Vanta is a trust management platform that automates security and compliance for frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It continuously monitors your infrastructure, people, and vendors through automated tests, and centralizes the evidence auditors need.
With the Vanta integration in Sim, you can:
- Monitor compliance posture: List frameworks with control, document, and test completion counts, and drill into individual controls and their mapped tests and evidence documents.
- Triage failing tests: List automated compliance tests by status, framework, integration, or category, and pull the exact failing resource entities that need remediation.
- Manage evidence documents: List and inspect evidence documents, upload evidence files with descriptions and effective dates, download previously uploaded files, and submit document collections for auditor review.
- Track people and security tasks: List people with employment status, group membership, and outstanding security tasks (trainings, policy acceptance, background checks, device monitoring).
- Review policies and vendors: Check policy approval status and versions, and track vendors with risk levels, contract dates, and security review schedules.
- Stay on top of vulnerabilities: List vulnerabilities with severity and SLA deadline filters, review remediation history, and inspect the vulnerable assets behind each finding.
- Watch device compliance: List monitored computers with screenlock, disk encryption, password manager, and antivirus check outcomes.
- Manage risk scenarios: Query risk register scenarios with likelihood/impact scores, treatment decisions, and review status.
Create a Manage Vanta application in Vanta's Developer Console, then add a Vanta credential in Sim with its client ID, client secret, and deployment. Select that saved credential in your Vanta blocks. Sim stores the credentials securely and obtains access tokens automatically; there is no browser authorization redirect or shared Sim OAuth application to configure.
Standard Vanta deployments, including US, EU, and AU tenants, use api.vanta.com; Vanta Gov uses api.vanta-gov.com. Read operations require vanta-api.all:read; submitting documents also requires vanta-api.all:write; evidence uploads require vanta-api.documents:upload. Grant the scopes needed for your workflows when creating the application. See Vanta's authentication documentation.
The first successful connection sets this application's permissions in Sim. Every connection to that application must always use the same permissions, including after tokens expire or credentials are reconnected. Leave permissions blank on reconnect to retain the current choice. To choose different permissions, create a separate Manage Vanta application and connect it in Sim.
If your workflow entered credentials directly on a Vanta block, create and select a saved Vanta credential before running it again. Use a dedicated Vanta application for Sim: Vanta allows one active access token per application, so another client obtaining a new token can invalidate Sim's token.
Use the block
Monitor compliance frameworks, controls, and automated tests; find failing test entities; manage evidence documents including file upload, download, and submission; and track people, policies, vendors, monitored computers, vulnerabilities, and risk scenarios. Select a saved Vanta credential created with your Vanta application client ID and client secret.
Actions
Vanta List Frameworks
List the compliance frameworks (e.g., SOC 2, ISO 27001) available in a Vanta account with completion counts
Vanta Get Framework
Get a Vanta compliance framework by ID, including its requirement categories and mapped controls
Vanta List Framework Controls
List the controls that belong to a specific Vanta compliance framework
Vanta List Controls
List the security controls in a Vanta account, optionally filtered by framework
Vanta Get Control
Get a Vanta security control by ID, including its status and evidence pass/fail counts
Vanta List Control Tests
List the automated tests mapped to a specific Vanta control
Vanta List Control Documents
List the evidence documents mapped to a specific Vanta control
Vanta List Tests
List the automated compliance tests in a Vanta account, with filters for status, framework, integration, control, owner, and category
Vanta Get Test
Get a Vanta automated compliance test by ID, including its status and remediation info
Vanta List Test Entities
List the failing or deactivated resource entities for a specific Vanta test, useful for finding exactly which resources need remediation
Vanta List Documents
List the evidence documents in a Vanta account, optionally filtered by framework or document status
Vanta Get Document
Get a Vanta evidence document by ID, including its renewal schedule and deactivation status
Vanta List Document Uploads
List the files uploaded to a specific Vanta evidence document
Vanta Upload Document File
Upload an evidence file to a Vanta document. Requires credentials with the vanta-api.documents:upload scope.
Vanta Download Document File
Download a file previously uploaded to a Vanta evidence document and store it in execution files
Vanta Submit Document
Submit a Vanta document collection for review so uploaded evidence becomes visible to auditors. Requires credentials with write access.
Vanta List People
List the people tracked in a Vanta account with employment status, group membership, and security task completion
Vanta Get Person
Get a person tracked in Vanta by ID, including employment, leave, and security task status
Vanta List Policies
List the security policies in a Vanta account with approval status and version info
Vanta Get Policy
Get a Vanta security policy by ID, including its approval status and latest approved version documents
Vanta List Vendors
List the vendors tracked in a Vanta account with risk levels, contract dates, and security review schedules
Vanta Get Vendor
Get a Vanta vendor by ID, including risk levels, contract details, and authentication info
Vanta List Monitored Computers
List the monitored computers in a Vanta account with screenlock, disk encryption, password manager, and antivirus check outcomes
Vanta List Vulnerabilities
List the vulnerabilities detected across a Vanta account with filters for severity, fixability, SLA deadlines, package, and integration
Vanta List Vulnerability Remediations
List remediated vulnerabilities in a Vanta account with detection, SLA deadline, and remediation dates
Vanta List Vulnerable Assets
List the assets associated with vulnerabilities in a Vanta account (servers, repositories, workstations, and more)
Vanta Get Vulnerable Asset
Get a vulnerable asset in Vanta by ID, including the scanners reporting it and per-scanner asset details
Vanta List Risk Scenarios
List the risk scenarios in a Vanta risk register with likelihood/impact scores, treatment decisions, and review status
Vanta Get Risk Scenario
Get a Vanta risk scenario by ID, including its scores, treatment decision, and review status