https://cybertoolchain.io/tools/vanta New releases and features in Vanta, tracked by The Cyber Toolchain. en Sun, 01 Nov 2026 07:53:34 GMT https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Sun, 01 Nov 2026 07:53:34 GMT API surface changed: +11 endpoints, 8 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new endpoints `DELETE /vendors/{parentVendorId}/engagement-relationship/{engagementVendorId}` and `PUT /vendors/{parentVendorId}/engagement-relationship/{engagementVendorId}`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new task requirement set endpoints: `GET /groups/{groupId}/task-requirement-set`, `GET /task-requirement-sets`, `GET /task-requirement-sets/custom-requirements`, `GET /task-requirement-sets/{requirementSetId}`, `PATCH /task-requirement-sets/custom-requirements/{customRequirementId}`, `PATCH /task-requirement-sets/{requirementSetId}/details`, `PATCH /task-requirement-sets/{requirementSetId}/requirements`, `POST /task-requirement-sets`, and `POST /task-requirement-sets/custom-requirements`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Wed, 28 Oct 2026 07:59:45 GMT API surface changed: +2 endpoints, 10 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint POST /frameworks/{frameworkId}/reactivate⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint POST /frameworks/{frameworkId}/snooze Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Sat, 24 Oct 2026 08:04:17 GMT API surface changed: +6 endpoints, 3 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /vendor-categories/{categoryId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /vendor-categories • New endpoint GET /vendor-categories/{categoryId} • New endpoint PATCH /vendor-categories/{categoryId} • New endpoint POST /vendor-categories • New endpoint PUT /frameworks/{frameworkId}/variants • GET /frameworks: param includeProgress (query) added; param purchasedOnly (query) added • GET /frameworks/{frameworkId}: param includeRequirements (query) added; param requirementsScope (query) added; param variants (query) added Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Thu, 15 Oct 2026 07:55:22 GMT API surface changed: +13 endpoints, 7 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /frameworks/{frameworkId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new endpoints for managing risk-scenario mappings: `DELETE /risk-scenarios/{riskScenarioId}/mappings/accounts`, `DELETE /risk-scenarios/{riskScenarioId}/mappings/custom-assets`, `DELETE /risk-scenarios/{riskScenarioId}/mappings/integrations`, `DELETE /risk-scenarios/{riskScenarioId}/mappings/issues`, `GET /risk-scenarios/{riskScenarioId}/mappings/accounts`, `GET /risk-scenarios/{riskScenarioId}/mappings/custom-assets`, `GET /risk-scenarios/{riskScenarioId}/mappings/integrations`, `GET /risk-scenarios/{riskScenarioId}/mappings/issues`, `POST /risk-scenarios/{riskScenarioId}/mappings/accounts`, `POST /risk-scenarios/{riskScenarioId}/mappings/custom-assets`, `POST /risk-scenarios/{riskScenarioId}/mappings/integrations`, and `POST /risk-scenarios/{riskScenarioId}/mappings/issues`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Sun, 11 Oct 2026 10:00:36 GMT API surface changed: +3 endpoints, 2 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /groups/{groupId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /custom-assets • New endpoint GET /risk-scenarios/{riskScenarioId}/mappings/enterprise-risk • GET /frameworks: param includeStatus (query) added • GET /frameworks/{frameworkId}: param includeStatus (query) added Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Fri, 25 Sep 2026 13:19:31 GMT API surface changed: +4 endpoints, 8 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /business-units⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /business-units/{businessUnitId} • New endpoint GET /program-scopes • New endpoint GET /program-scopes/{programScopeId} Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Mon, 14 Sep 2026 14:36:37 GMT Vanta: New endpoint GET /personnel-notification-settings⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint PATCH /personnel-notification-settings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Sun, 13 Sep 2026 14:45:55 GMT API surface changed: +3 endpoints, 14 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint PATCH /groups/{groupId} Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Fri, 11 Sep 2026 14:44:25 GMT Vanta: New endpoint GET /personnel-notification-settings⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint PATCH /personnel-notification-settings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Thu, 10 Sep 2026 14:44:40 GMT API surface changed: +1 endpoint⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint PATCH /groups/{groupId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Fri, 04 Sep 2026 07:46:48 GMT API surface changed: 9 modified • GET /controls/controls-library: response schema changed • GET /controls/deactivated-controls: response schema changed • GET /customer-trust/questionnaires/{questionnaireId}: response schema changed • GET /trust-centers/{slugId}/compliance-frameworks: response schema changed • PATCH /customer-trust/questionnaires/{questionnaireId}: response schema changed • POST /customer-trust/questionnaires/file: response schema changed • POST /customer-trust/questionnaires/website: response schema changed • POST /customer-trust/questionnaires/{questionnaireId}/approve: response schema changed • POST /customer-trust/questionnaires/{questionnaireId}/complete: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Fri, 28 Aug 2026 19:43:09 GMT API surface changed: +9 endpoints, 10 modified • New endpoint DELETE /customer-trust/tag-categories/{tagCategoryId}/product-contexts/{productContextId} • New endpoint GET /customer-trust/questionnaires/{questionnaireId}/responses • New endpoint GET /customer-trust/questionnaires/{questionnaireId}/responses/{responseId} • New endpoint GET /groups/importable-idp-groups • New endpoint PATCH /customer-trust/questionnaires/{questionnaireId}/responses/{responseId} • New endpoint PATCH /customer-trust/questionnaires/{questionnaireId}/responses/{responseId}/owner • New endpoint POST /customer-trust/tag-categories/{tagCategoryId}/product-contexts • New endpoint POST /groups • New endpoint POST /groups/import-from-idp • GET /customer-trust/questionnaires/{questionnaireId}: response schema changed • GET /groups: response schema changed • GET /groups/{groupId}: response schema changed • PATCH /customer-trust/questionnaires/{questionnaireId}: response schema changed • PATCH /trust-centers/{slugId}/compliance-frameworks/{frameworkId}: request body changed • POST /customer-trust/questionnaires/file: response schema changed • POST /customer-trust/questionnaires/website: response schema changed • POST /customer-trust/questionnaires/{questionnaireId}/approve: response schema changed • POST /customer-trust/questionnaires/{questionnaireId}/complete: response schema changed • POST /trust-centers/{slugId}/compliance-frameworks: request body changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Sat, 08 Aug 2026 05:15:48 GMT API surface changed: 11 modified • GET /trust-centers/{slugId}: response schema changed • GET /trust-centers/{slugId}/control-categories: response schema changed • GET /trust-centers/{slugId}/control-categories/{categoryId}: response schema changed • GET /trust-centers/{slugId}/controls/{controlId}: response schema changed • PATCH /trust-centers/{slugId}: request body changed; response schema changed • PATCH /trust-centers/{slugId}/control-categories/{categoryId}: request body changed; response schema changed • PATCH /trust-centers/{slugId}/control-categories/{categoryId}/controls: response schema changed • POST /trust-centers/{slugId}/control-categories: response schema changed • POST /trust-centers/{slugId}/controls: response schema changed • PUT /trust-centers/{slugId}/control-categories/order: response schema changed • PUT /trust-centers/{slugId}/control-categories/{categoryId}/controls/order: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://developer.vanta.com/reference/manage-vanta.json https://developer.vanta.com/reference/manage-vanta.json Tue, 04 Aug 2026 11:15:35 GMT API surface changed: 1 deprecated Breaking changes: • Deprecated endpoint GET /controls/controls-library (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://play.goconsensus.com/ebcd6b55-394b-4e5f-9f51-10872c72ae91?preview=sales https://play.goconsensus.com/ebcd6b55-394b-4e5f-9f51-10872c72ae91?preview=sales Sat, 11 Jul 2026 10:03:49 GMT Vanta June 2026 adds audit commenting, MCP expansion, AIUC-1 pilot, CrowdStrike CSPM, Twilio integration, and 20 new privacy MCP tools. • Adds threaded, @mention-enabled commenting on individual controls directly within a Vanta audit, replacing out-of-band email and Slack threads. • Enables one-click export of the full controls table from within a Vanta audit for direct use in audit reports. • Expands Vanta MCP connectivity to any MCP-capable tool (not just officially supported ones), with a warning banner when the redirect URL is outside Vanta-controlled origins. • Adds 20 new privacy MCP tools covering data inventory and privacy assessments, enabling agentic automation of privacy program tasks. • Introduces early-access pilot for AIUC-1, the new security standard for AI agents, available at no cost during the preview period. • Adds Azure DevOps multi-tenant support, allowing multiple Azure DevOps organizations to be connected and managed under a single Vanta domain. • New Twilio integration (OAuth-based) automatically imports active Twilio users for access reviews and audit-ready evidence, with AI-summarized activity log. • Adds CrowdStrike CSPM ingestion into Vanta Security Alerts for SLA tracking and audit evidence, plus multi-tenant CrowdStrike support. • Adds optional reason field when deactivating controls (individually or in bulk), surfaced in a new Deactivation Reason column and control history. • Upgrades AI evidence evaluation model to Gemini 3.5 Flash, delivering a 10% latency improvement and 5% higher evidence pass rate. • SOC 2 Guide users can now have the Vanta Agent automatically generate a Trust Center and Letter of Engagement pre-filled with key details within their first days. • Unmanaged auto-renewal users can now preview a full line-item bill breakdown on the billing page before renewal processes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://play.goconsensus.com/ebcd6b55-394b-4e5f-9f51-10872c72ae91?preview=sales https://play.goconsensus.com/ebcd6b55-394b-4e5f-9f51-10872c72ae91?preview=sales Wed, 01 Jul 2026 00:00:00 GMT Vanta July 2026 adds internal auditor roles, control assessments, Dropbox deprovisioning, MCP support, and 8 more capabilities. • Adds version-specific policy selection when attaching policies as evidence to information requests, giving auditors precise control over which policy version is submitted. • Enables auditors to formally assess controls directly in Vanta for internal and external IRL audits, with framework-specific statuses (Conforming/Non-conformity for ISO; Satisfied/Not Satisfied for FedRAMP) and required justification comments. • Introduces an Internal Auditor Role, allowing an internal employee to be designated as auditor on an internal audit engagement with a scoped IRL, request tracker, and population views