Vanta Enhances Trust Platform to Govern AI, Quantify Risk, and Scale GRC Expertise

Trust Platform

Vanta announced major product upgrades for its flagship Trust Platform today. The company launched several new capabilities at VantaCon 2026. These include AI Governance, Risk Quantification, and automated vendor evaluation. The updated capabilities of the Trust Platform provide security and compliance teams with full visibility into their organization’s AI systems. This enables organizations to effectively manage increasing technological risk while the enhanced Trust Platform automates day-to-day tasks.

Business adoption of artificial intelligence accelerates rapidly across every market. Therefore, security leaders face immense pressure to move faster while maintaining strict accountability. Recent data from Vanta shows that AI security roles have tripled year to date. Meanwhile, specialized AI governance positions have grown tenfold in two years. Despite this massive growth, many security teams struggle to track every software agent operating internally. For these reasons, Vanta upgraded its industry-leading Trust Platform to protect all 20,000 enterprise customers.

Built directly on the Trust Graph, the enhanced Trust Platform now features comprehensive end-to-end security. First, AI Governance by Vanta delivers complete lifecycle security by discovering tools and testing vulnerabilities. Second, enhanced unified risk management connects live operational signals to surface critical threats. Third, the next-generation Vanta Agent executes entire workflows natively inside tools like Claude, ChatGPT, and Slack.

“Security and GRC teams are being asked to adopt AI faster and stay accountable for all of it, usually with the same headcount they had before AI arrived,” said Jeremy Epling, Chief Product Officer at Vanta. “Plenty of tools can list the AI running in your company. Vanta tells you whether it’s doing what you approved and what it means for your risk, then the Vanta Agent does the follow-up work once you sign off. That gives a lean team the reach of an entire GRC organization.”

“For the last few years, AI has been the agent of change inside most companies, and security teams have spent that time reacting to it,” said Christina Cacioppo, CEO and co-founder of Vanta. “When those teams can see every system and act on it at the same speed, they become the agents of change. Those are the people in the room at VantaCon this week.”

Scaling Enterprise Compliance and Leadership

When Vanta first previewed its governance vision, it triggered an overwhelming corporate response. Specifically, the early access waitlist became six times oversubscribed. Traditional security point solutions detect immediate threats. However, they typically lack critical business context. Meanwhile, legacy GRC systems document static policies without monitoring live behavior. Ultimately, only the modern Trust Platform connects real-time telemetry directly to core business compliance controls.

“My job is to help the business move quickly while understanding where we’re taking risk. With AI, that starts with knowing what’s being used, what could go wrong, and what needs our attention,” said Eric Freeman, CISO of Writer. “What I like about Vanta’s approach is that it connects AI across the company to the compliance and risk work we’re already doing. The Vanta Agent can take more of the manual work off our plate, so our team can focus on addressing risk and making the calls that need our judgment.”

Finally, Vanta appointed Fredrick “Flee” Lee as its new Chief Information Security Officer. Lee brings extensive leadership experience from Reddit, Gusto, and Square. He oversees Vanta’s internal security programs and guides future product development.

For related updates on digital trust and cybersecurity, explore our SOC News.

News Source: Businesswire.com 

Share with friends

Latest News