Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What do you do when an attacker doesn’t break into your network, but simply walks in by turning your own multi-factor authentication against you? In this episode of The Tabletop, Jason Chan takes the hot seat and works the problem in real time.

We never get tired of saying this: compliance doesn’t have to SOC 2 much. No, really. Vanta gets you ready for SOC 2 in record time, with an agent that produces quality, audit-ready drafts of the core requirements. So you can get back to what you do best: building.

As organizations adopt agentic AI, we believe open collaboration is the fastest path to building trustworthy AI governance. Today, we're introducing a new open source project: Agentic Trust Controls. Agentic Trust Controls are designed to help the GRC community evaluate and govern AI agents with greater consistency and confidence. Explore the project and share your feedback at trustcontrols.ai.

Still sleeping on your AI app risk problem? Save yourself the insomnia-induced eye twitch. Without adopting a goat (you’ll understand once you watch this vid with @AlexisGay)... Vanta monitors all your vendors so you can track risky app usage. Even the AI apps that sneak past procurement. So don’t stress about who’s using AI apps and also has prod access. Just sleep well knowing you can review and approve every tool in one place.

What does a security leader actually do when an AI chatbot starts confidently revealing customer data that was never supposed to see the light of day? Alex has spent his career at the intersection of security and the hardest problems in tech—Chief Security Officer at Yahoo, Facebook, and SentinelOne, founder of the Stanford Internet Observatory, and now Chief Product Officer at Corridor, a startup focused on the security and safety of AI coding agents. If anyone knows what it looks like when AI ships faster than security can keep up, it’s him.

Somewhere out there, an internal risk team and a vendor risk team are both very confident that "everything is fine.” And they're right... if "fine" means spending countless hours debating the risk matrix, blatantly missing connections that expose your business to risk, and stewing up tension in team meetings.

Compare Vanta and Drata across integrations, automation, and enterprise GRC capabilities. This video breaks down key differences in testing, AI-driven remediation, and adaptive scoping. Learn why Vanta is built for complex enterprise compliance programs. – GRC platforms may look similar at first glance, but the differences become clear at enterprise scale. In this video, we compare Vanta and Drata across the capabilities that matter most for growing and complex organizations.

Builders Vanta Our all-new Developer Hub is live! We’ve got guides for custom integrations, AI tooling, reporting, and more, plus a built-in AI agent to help you get straight to what you need. Customers are already using Vanta to build crazy cool things like automated remediation workflows, custom reporting, and on-prem monitoring...

Sometimes unlimited tokens and rippin' guitar riffs can't solve every problem. The best builders know what NOT to build. Vibe coding might cut down on time, but that's only a fraction (20%) of the total software lifecycle cost. The other 70–80%? Maintenance, security patches, compliance updates. The slow grind of keeping it alive in production. When it comes to something as complex and critical as keeping your security airtight, depth wins over speed every time.

Who invited Brandon?! No one needs an unannounced drop-in right before audit day. But don't worry…if your auditors do pop by, Vanta has you covered. Removing manual work. Continuously monitoring your controls. Ensuring you're always audit-ready. According to IDC, companies using Vanta spend 82% less staff time per framework and attestation-related audit, so those pre-audit scaries? Totally optional.