TLDR: Vanta has launched new AI-powered features designed to transform security operations from reactive to proactive. These enhancements embed AI across compliance and risk workflows, offering tools like the Vanta AI Agent for policy management, continuous vendor monitoring, and centralized risk oversight. The goal is to provide security teams with unified visibility and control, significantly reducing manual effort and accelerating audit processes.
Vanta, a leading AI-powered trust management platform, has announced a significant expansion of its capabilities, embedding artificial intelligence across core compliance and risk workflows to enable security teams to transition from reactive to proactive risk management. These new features, unveiled on September 9, 2025, aim to provide organizations with a single, unified system for managing security and compliance, addressing the long-standing challenges of fragmented systems and manual processes.
Historically, risk management has been a disjointed effort, with internal issues, vendor reviews, and leadership reporting often residing in separate systems. This fragmentation leads to reactive security postures, where critical risks may go unnoticed until they escalate, impacting audits, delaying deals, and leaving organizations vulnerable. Vanta’s new AI-powered capabilities directly tackle this issue by centralizing risk registers into enterprise rollups, enabling always-on vendor monitoring, and fostering deeper collaboration across teams.
Key among the new offerings is the Vanta AI Agent, which is now integrated across the platform. This agent is designed to guide teams through essential workflows, identify inconsistencies, answer policy-related questions, and automate policy onboarding and evidence verification. This automation is expected to significantly reduce manual work, with some teams reporting savings of up to 12 hours weekly. Furthermore, AI-based Questionnaire Automation can generate over 80% of security questionnaire responses with a 95% acceptance rate, effectively cutting security review times in half.
Jeremy Epling, Chief Product Officer at Vanta, emphasized the transformative impact of these innovations. “Organizations have long struggled with fragmented systems and reactive reviews,” said Epling. “By embedding AI in policy workflows and unifying risk oversight across registers and vendors, we are changing how security teams operate. These capabilities allow leaders to spend less time on manual reporting and more time addressing real risks and strengthening trust with their stakeholders.”
Another crucial aspect is AI-driven policy management. Policies are fundamental to any Governance, Risk, and Compliance (GRC) program, yet their creation and maintenance are often slow and resource-intensive. The Vanta AI Agent streamlines this process by leveraging organizational context to manage policies, ensuring documentation remains current and audit-ready. The platform also supports continuous evidence collection, monitoring, and compliance verification across 30 security and privacy frameworks, including SOC 2, ISO 27001, NIST AI Risk Management Framework, HITRUST, and CIS CSF, through over 350 integrations.
Also Read:
- Visitt Unveils Autonomous AI Agent for Streamlined Certificate of Insurance Management
- Agentra Unveils 14-Day AI Implementation Framework for Rapid Intelligent Automation Deployment
These advancements come as the cybersecurity industry faces significant talent shortages, making automation and AI integration increasingly vital for maintaining robust security postures. Vanta’s commitment to AI innovation has been recognized, with the company recently named to the 2025 Forbes Cloud 100 list. The company also secured $150 million in Series D funding in July 2025, valuing it at $4.15 billion, further fueling its mission to transform trust management in the age of AI. The acquisition of Riskey, which offers real-time risk monitoring solutions, further enhances Vanta’s continuous, AI-driven vendor security review capabilities.
