Connect your own Vanta organization (OAuth2 Client Credentials) to monitor compliance Tests/Controls/Frameworks, manage the Risk Register and Vendor risk inventory, review Policy documents and Pers...
What this app can do
26 tools registered
Connect VantaFree
Connect a Vanta organization via OAuth2 Client Credentials (API application), after verifying connectivity.
Disconnect VantaFree
Disconnect a Vanta organization: deletes only the saved credentials. Nothing in Vanta itself is changed.
List ConnectionsFree
List the connected Vanta organizations.
List Tests8 tok
List automated compliance Tests (control checks) with their status (OK/FAIL/DISABLED/OUTDATED/NOT_APPLICABLE).
Get Test8 tok
Read one compliance Test in full by id.
Dismiss Test16 tok
Dismiss a failing Test with a documented reason -- records an explicit exception/justification in Vanta rather than silently ignoring the failure.
List Controls8 tok
List Controls (named requirements mapped to one or more frameworks, each backed by 1+ Tests).
Get Control8 tok
Read one Control in full by id.
List Frameworks8 tok
List compliance Frameworks enabled on the connected organization (SOC 2, ISO 27001, HIPAA, etc.).
List Risks8 tok
List Risk Register entries.
Get Risk8 tok
Read one Risk Register entry in full by id.
Create Risk16 tok
Create a new Risk Register entry.
Update Risk16 tok
Update selected fields of an existing Risk Register entry (status, treatment plan). Only given fields change.
List Risk Scenarios8 tok
List Risk Scenarios (the named risk categories Risk Register entries can be tied to).
List Vendors8 tok
List Vendor risk inventory (third-party risk management) entries.
Get Vendor8 tok
Read one Vendor risk record in full by id.
Create Vendor16 tok
Register a new Vendor for risk tracking.
Update Vendor16 tok
Update selected fields of an existing Vendor (risk tier, review status). Only given fields change.
List Documents8 tok
List Policy Documents tracked in Vanta (with review status/dates).
Get Document8 tok
Read one Policy Document in full by id.
List People8 tok
List Personnel records with security-training and offboarding compliance status.
Get Person8 tok
Read one Personnel record in full by id.
List Integrations8 tok
List connected data-source Integrations (cloud/IdP/HR/ticketing) Vanta pulls evidence from, with their sync status.
List Groups8 tok
List Groups (Vanta's grouping of resources/people for scoping tests).
List Monitored Computers8 tok
List employee computers Vanta monitors for device-compliance (disk encryption, screen lock, AV, OS updates).
Audit Compliance Posture40 tok
Build one aggregated audit-readiness health report: failing tests, overdue risks, overdue vendor reviews, and documents past their review date.