without requiring an external audit firm. • Adds Custom Commitment Types for Customer Commitments, letting users define their own contract commitment types with a name, definition, and example clauses — Vanta automatically extracts them from future and previously uploaded contracts. • Enables the Vanta Agent to assign control owners inline during agentic Control Program Onboarding, with validation of missing descriptions, ineligible owners, and ambiguous entries before bulk-review commit. • Adds GA support for automatic Dropbox account deprovisioning during personnel offboarding, removing departing employees from their Dropbox team account, synced devices, and Paper documents. • Supports duplicating existing IRL audits to carry forward request lists, control mappings, and configuration into the next audit cycle, with automatic fresh evidence attachment. • Adds the official SIG Lite questionnaire as a fifth out-of-the-box TPRM template, licensed by Vanta, with AI answer generation, vendor Exchange flow, and standing-answer reuse. • Introduces MCP support for Customer Commitments, enabling natural-language queries from Claude, Copilot, Airtable, and other MCP-compatible AI tools, and programmatic access to commitments data. • Adds '/' skill shortcuts in the Vanta Agent (Proof of Concept), with preset commands /triage-issues, /evaluate-evidence, and /explore-capabilities to steer the Agent toward specific compliance tasks. • Supports uploading multiple audit reports per audit engagement, removing the previous single-report limitation for multi-framework scenarios. • Enables bulk auditor assignment for audit engagements, allowing multiple auditors to be added at once instead of one at a time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_666c082d2f https://help.vanta.com/en/articles/11345422-product-updates#h_666c082d2f Sun, 28 Jun 2026 00:00:00 GMT TPRM questionnaire builder adds select types and evidence; SOC 2 Guide gains Cloud module and Agent-led policy workflow; performance boost for vulnerabilities. • Adds single-select and multi-select question types to the TPRM Questionnaire Builder for richer vendor assessments • Enables attachment of multiple follow-up questions to a single answer using conditional logic in TPRM questionnaires • Allows vendors to attach evidence directly to individual questions within the TPRM questionnaire builder • Supports import of questionnaires from spreadsheets including select questions and sections in TPRM • Adds Agent support for querying Customer Commitments data against GRC program data with natural language • Enables notifications via email, Slack, and Teams for new vendor incidents, weekly digests, and external attack surface alerts in TPRM • Allows Trust Center preview, review, edit, publish, and go-live actions directly from the Vanta Agent instead of the dedicated Trust Center page • Generates assessment shells only for a vendor's tier and risk score in TPRM Assessment Quality • Adds ability to set due dates and owners on scheduled assessments upfront in TPRM • Automatically assigns default owners inherited from assessment rules in TPRM • Allows safe deletion of assessment types with full visibility into in-progress assessments in TPRM • Introduces a new Assessment Types API for programmatic differentiation in TPRM • Provides an Agent-led workflow to guide users through reviewing and approving all 15 required SOC 2 policies end-to-end with pre-generated drafts and progress tracking • Adds a new SOC 2 Guide Module: Cloud that generates compliance plans, connects cloud integrations via the Agent, groups tests for batch remediation, and tailors instructions • Implements approximately 80% improvement in Findings by Vulnerability page load times (from ~5.2s to ~1.0s at p99) and elimination of API timeout spikes causing 5xx errors • Reduces Reopen Vulnerabilities processing from 1,000 MongoDB operations to 50 for faster performance Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_6d258b8ade https://help.vanta.com/en/articles/11345422-product-updates#h_6d258b8ade Sun, 21 Jun 2026 00:00:00 GMT New Vanta MCP tools for privacy and API endpoints for risk-control linking; new audit export and agent onboarding. • Adds `GET` and `POST` REST API endpoints to manage risk-to-control link relationships • Adds Privacy Read and Write MCP Tools (20 new tools) via MCP for managing privacy data inventory • Enables exporting the full controls table directly from within a Vanta audit • Adds multi-tenant support for Azure DevOps and CrowdStrike CSPM integrations • Adds `Deactivation Reason` column on deactivated controls page • Adds optional reason input when deactivating controls individually or in bulk Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_ea03ffc99c https://help.vanta.com/en/articles/11345422-product-updates#h_ea03ffc99c Sun, 14 Jun 2026 00:00:00 GMT Vanta adds TPRM commenting, Agent-driven vendor guides, and in-app framework purchases. • Adds internal and external commenting on individual TPRM questionnaire items • Enables the Vanta Agent to suggest controls for risk scenarios via natural language • Delivers proactive notifications for new domain tests and test owner alerts via email or Slack/Teams • Introduces an Agentic SOC 2 Guide module for vendor management setup and documentation analysis • Allows customization of risk scoring scales at the individual register level with a heatmap grid view • Moves the Vanta Agent interface into a slide-in panel that sits alongside page content • Supports creating, renaming, updating, and deleting risk registers via the Vanta Agent or MCP protocol • Enables direct purchase of GDPR, AUE8, CIS v8, and CRI frameworks in-app