustpage by Vanta". Vanta. January 19, 2023. Archived from the original on May 28, 2024. Retrieved January 31, 2026.
  22. ↑ Fordyce, Jackson (January 20, 2023). "Private Equity". Fortune. Archived from the original on August 21, 2023.
  23. ↑ "These are the 2023 CNBC Disruptor 50 companies". CNBC. May 9, 2023.
  24. ↑ Cacioppo, Christina (July 24, 2024). "Announcing Vanta's $150 million Series C funding". Vanta. Archived from the original on January 22, 2026. Retrieved January 25, 2026.
  25. ↑ Heim, Anna (January 21, 2025). "How companies could embrace digital accessibility with help from startups and AI". Fortune. Archived from the original on July 16, 2025.
  26. ↑ McBride, Sarah (July 24, 2024). "Sequoia Leads Funding for Startup Vanta at $2.45 Billion Valuation". Bloomberg News.
  27. ↑ Biswas, Pritam; Syamnath, Devika (July 24, 2024). "Sequoia Capital-backed Vanta raises funding at $2.45 bln valuation". Reuters.
  28. ↑ Abrams, Joe (July 24, 2024). "Venture Deals". Fortune. Archived from the original on July 24, 2024.
  29. 1 2 Harris, Philip D. (June 2025). "IDC MarketScape: Worldwide Governance, Risk, and Compliance Software Vendor Assessment, 2025". International Data Corporation.
  30. ↑ Cacioppo, Christina (July 23, 2025). "Helping businesses earn and prove trust: Announcing Vanta's $150 million Series D". Vanta. Archived from the original on December 17, 2025. Retrieved January 25, 2026.
  31. ↑ Bhandari, Ateev; Biswas, Pritam (July 23, 2025). "Wellington-led funding boosts Vanta's valuation by 69% in a year". Reuters.
  32. 1 2 Zaveri, Paayal (July 23, 2025). "Vanta Notches $4.15 Billion Valuation With New Funding Round". Bloomberg News.
  33. ↑ Novet, Jordan (July 23, 2025). "CrowdStrike-backed compliance startup Vanta valued at $4 billion in new funding round". CNBC. Archived from the original on November 5, 2025. Retrieved January 22, 2026.
  34. ↑ Cacioppo, Christina (June 17, 2025). "Supercharging Vendor Risk Management: Vanta acquires Riskey". Vanta. Archived from the original on December 25, 2025. Retrieved January 25, 2026.
  35. 1 2 3 4 5 6 7 Liu, Phoebe (July 23, 2025). "Christina Cacioppo's Software Startup Just Raised New Funds At A $4 Billion Valuation – Despite Not Needing The Money". Forbes.
  36. ↑ Lazarus, Lily Mae (April 29, 2026). "Exclusive: Vanta hits $300 million ARR as 'shadow AI' explodes across corporate America". Fortune. Archived from the original on 30 April 2026.
  37. ↑ "Inc. Company Profile: Vanta". Inc. Archived from the original on July 25, 2025. Retrieved January 31, 2026.
  38. ↑ "About: Vanta's mission is to help businesses earn and prove trust". Vanta. Archived from the original on January 1, 2026. Retrieved January 31, 2026.
  39. 1 2 3 Plumb, Taryn (November 9, 2022). "How Vanta's access review tool reduces security gaps with automation". VentureBeat. Archived from the original on July 25, 2025. Retrieved January 25, 2026.
  40. 1 2 3 Liu, Phoebe (July 28, 2024). "Christina Cacioppo's software startup just raised new funds at a $2.5 billion valuation". Forbes. Archived from the original on December 9, 2025. Retrieved January 25, 2026.
  41. ↑ Barrett, Eamon (December 1, 2023). "More and more business leaders are worried generative AI will erode consumer trust". Fast Company. Archived from the original on February 9, 2024.
  42. ↑ Scharf, Sarah (April 4, 2023). "Introducing Vanta's new look & celebrating 5,000 customers". Vanta. Archived from the original on December 16, 2025. Retrieved February 7, 2026.
  43. ↑ "Frontier Builders: Meet the builders putting machine intelligence to work". OpenAI. Archived from the original on February 10, 2026. Retrieved February 18, 2026.
  44. 1 2 3 4 Nuñez, Michael (June 10, 2025). "Vanta's AI agent wants to run your compliance program — and it just might". VentureBeat. Archived from the original on July 24, 2025. Retrieved January 25, 2026.
  45. ↑ Mehta, Stephanie (August 16, 2024). "In praise of process innovation, the idea economy's behind-the-scenes workhorse". Fast Company. Archived from the original on August 17, 2024.
  46. 1 2 3 Lardinois, Frederic (July 24, 2024). "Vanta raises $150M Series C, now valued at $2.45B". TechCrunch. Archived from the original on July 26, 2024.
  47. ↑ Mehta, Stephanie (16 August 2024). "In praise of process innovation, the idea economy's behind-the-scenes workhorse". Fast Company. Archived from the original on August 17, 2024.
  48. ↑ Tewari, Harshita (October 6, 2025). "My Evaluation of 6 Best Third-Party Risk Management Software". G2 Crowd.
  49. ↑ Hodo, Jaquez. "Product Updates". Vanta. Retrieved 20 February 2026.
  50. 1 2 "Disruptor 50 2023: 17. Vanta". CNBC. May 9, 2023. Archived from the original on January 29, 2026. Retrieved January 25, 2026.
  51. 1 2 Pasternack, Alex (March 19, 2024). "Complying with data security standards is crucial but arduous. This company makes it easier". Fast Company. Archived from the original on July 29, 2024.
  52. 1 2 3 Columbus, Louis (October 10, 2023). "Vanta continues to revolutionize trust management with latest AI release". VentureBeat. Archived from the original on July 25, 2025. Retrieved January 25, 2026.
  53. ↑ Garfinkle, Allie (October 23, 2024). "55% of companies say security risks are at a high — and AI has a lot to do with it, according to new data from Vanta". Fortune.
  54. 1 2 Barker, Ian (2025). "Vanta launches new features to boost compliance and trust". Beta News. Archived from the original on 7 February 2026.
  55. ↑ Smith, Jordan (June 18, 2025). "Vanta Announces AI Agent for Security & Compliance Teams". Channel Insider.