Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What does a security leader actually do when an AI chatbot starts confidently revealing customer data that was never supposed to see the light of day? Alex has spent his career at the intersection of security and the hardest problems in tech—Chief Security Officer at Yahoo, Facebook, and SentinelOne, founder of the Stanford Internet Observatory, and now Chief Product Officer at Corridor, a startup focused on the security and safety of AI coding agents. If anyone knows what it looks like when AI ships faster than security can keep up, it’s him.

Somewhere out there, an internal risk team and a vendor risk team are both very confident that "everything is fine.” And they're right... if "fine" means spending countless hours debating the risk matrix, blatantly missing connections that expose your business to risk, and stewing up tension in team meetings.

Builders Vanta Our all-new Developer Hub is live! We’ve got guides for custom integrations, AI tooling, reporting, and more, plus a built-in AI agent to help you get straight to what you need. Customers are already using Vanta to build crazy cool things like automated remediation workflows, custom reporting, and on-prem monitoring...

Compare Vanta and Drata across integrations, automation, and enterprise GRC capabilities. This video breaks down key differences in testing, AI-driven remediation, and adaptive scoping. Learn why Vanta is built for complex enterprise compliance programs. – GRC platforms may look similar at first glance, but the differences become clear at enterprise scale. In this video, we compare Vanta and Drata across the capabilities that matter most for growing and complex organizations.

Sometimes unlimited tokens and rippin' guitar riffs can't solve every problem. The best builders know what NOT to build. Vibe coding might cut down on time, but that's only a fraction (20%) of the total software lifecycle cost. The other 70–80%? Maintenance, security patches, compliance updates. The slow grind of keeping it alive in production. When it comes to something as complex and critical as keeping your security airtight, depth wins over speed every time.

Who invited Brandon?! No one needs an unannounced drop-in right before audit day. But don't worry…if your auditors do pop by, Vanta has you covered. Removing manual work. Continuously monitoring your controls. Ensuring you're always audit-ready. According to IDC, companies using Vanta spend 82% less staff time per framework and attestation-related audit, so those pre-audit scaries? Totally optional.

"How hard can it be to just ship an AI feature?" Our SVP of Engineering, Iccha Sethi, asked her team this. Just once. Turns out building in the age of AI is a fundamentally different problem, from managing model drift to rethinking what "done" even means. Iccha joined @ModernCTO to get into all of it.

Vanta TPRM brings structure to vendor discovery and onboarding, turning scattered processes into a centralized, scalable system of record. In this demo, see how teams setup their third party risk program with Vanta. We'll show you how to define risk criteria, and stand up a tailored TPRM program. From initial discovery through procurement intake, Vanta helps you get organized and operational without the manual overhead.

Vanta TPRM transforms vendor assessments into an automated, intelligent workflow, helping your team move faster without sacrificing depth. In this demo, see how Vanta's AI-powered assessment gathers evidence, answers questions, and surfaces key findings—so you can evaluate vendor risk with greater speed, consistency, and confidence.

Vanta TPRM keeps you ahead of vendor risk with continuous monitoring and real-time visibility into your third-party ecosystem. In this demo, see how teams track changes, respond to alerts, and maintain an up-to-date understanding of vendor risk—without relying on periodic reviews or manual follow-up.