with user-selectable variants Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_2dd719cb46 https://help.vanta.com/en/articles/11345422-product-updates#h_2dd719cb46 Sun, 07 Jun 2026 00:00:00 GMT Vanta adds Vanta Agent search, privacy processor writes, SIG Lite QAuto template, Splunk on-prem integration • Adds a persistent top-nav entry point for Vanta Agent with Command+K shortcut and rotating prompt suggestions • Enables filtering and sorting framework/certification commitments by structured commitment type across the entire contract base • Extends Vanta Agent agentic write capabilities to the processor side of the Privacy Data Inventory (create, update, delete processing categories and data controllers) • Allows mapping requests directly to controls during IRL upload with real-time Control ID validation against Vanta • Adds a SIG Lite questionnaire template in QAuto as the new default starter or via Import modal • Links existing controls to risks from a new risk context section on the risk detail page • Allows creation of custom assessment templates (free text, single/multi-choice) for Privacy assessments • Adds Splunk Enterprise (on-prem) integration via the new Integration Builder platform Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_587fc0336d https://help.vanta.com/en/articles/11345422-product-updates#h_587fc0336d Sun, 31 May 2026 00:00:00 GMT Vanta adds per-risk access management, MCP tools for data reading, and Trust Center AWS Marketplace integration. • Adds ability to delete files from risk tasks by showing file names instead of just a count • Trust Center: AWS Marketplace Integration allows featuring Trust Center on AWS Marketplace listings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_399d847b71 https://help.vanta.com/en/articles/11345422-product-updates#h_399d847b71 Sun, 24 May 2026 00:00:00 GMT Vanta introduces Agent-driven SOC 2 onboarding, native billing, Wiz integration, and sandboxed agent analysis. • Adds a guided Agentic SOC 2 setup flow for startups in the 'SOC 2 Guide' package that generates tailored compliance plans via the Vanta Agent • Adds a new in-app native billing page that replaces the previous Stripe redirect and serves invoices directly from Netsuite • Ingests Wiz configuration findings as SLA-trackable security findings for Professional and Enterprise (Modular) users • Enables admins to customize personnel reminder emails using template variables and send them from a verified company domain instead of Vanta's default • Adds bulk edit and delete capabilities with a permanent table view for Privacy Data Inventory items • Allows collaboration with the Vanta Agent to create, update, and delete processing activities in the Privacy Data Inventory with multi-field updates • Supports 10% rollout of Vanta Agent Sandbox to run bash commands, execute Python scripts, and export files for large file/dataset analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_c5dee73d94 https://help.vanta.com/en/articles/11345422-product-updates#h_c5dee73d94 Sun, 17 May 2026 00:00:00 GMT New Sharepoint contract integration, BU-scoped reports, flexible user provisioning options, and a Personnel Setup Wizard. • Adds `Sharepoint` as a configurable contract source in the Commitments settings page for automated inventory population • Enables Program Segment lens on the Program Overview report to scope Framework Progress, Test Remediation chart, and Audits widgets to a specific BU Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_5f75f5a1cd https://help.vanta.com/en/articles/11345422-product-updates#h_5f75f5a1cd Sun, 10 May 2026 00:00:00 GMT Vanta adds Knowledge Base API for Answer Library management and several UI-driven compliance features • Adds `Knowledge Base API` with LIST endpoints allowing programmatic CRUD of Answer Library entries • Trust Center admins can now fulfill GDPR Article 17 erasure requests directly from Settings by entering a viewer's email to trigger an automated workflow that anonymizes their PII • Users are now immediately notified via email when a monitored vendor experiences a confirmed or suspected security breach, and can view a structured incident detail page showing confirmation status, severity, data breach status, a summary of what happened, source evidence links, and a basic incident timeline all in one place • Users now receive an AI-generated recommendation (Approve, Deny, or Needs Review) for every account at the start of an access review, each surfaced with the signals behind it such as employment status, last login, and prior decisions • Users can map Trust Center tag values directly to Salesforce fields so that when a customer requests access, the right documents are automatically delivered based on their Salesforce data • Users setting up Commitments for the first time are now guided through a four-step onboarding flow with a welcome modal, a persistent progress banner, and Chameleon-powered tours pointing to the exact UI needed at each step • Users can export test data in bulk from the Tests page via CSV, with a configuration modal that gives them control over exactly what gets included in the export • Users on VantaGov now have access to all reports including the Issues Report, powered by the same Snowflake-based reporting data pipeline available in Vanta's commercial product • Users on CMMC Level 2 can track their Supplier Performance Risk System (SPRS) Score directly in Vanta via a new reporting widget that updates as they make progress on controls • Users managing compliance across multiple Business Units can now access a single My Program home page that provides cross-BU and cross-framework visibility into their entire compliance