SF SaaS Flags
Security & Compliance Automation · Risk Score 100 · Severe

Is Vanta a Scam or Legit? Here's What the Record Shows.

Automated SOC 2 compliance — useful, but the audit still costs what it costs

Short answer: Not technically — but it's complicated.

Our read

Vanta isn't a "scam" in the criminal sense — it's a real company with real software — but the complaint record raises serious questions about its sales practices, billing, and the gap between what's advertised and what's delivered.

The strongest "this feels like a scam" signals tend to come from one of two places: marketing claims that don't match reality, or billing practices that make leaving harder than joining. Below are the 9 flags in those two categories we've documented for Vanta.

Marketing & billing complaints

Billing Problems MEDIUM Source: G2 · Feb 14, 2025 Added 2d ago

Opaque Pricing Tiers Make True Cost Hard to Assess Before Sales Call

Vanta publishes no public pricing on its website as of 2025-2026, requiring a sales call to get any number — a friction point that draws complaints from startup founders who just want to budget quickly. Once in the sales process, multiple reviewers describe being quoted different prices depending on company size, integrations needed, and frameworks sought (SOC 2, ISO 27001, HIPAA combinations add cost). G2 reviewers from 2025 describe sticker shock when add-on frameworks like ISO 27001 were priced at several thousand dollars on top of the base SOC 2 plan, a cost not clearly conveyed until deep in negotiation.

"The sales rep quoted us one number, then the contract showed the ISO 27001 add-on as a separate line that added nearly four thousand dollars. That wasn't in any of the early conversations."

Misleading Marketing HIGH Source: Reddit · Nov 12, 2024 Added 2d ago

Vanta Markets SOC 2 Automation But Audit Fees Still Land on You

Vanta's core pitch is that it automates compliance work and gets companies SOC 2-ready fast. What the homepage language obscures is that the platform fee — which ran $7,500 to $15,000+ annually for startups as of 2024-2025 — is entirely separate from the auditor's bill, which typically adds another $10,000 to $30,000. Buyers coming from Vanta's marketing often expect a more bundled solution and are blindsided when they realize the audit relationship and cost are entirely their problem to manage. The distinction between 'audit-ready' and 'audited' is real, and Vanta's promotional copy has historically made that line harder to see than it should be.

"We signed up thinking Vanta handled the audit too. Nobody made it clear we'd still need to find and pay an auditor separately — that ended up costing us more than the platform itself."

Billing Problems HIGH Source: G2 · Mar 4, 2025 Added 2d ago

Aggressive Annual Contract Lock-In with Little Refund Flexibility

Multiple G2 and Capterra reviewers from 2024 and 2025 describe Vanta's contracts as strictly annual, with no prorated refunds after the billing period begins. Several small startups reported paying the full year's fee even after being acquired or pivoting away from the compliance use case within weeks of signing. The sales team reportedly pushes annual commitments hard during the close process, and the no-refund position is enforced by a contract clause reviewers say was not emphasized during demos. For a product targeting early-stage companies whose plans change fast, this is a recurring sore point.

"We got acquired three months into our annual contract. Vanta kept every dollar and offered nothing — not even a credit toward a future account."

Billing Problems MEDIUM Source: Capterra · Sep 4, 2025 Added 8d ago

Per-Employee Pricing Model Punishes Fast-Growing Startups at Renewal

Vanta's pricing scales with headcount, which means a startup that doubles from 50 to 100 employees between contract years can see their renewal cost jump by 50–80% with no corresponding increase in the scope of compliance work being done. This has generated a specific pattern of negative reviews on Capterra from Series A and Series B companies who describe the pricing model as punishing growth rather than rewarding it. The lack of a headcount cap or a 'startup tier' that survives past initial onboarding is a common frustration.

"We hired 40 people in a good year and our Vanta renewal came in at nearly double what we budgeted. The platform didn't get twice as useful."

Billing Problems HIGH Source: G2 · Mar 14, 2025 Added 8d ago

Opaque Pricing Leaves Buyers Blindsided After Signing Contracts

Vanta publishes no public pricing tiers, forcing prospects through a sales call before learning that annual contracts typically run $7,000–$30,000+ depending on integrations and employee count. Multiple G2 and Capterra reviewers noted that add-on features — including additional frameworks like ISO 27001 or HIPAA on top of SOC 2 — carry separate license fees that weren't surfaced until renewal negotiations. The discovery that the auditor still charges $15,000–$40,000 on top of the platform fee catches first-time buyers off guard.

"We signed thinking Vanta was an all-in-one cost. Turns out the auditor was a completely separate bill, and adding HIPAA to our existing plan nearly doubled our annual spend."

Misleading Marketing HIGH Source: Hacker News · Jan 15, 2024 Added 8d ago

Automated Compliance Claims Obscure Substantial Manual Work Still Required

Vanta markets its platform as 'automated security and compliance,' but engineers at multiple companies have reported on Hacker News and Reddit that the automation handles evidence collection, not remediation — meaning teams still spend weeks writing policies, closing control gaps, and responding to auditor questions manually. The disconnect between 'weeks not months' marketing language and actual timelines of 3–6 months to first report is a recurring complaint across review platforms. For companies with complex AWS or multi-cloud stacks, the number of controls that require manual evidence uploads regularly surprises buyers.

"Their marketing implies you plug it in and get a certificate. What you actually get is a dashboard that tells you how much work you still have to do yourself."

Billing Problems MEDIUM Source: Capterra · Nov 8, 2024 Added 8d ago

Auto-Renewal Clauses Trap Customers Who Deprioritized Compliance Work

Several Capterra and G2 reviewers flagged that Vanta's annual contracts include auto-renewal clauses with 60–90 day cancellation notice windows. Startups that paused their SOC 2 efforts mid-year — often because a key compliance hire left or fundraising priorities shifted — found themselves locked into a second year at full price. One recurring complaint pattern involves companies that completed their audit in year one but wanted to downgrade to a lower-tier monitoring plan and were told no mid-cycle changes were permitted.

"We finished our audit, didn't need the full platform for another year, and missed the cancellation window by three weeks. They wouldn't prorate anything."

Misleading Marketing MEDIUM Source: Reddit Added 3mo ago

Marketing implies faster compliance than the audit timeline permits

Vanta has promoted getting SOC 2 'in weeks' — which applies to evidence collection setup, not the full audit. The audit itself (choosing an auditor, scheduling, fieldwork, report) takes 3–6 months regardless of how fast Vanta collects evidence.

Billing Problems MEDIUM Source: G2 Added 3mo ago

Annual contract pricing increases at renewal with limited negotiation

Multiple companies describe Vanta renewals coming in 20–40% higher than the initial contract, with limited room to negotiate given the cost of migrating compliance evidence history to a competitor.

Our AI scanner searches Reddit, Trustpilot, BBB, and news sources for fresh complaints from the past year, paraphrases what it finds, and adds anything new to this page. Takes up to 90 seconds.

Everything else worth knowing

For the full record — lawsuits, churn signals, support failures, and BBB filings — see the complete complaints page.