Vanta

Vanta is a trust management platform that automates security and compliance for frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It continuously monitors your infrastructure, people, and vendors through automated tests, and centralizes the evidence auditors need.

With the Vanta integration in Sim, you can:

• Monitor compliance posture: List frameworks with control, document, and test completion counts, and drill into individual controls and their mapped tests and evidence documents.
• Triage failing tests: List automated compliance tests by status, framework, integration, or category, and pull the exact failing resource entities that need remediation.
• Manage evidence documents: List and inspect evidence documents, upload evidence files with descriptions and effective dates, download previously uploaded files, and submit document collections for auditor review.
• Track people and security tasks: List people with employment status, group membership, and outstanding security tasks (trainings, policy acceptance, background checks, device monitoring).
• Review policies and vendors: Check policy approval status and versions, and track vendors with risk levels, contract dates, and security review schedules.
• Stay on top of vulnerabilities: List vulnerabilities with severity and SLA deadline filters, review remediation history, and inspect the vulnerable assets behind each finding.
• Watch device compliance: List monitored computers with screenlock, disk encryption, password manager, and antivirus check outcomes.
• Manage risk scenarios: Query risk register scenarios with likelihood/impact scores, treatment decisions, and review status.

The integration authenticates with Vanta OAuth client credentials (created under Settings → Developer Console in Vanta) and supports both the commercial (api.vanta.com) and FedRAMP (api.vanta-gov.com) environments. Evidence uploads require credentials granted the vanta-api.documents:upload scope.

Usage Instructions

Integrate Vanta into the workflow. Monitor compliance frameworks, controls, and automated tests; find failing test entities; manage evidence documents including file upload, download, and submission; and track people, policies, vendors, monitored computers, vulnerabilities, and risk scenarios. Requires Vanta OAuth client credentials.

Actions

vanta_list_frameworks

List the compliance frameworks (e.g., SOC 2, ISO 27001) available in a Vanta account with completion counts

Input

Output

vanta_get_framework

Get a Vanta compliance framework by ID, including its requirement categories and mapped controls

Input

Output

vanta_list_framework_controls

List the controls that belong to a specific Vanta compliance framework

Input

Output

vanta_list_controls

List the security controls in a Vanta account, optionally filtered by framework

Input

Output

vanta_get_control

Get a Vanta security control by ID, including its status and evidence pass/fail counts

Input

Output

vanta_list_control_tests

List the automated tests mapped to a specific Vanta control

Input

Output

vanta_list_control_documents

List the evidence documents mapped to a specific Vanta control

Input

Output

vanta_list_tests

List the automated compliance tests in a Vanta account, with filters for status, framework, integration, control, owner, and category

Input

Output

vanta_get_test

Get a Vanta automated compliance test by ID, including its status and remediation info

Input

Output

vanta_list_test_entities

List the failing or deactivated resource entities for a specific Vanta test, useful for finding exactly which resources need remediation

Input

Output

vanta_list_documents

List the evidence documents in a Vanta account, optionally filtered by framework or document status

Input

Output

vanta_get_document

Get a Vanta evidence document by ID, including its renewal schedule and deactivation status

Input

Output

vanta_list_document_uploads

List the files uploaded to a specific Vanta evidence document

Input

Output

vanta_upload_document_file

Upload an evidence file to a Vanta document. Requires credentials with the vanta-api.documents:upload scope.

Input

Output

vanta_download_document_file

Download a file previously uploaded to a Vanta evidence document and store it in execution files

Input

Output

vanta_submit_document

Submit a Vanta document collection for review so uploaded evidence becomes visible to auditors. Requires credentials with write access.

Input

Output

vanta_list_people

List the people tracked in a Vanta account with employment status, group membership, and security task completion

Input

Output

vanta_get_person

Get a person tracked in Vanta by ID, including employment, leave, and security task status

Input

Output

vanta_list_policies

List the security policies in a Vanta account with approval status and version info

Input

Output

vanta_get_policy

Get a Vanta security policy by ID, including its approval status and latest approved version documents

Input

Output

vanta_list_vendors

List the vendors tracked in a Vanta account with risk levels, contract dates, and security review schedules

Input

Output

vanta_get_vendor

Get a Vanta vendor by ID, including risk levels, contract details, and authentication info

Input

Output

vanta_list_monitored_computers

List the monitored computers in a Vanta account with screenlock, disk encryption, password manager, and antivirus check outcomes

Input

Output

vanta_list_vulnerabilities

List the vulnerabilities detected across a Vanta account with filters for severity, fixability, SLA deadlines, package, and integration

Input

Output

vanta_list_vulnerability_remediations

List remediated vulnerabilities in a Vanta account with detection, SLA deadline, and remediation dates

Input

Output

vanta_list_vulnerable_assets

List the assets associated with vulnerabilities in a Vanta account (servers, repositories, workstations, and more)

Input

Output

vanta_get_vulnerable_asset

Get a vulnerable asset in Vanta by ID, including the scanners reporting it and per-scanner asset details

Input

Output

vanta_list_risk_scenarios

List the risk scenarios in a Vanta risk register with likelihood/impact scores, treatment decisions, and review status

Input

Output

vanta_get_risk_scenario

Get a Vanta risk scenario by ID, including its scores, treatment decision, and review status

Input

Output