program • Users on NIST 800-53, NIST 800-171, FedRAMP Rev 5, and CMMC frameworks can capture three additional fields per control including control type, implementation status, and implementation details • Users running vendor assessments in TPRM can request access to private documents from Safebase, Secureframe, and Conveyor trust centers directly within an assessment using a computer use agent Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_6f66c232fd https://help.vanta.com/en/articles/11345422-product-updates#h_6f66c232fd Sun, 03 May 2026 00:00:00 GMT Vanta adds Event Logs API, Akamai integration, Jira doc automation, and issue snapshots. • Adds the `Event Logs API` for continuous fetching of Vanta event logs to detect suspicious user behavior and ingest activity into SIEMs • Adds Akamai Domain Protection integration to monitor managed domains, proxy status, and WAF/bot/DDoS configuration with automated tests • Adds automated Jira ticket creation for Documents (Beta) to automatically create Jira issues when evidence is needed • Adds Issue Snapshots with Audit Integration to take point-in-time snapshots of filtered issues for auditors • Adds support for mapping spreadsheet columns to tag categories during Answer Library imports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_aeeb780a6f https://help.vanta.com/en/articles/11345422-product-updates#h_aeeb780a6f Sun, 26 Apr 2026 00:00:00 GMT Vanta adds IRL GA, Standard Commitments AI, ISO 22301 framework, OSCAL export, and Vanta Agent search.4 • Adds ability to upload auditor's Information Request List (IRL) for unified audit workflows. • Adds automatic identification of non-standard commitments in customer contracts via AI analysis of standard papers. • Adds one-click persistent quick views on the People page to filter personnel by actionable states. • Adds custom structured metadata fields to Issues for enterprise tracking needs. • Adds ISO 22301 as a new out-of-the-box compliance framework. • Adds Vanta Agent access via top navigation search bar with rotating prompt suggestions. • Adds team ownership for controls with configurable Slack channel alerts. • Updates TPRM Assessment Evidence Status to distinguish fulfilled requests from total required. • Implements partial materialization refresh on the Tests page to update assignments faster. • Adds OSCAL export capability for FedRAMP R5, NIST 800-53, and CMMC frameworks. • Introduces Vanta Control Framework (Private Preview) as a unified view of overlapping compliance commitments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_96374bf5be https://help.vanta.com/en/articles/11345422-product-updates#h_96374bf5be Sun, 19 Apr 2026 00:00:00 GMT New Vanta capabilities: Outbound Webhooks, DPIA AI drafts, custom doc renewal dates, and processor-side ROPA tracking. • Adds `GA Outbound Webhooks` for real-time notifications on vendor creation, Trust Center access requests, and questionnaire status changes • Introduces `DPIA Generation with Vanta AI` to draft Data Protection Impact Assessments from processing activities and risk scenarios • Enables `Custom Document Renewal Dates` for individual or bulk document updates independent of upload dates • Delivers `SOC 2 Guide in Slack` notifications and policy reminders via the Vanta Agent • Improves `QAuto: Section Context Awareness` by surfacing section headings to AI for more accurate questionnaire answers • Makes `TPRM: Next Review Date` available during vendor import to trigger automated evidence collection workflows • Adds `Asana & ClickUp Ticket Linking + Evidence Sync` to sync task status and attachments from those platforms to Vanta Documents • Introduces `Enforce Policy Review` setting requiring employees to open and review policies before acceptance • Implements `Auto Account Assignment & Creation` to match or create accounts for uploaded contracts via AI • Launches `Agent-led Risk Onboarding` in the SOC 2 Guide to generate personalized risk scenario recommendations • Opens Early Access for `Redesigned Portal Automation in QAuto` using full-page AI scan and agentic navigation • Adds Processor-Side of the Data Inventory (Processor ROPA) by splitting data inventory into 'Data you control' and 'Data you process for others' • Introduces `QAuto: Object-Level Permissions for Questionnaires` for granular access control based on ownership or approver roles Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_cb95b0c8a0 https://help.vanta.com/en/articles/11345422-product-updates#h_cb95b0c8a0 Sun, 12 Apr 2026 00:00:00 GMT Vanta adds public REST API for contract management, remote MCP server beta, and agent image/PDF attachments. • Adds `upload`, `read`, and `delete` capabilities to the public REST API for programmatic contract management • Releases Vanta remote MCP Server as a public beta feature for all customers • Enables attaching images and PDFs to Vanta Agent via the paperclip icon • Makes the Controls Page available in IRL audits for viewing in-scope controls and progress tracking Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_ec4bd3884e https://help.vanta.com/en/articles/11345422-product-updates#h_ec4bd3884e Sun, 05 Apr 2026 00:00:00 GMT Vanta adds Personnel, QAuto, Privacy, and spreadsheet questionnaire support to Vanta Agent • Adds Personnel (V2) context to the Vanta Agent for personnel compliance posture queries • Adds expanded Spreadsheet Questionnaire support for TPRM as a first-class in-app experience • Adds `QAuto` context to the Vanta Agent allowing pasting security questionnaire questions for answers from knowledge base and questionnaires • Adds `Privacy` context to the Vanta Agent for privacy product data queries including processors and