Vanta is an American software company that provides a platform for automating information security monitoring and compliance management. Its software is intended to facilitate governance, risk, and compliance (GRC) processes by automating tasks that would otherwise be performed manually. Founded in 2018 during a period of high-profile data breaches in the technology industry, Vanta emerged from the Y Combinator startup accelerator program.
In its early years, the company grew with minimal outside investment and operated under a lean business model. Since 2021, it has completed several funding rounds, reaching unicorn status in 2022. In 2023, Vanta introduced artificial intelligence (AI) into its product offerings. In its most recent funding round in 2025, the company was valued at US$4.15 billion.
History
Origins and launch
Vanta was founded in 2018 by Christina Cacioppo and Erik Goldman, both former employees of Dropbox. Cacioppo began her career at Dropbox in 2014 as one of their founding product managers in a team building Dropbox Paper. Goldman worked at Dropbox as a software engineer. Cacioppo conceived the idea for the company while at Dropbox, where she worked on security compliance contracts during the development of Dropbox Paper. In interviews, she described the compliance process as time-consuming and tedious, which informed her view that similar challenges were faced by other companies.
Cacioppo left Dropbox in 2016 and spent the following year studying the market and interviewing information security professionals. Through these interviews, they identified a need for standardized, automated approaches to compliance and security monitoring. In the winter of 2018, they participated in Y Combinator's startup accelerator program and raised US$3 million in seed funding to launch Vanta.
The company was established amid a period of heightened scrutiny following several high-profile data breaches at several technology companies. Vanta's initial project offerings were made to help companies attain System and Organization Controls (SOC 2) compliance, a framework used to evaluate an organization's trustworthiness in handling customer data. Notion was among Vanta's early customers and adopted its compliance and security monitoring products.
In its early years under Cacioppo's leadership, Vanta operated with limited external investment and a lean organizational structure, prioritizing speed to market while controlling expenditures. Its first investments consisted of US$500,000 from Y Combinator and US$3 million in seed funding. Vanta initially developed its product through projects with individual companies, acting more as a consultant, before standardizing the product to serve a broader customer base. During its first two years, the company maintained minimal formal structure, holding no executive or staff meetings, relying on manually written customer emails rather than an automated system, and keeping costs low through practical measures.
Vanta grew through sales, reaching 600 customers without maintaining a company website. To facilitate its product feedback loop, Vanta hired engineers with customer-facing responsibilities. In 2019, Vanta became a sponsor of This Week in Startups, a technology podcast hosted by investor Jason Calacanis. Through the sponsorship, Vanta engaged with other companies, and the podcast served as a key marketing channel for the company. Vanta had five employees at the beginning of 2019 and nearly 45 by 2020. The company was profitable from 2019 through 2021.
Fundraising and growth
In May 2021, Vanta announced a US$50 million Series A funding round led by Sequoia Capital, with participation from existing Y Combinator investors. Sequoia investors noted that part of their interest in investing in Vanta stemmed from the fact that nearly two dozen of their portfolio companies were using Vanta's products. Cacioppo used these companies as references to demonstrate Vanta's market adoption to Sequoia. The company stated that the funding would support product development, expansion of its sales and marketing team, and the opening of a corporate office in New York City. Vanta reported in US$10 million in annual recurring revenue (ARR), a fivefold increase from the previous year.
In June 2022, Vanta announced a US$110 million Series B funding round led by Craft Ventures. Existing investors, including Sequoia Capital and Y Combinator, also invested in the round. The funding helped Vanta achieve unicorn status with a US$1.6 billion valuation. Investors attributed Vanta's growth to several factors, including its lean operational structure and Cacioppo's direct involvement in product development and customer-facing activities. In October 2022, Vanta announced an additional US$40 million raised as part of its Series B funding round, which had been led in June, bringing its total capital raised to US$203 million. The round included participation from cybersecurity company CrowdStrike and several individual investors. In late 2022, Vanta opened its first European corporate office in Ireland to expand its presence in the region in response to Europe's regulatory environment.
In January 2023, Vanta acquired TrustPage, a company based in Royal Oak, Michigan, whose product automated security reviews between vendors and customers. The financial terms of the deal were not disclosed. In May 2023, Vanta was included on CNBC's Disruptor 50 list, which recognizes companies deemed innovative and competitive. In July 2024, Sequoia led a US$150 million Series C funding round in Vanta, bringing the company's valuation to approximately US$2.45 billion. The round also included investments from Craft Ventures and Y Combinator, two large U.S. banks - Goldman Sachs and JPMorgan Chase - and the venture arms of technology companies including CrowdStrike, Atlassian, HubSpot, and Workday. The funding was intended to support the company's artificial intelligence (AI) product roadmap, retire legacy compliance products, and expand its market presence in the UK and Australia.
In June 2025, Vanta was named a leader in an International Data Corporation (IDC) MarketScape report evaluating GRC software vendors. The following month, Vanta closed a US$150 million Series D funding round at a valuation of US$4.15 billion, a 69 percent increase from the previous year. The fundraising was led by Wellington Management and previous investors Sequoia, Goldman Sachs, JPMorgan Chase, and Craft Ventures. With this round, the company had raised a total of US$504 million since 2021. Cacioppo declined to comment on the company's ARR but confirmed that the average transaction size and growth rate had increased. She also stated that none of the US$150 million raised in the previous year had been used.
The company also confirmed the acquisition of Riskey, an Israeli company that developed an AI-based risk monitoring and incident categorization product, for an undisclosed amount.
Products and services
Vanta's core platform automates the collection of evidence for security compliance frameworks such as SOC 2, ISO 27001, and HIPAA. It integrates with cloud services like Amazon Web Services, Microsoft Azure, and Google Cloud to continuously monitor security controls and identify gaps. The platform also provides a customer-facing trust center, which was enhanced through the TrustPage acquisition, allowing companies to share their security posture with prospects and partners.
In 2023, Vanta introduced AI-driven features to streamline compliance workflows. These include automated risk assessments, natural language processing for policy generation, and intelligent alerting for potential security issues. The AI capabilities are built on machine learning models that analyze customer data to provide actionable insights, reducing the manual effort traditionally required in GRC processes.
Market position and impact
Vanta operates in the competitive GRC software market, which includes both established players and newer entrants. Its focus on automation and user experience has differentiated it from legacy solutions. The company's growth has been notable in the mid-market segment, with customers ranging from startups to larger enterprises. Vanta's inclusion in the IDC MarketScape report as a leader in 2025 underscores its influence in the industry.
The company's success is also tied to the broader trend of increasing regulatory scrutiny and the need for organizations to demonstrate robust security practices. By automating compliance, Vanta helps companies reduce the time and cost associated with audits, enabling them to focus on core business activities.
Leadership and culture
Christina Cacioppo serves as CEO, having led the company since its founding. Her background at Dropbox and her hands-on approach have shaped Vanta's culture, which emphasizes efficiency and customer focus. The company has maintained a lean operational model, even as it has scaled, with a strong emphasis on product-led growth. Vanta's engineering team works closely with customers, a practice that has been central to its product development cycle.
As of 2025, Vanta has offices in the United States and Europe, including its New York City headquarters and an Irish office serving the European market. The company continues to expand its global footprint, with plans to grow in the UK and Australia.