impact assessments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_27540710a1 https://help.vanta.com/en/articles/11345422-product-updates#h_27540710a1 Sun, 29 Mar 2026 00:00:00 GMT Vanta adds Claude Code plugin for IaC remediation, auto-indexing of public webpages to Knowledge Base with sub-pages, and AI-assisted policy version history. • Adds Vanta Plugin for Claude Code (Private Preview) allowing discovery of failing compliance tests and generation of infrastructure-as-code fixes directly in the code editor via MCP server connection. • Enables 'include sub-pages' option for public webpage indexing to automatically capture content one level deep from a single URL using LLM-based filtering. • Introduces automatic version history for AI-assisted edits in the Policy Editor, saving every edit with summaries and allowing one-click restoration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_12cd3fb526 https://help.vanta.com/en/articles/11345422-product-updates#h_12cd3fb526 Sun, 22 Mar 2026 00:00:00 GMT Vanta streamlines Risk page by moving Risk Snapshots to the '…' menu • Moves `Risk Snapshots` into the “…” menu on the Risk page alongside a link to Risk Settings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_90a380aa3b https://help.vanta.com/en/articles/11345422-product-updates#h_90a380aa3b Sun, 15 Mar 2026 00:00:00 GMT New Splunk access sync integration, ENUM support in custom tests, multiple parallel vendor assessments, and agentic onboarding for small teams. • Adds automatic syncing of user, group, role, and access data from Splunk to enable continuous monitoring of access controls • Adds ENUM data type support in the test builder for creating custom tests with enumerated values • Enables creation of multiple assessment types (e.g., privacy, legal, financial) for TPRM with parallel AI-powered evaluations • Introduces an agentic onboarding experience for 1-10 HC customers including company research, policy creation, and Vanta Agent support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_6d9f4b455b https://help.vanta.com/en/articles/11345422-product-updates#h_6d9f4b455b Sun, 08 Mar 2026 00:00:00 GMT Vanta adds business unit scoping for vendors, structured TPRM questionnaires, and GA Privacy Hub Impact Assessments with Vanta AI suggestions • Adds Business Unit-level vendor scoping to manage different vendor scopes for each audit leading to faster and more complex audit strategies • Adds new sidebar navigation for managing TPRM questionnaire sections (create, rename, duplicate, delete, reorder) in the Privacy Hub • GA of Impact Assessments in the Privacy Hub with Vanta AI DPIA suggestions, approval workflows, and customizable review cadences • GA of TPRM Multiple Assessments Phase 1 allowing different assessment types per vendor, single decisioning, and evergreen exchanges Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_d3a288cf2e https://help.vanta.com/en/articles/11345422-product-updates#h_d3a288cf2e Sun, 01 Mar 2026 00:00:00 GMT Vanta adds Linear ticket linking with evidence sync, Miradore MDM integration, and QAuto agent response approvals. • Adds `Linear` ticket linking to Vanta Documents with automatic attachment syncing for audit evidence • Adds Miradore MDM integration for continuous device inventory sync and posture evaluation against controls • Introduces QAuto (public preview) for optional auto-approval of unflagged agent answers and automated questionnaire completion • Adds privacy impact assessment task tracking in the `My Work` view Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_c8595d244d https://help.vanta.com/en/articles/11345422-product-updates#h_c8595d244d Sun, 22 Feb 2026 00:00:00 GMT Vanta adds SSP generation, Calendly deprovisioning, bulk Trust Center imports, multi-resource custom tests • `GenerateSystemSecurityPlan` integration now supports FedRAMP R5, NIST 800-53, NIST 800-171, CMMC with DOCX/PDF output stored in Vanta Documents • [Open beta] `Calendly.deprovision` action enabled during offboarding workflows • Trust Center UI `show_failing_control_indicators` toggle added to display non-passing controls • QAuto `team_assignment` capability allows assigning teams as approvers with RBAC support • Custom Tests now support `join` logic across two resource types with enum value dropdowns in test authoring Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_0d0ec16482 https://help.vanta.com/en/articles/11345422-product-updates#h_0d0ec16482 Sun, 15 Feb 2026 00:00:00 GMT Vanta adds unified scoping homepage, QAuto auto-approval for spreadsheets, customizable privacy policy acceptance in Trust Center, automated offboarding task assignment, and • Adds a `Unified Scoping` home page for configuring scope across multiple levels including AWS assets by tags, regions, and asset names • Enables QAuto to skip manual review for spreadsheet columns detected with high confidence • Adds toggle and markdown link support in Trust Center access request forms to require and customize privacy policy acceptance • Introduces [Open beta] automated assignment of deprovisioning tasks to system admins during personnel offboarding with auto-verification • Enables inline editing of processing activities in the privacy data inventory overview page drawer view Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_b2edd474be https://help.vanta.com/en/articles/11345422-product-updates#h_b2edd474be Sun, 01 Feb 2026 00:00:00 GMT Vanta QAuto adds bulk questionnaire actions, CTM conflict detection, granular Trust Center access controls, and improved evidence/audit UX • Adds ability to identify and manage conflicting and duplicate content within the Customer Trust Management (CTM) knowledge base • Enables bulk actions across multiple questionnaire questions in QAuto to reduce manual clicks during review • Allows configuration of more granular access settings for Trust Center documents • Improves evidence upload workflow in TPRM reviews with clearer status indicators • Enhances audit issue status visibility within audit workflows Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_bdfd66e6c6 https://help.vanta.com/en/articles/11345422-product-updates#h_bdfd66e6c6 Sun, 25 Jan 2026 00:00:00 GMT Vanta adds Issues reporting, code-changes access for lower tiers, URL evidence, Agent memory/framework overlap drill-down and TPRM intake form. • Adds `/code-changes` page access to Essentials and Plus packages, replacing the old `/changes` experience • Adds `URL Evidence in Issue Management` allowing URLs to be attached directly to issues as evidence • Adds Agent Memory (M1: Create and Use Memory) to store company-specific context for personalized responses • Adds `Framework Evidence Overlap Drill-Down` showing exactly which tests and documents overlap across frameworks • Adds `[GA] TPRM Intake Form` with configurable vendor fields, evidence uploads, magic links, and default risk assignment • Adds Issues report surfaced in UI with trends by severity/status, filters by owner/status/source/audit, and near real-time updates Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_c716fa0425 https://help.vanta.com/en/articles/11345422-product-updates#h_c716fa0425 Sun, 18 Jan 2026 00:00:00 GMT Vanta adds AI Shadow Mode for SOC2 scoping, Jira linking, Agent UX improvements and DPIA history • Enables 'AI Auto Consent & Provisioning Agents (Shadow Mode)' for SOC 2 Studio Pilot users to auto-generate policies from public data without applying changes yet. • Adds approval workflows for impact assessments, allowing users to assign approvers and track status within Vanta. • Makes the Vanta Agent globally available via top navigation with context-aware prompts on any page. • Links existing Jira issues to Vanta documents to improve traceability without creating duplicate tickets. • Expands Personnel Tools for the Vanta Agent to answer questions about task completion, training, and background checks via natural language. • Adds business unit segmentation for tests, enabling views of impacted units, resource counts, and segment-specific remediation. • Introduces versioning and history tracking for Impact Assessments (DPIAs) with draft creation from approved versions and comparison capabilities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_fbe0fe4250 https://help.vanta.com/en/articles/11345422-product-updates#h_fbe0fe4250 Sun, 11 Jan 2026 00:00:00 GMT AI Auto Consent agents in shadow mode, Jira doc linking, Vanta Agent global availability, and scalable product tests. • Adds AI-driven provisioning agents for SOC 2 policy generation (shadow mode) that auto-opt Core and Core Plus domains • Enables linking existing Jira issues directly to Vanta documents for traceability • Makes the Vanta Agent globally available via top navigation with context-aware prompts • Allows assigning approvers and tracking status within the impact assessment workflow • Supports personnel queries for the Vanta Agent including training progress, background checks, and policy acceptance rates • Links impact assessments to processing activities bidirectionally • Redesigns product test infrastructure with paginated processing to support large data volumes Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_4d6f9945d5 https://help.vanta.com/en/articles/11345422-product-updates#h_4d6f9945d5 Sun, 21 Dec 2025 00:00:00 GMT Vanta adds CSV export columns for TPRM answers, experimental Security Assessment Agent, and per-channel Slack auto-reply configuration • CSV exports for TPRM Security Assessments now include 'AI answer', 'Vendor answer', and 'Flagged Findings' columns to improve transparency during reviews Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_e6252e6b40 https://help.vanta.com/en/articles/11345422-product-updates#h_e6252e6b40 Sun, 14 Dec 2025 00:00:00 GMT Vanta adds segment-based asset pages, Kolide MDM integration, privacy data inventory automation, and issue querying via Vanta Agent • `/computers`, `/access`, and `/vulnerabilities` pages now use Business Unit Segments for asset visibility filtering. • Automated Test for Data Inventory in Privacy Frameworks provides continuous monitoring of data inventory state, replacing document-based tests. • Vanta Agent now supports natural language queries for issue metadata (counts, trends, ownership, statuses). • First-party Vanta-built Kolide MDM integration replaces third-party version with device group filtering and multi-OS support. • QAuto Quick-Add feature allows direct addition of questionnaire responses to the Answer Library. Breaking changes: • Draft state for TPRM reviews is removed; simplified status model ('Not Started', 'In Progress', 'Complete') is now in effect. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_5c842bc02d https://help.vanta.com/en/articles/11345422-product-updates#h_5c842bc02d Sun, 07 Dec 2025 00:00:00 GMT Vanta adds agent-driven policy editing, Oracle EU Sovereign Cloud support, and audit creation by segment. • Enables the Vanta Agent to draft, review, and apply policy edits via natural language prompts • Adds support for connecting Oracle OC19 and DRCC cloud environments in Enterprise editions • Allows creating audits by program segment with UI filtering and scope summaries on audit cards Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_3a5dae177d https://help.vanta.com/en/articles/11345422-product-updates#h_3a5dae177d Sun, 30 Nov 2025 00:00:00 GMT Vanta adds custom notes to personnel records, datetime support for custom tests, and GA data inventory/ROPA management in Privacy Frameworks • Adds a new 'Custom Note' field to personnel records for storing internal context like employment status or test user details. • Enables `datetime` data type values when writing custom tests, allowing verification of time-sensitive controls and SLA timelines. • Promotes Data Inventory and ROPA Management within Privacy Frameworks to General Availability (GA), enabling import/export capabilities directly in the tool. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_1f0e9643f0 https://help.vanta.com/en/articles/11345422-product-updates#h_1f0e9643f0 Sun, 16 Nov 2025 00:00:00 GMT Per-business unit scope tracking, manual offboarding accounts via Access Requests, object-level policy approvers, and Privacy ROPA XLSX export. • `Business Units Scope Overview` lets users see changes to scope on a per-business unit basis for streamlined scope changes and updated metrics. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_0814e4dbd9 https://help.vanta.com/en/articles/11345422-product-updates#h_0814e4dbd9 Sun, 09 Nov 2025 00:00:00 GMT Vanta introduces Agent-generated policies, TPRM unified view, Slack Trust Center approvals, QAuto digests, and custom test author visibility. • `TPRM Navigation` merges Discovery, Procurement, and Managed Vendors into a unified view with Continuous Monitoring • Approve or deny Trust Center access requests directly in Slack via one-click actions • Vanta Agent generates editable custom policies from natural language prompts • QAuto sends daily reminder digests to questionnaire owners and approvers when due dates approach or pass • Custom test details view shows the author name for newly created tests Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_873b3aaecb https://help.vanta.com/en/articles/11345422-product-updates#h_873b3aaecb Sun, 02 Nov 2025 00:00:00 GMT New GCP connector with automated setup, Slack CTM bot, Modular Enterprise package, and HRIS leave/email sync. • Adds a new Google Cloud Platform (GCP) connector with a streamlined flow and smart defaults for faster onboarding • Introduces a `Cloud Shell` script to automate policy and role setup for the GCP integration • Enables asking security and compliance questions directly in Slack via the CTM knowledge base • Launches the new Modular Enterprise package replacing Scale and previous Enterprise GRC packages • Adds automatic pull of leave data and personal email addresses from HRIS integrations (Bob, Personio, PayFit, Employment Hero, Rippling, Trinet) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_a00cd63881 https://help.vanta.com/en/articles/11345422-product-updates#h_a00cd63881 Sun, 26 Oct 2025 00:00:00 GMT Vanta adds non-admin custom test creation, Agent framework context, CTM account-level tracking, simplified GitHub connection, and Bedrock model inventory. • Adds ability for users with 'View and edit' permissions on 'Tests and Documents' to create custom tests without Admin access • Enables Vanta Agent to use framework and control context in Public Preview for tailored GRC responses • Adds account-level tracking of questionnaires in CTM alongside existing Trust Center access and commitments • Introduces streamlined OAuth flow for GitHub connection to eliminate redundant configuration steps • Improves evidence eval accuracy by reducing false positives in analysis by approximately 50% • Adds Bedrock AI Model Inventory tab with metadata (last use, detection date, usage frequency) and export support for AWS Bedrock users Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_19095c2bbb https://help.vanta.com/en/articles/11345422-product-updates#h_19095c2bbb Sun, 19 Oct 2025 00:00:00 GMT Vanta adds ROPA import, CRI v2.1 framework, Trust Center layout customization, and Cloudflare domain inventory. • Adds ability to import data inventory directly from a ROPA spreadsheet • Introduces Cyber Risk Institute (CRI) Profile v2.1 framework with 319 mapped controls • Enables Trust Center layout customization with drag-and-drop section reordering and visibility toggles via 'Customize layout' • Adds custom fields for processing activities in the Data Inventory and ROPA dashboard • Allows attaching supporting evidence (files or knowledge base links) to QAuto responses, exported in a zip file • Provides access to FedRAMP 20x Low and Moderate frameworks with control inventories and baseline toggling • Enables multi-select filters for Integrations and Controls on the Tests page • Supports customizable policy renewal cadences (quarterly, monthly, every two years) • Displays domain inventory for Cloudflare connections, including proxy and protection status • Adds three new tests for verifying Cloudflare protections Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta https://help.vanta.com/en/articles/11345422-product-updates#h_277e64aefe https://help.vanta.com/en/articles/11345422-product-updates#h_277e64aefe Sun, 12 Oct 2025 00:00:00 GMT Vanta adds Controlled Audit View GA, URL evidence evaluation, Existence Custom Tests, native Issue Management tasks, and direct Jira task creation. • Introduces the `Controlled Audit View` (GA) to limit auditor visibility on population pages and allow setting a default audit view. • Enables automatic evidence evaluation for documents uploaded via URL in Evidence Eval. • Adds `Existence Custom Tests` (formerly Any/All tests) that pass when any entity meets criteria. • Allows creation and management of native tasks directly within Issue Management. • Enables creation of Jira tasks directly from Vanta Issues. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vanta