Vanta company profile: valuation, funding & revenue

This Vanta company profile covers the company's valuation, revenue, funding rounds, investors and history. Vanta works in cybersecurity, with a focus on compliance automation and trust management. It was founded in 2018 and is headquartered in San Francisco, California, United States. Its latest valuation on record is US$4.15 billion (July 2025). Every figure links to a public source, and anything the company hasn't disclosed is marked as such.

Revenue

More than US$300 million in annual recurring revenue — ARR (company-reported), as of April 2026. Source: Vanta.

Funding history

Vanta timeline

Key dates from the sources on this page, oldest first. Metric snapshots are listed after the funding events.

• 2018 — Vanta is founded in San Francisco by Christina Cacioppo (CEO) and Erik Goldman.
• Jul 2025 — Series D: US$150M, valuing the company at US$4.15B. Investors: Wellington Management (lead).
• April 2026 — Customers: 16,000, including 60% of the Forbes AI 50.
• April 2026 — Growth pace: About two years from US$10M to US$100M ARR, 15 months to US$200M, nine months to US$300M.

Investors

Overview

Vanta helps companies prove they are secure. When a business sells software to other businesses, customers usually ask for evidence of security practices, such as a SOC 2 report or ISO 27001 certification, before signing. Getting and keeping those certifications used to mean months of spreadsheets, screenshots and consultants. Vanta connects to a company's cloud services, HR system, code repositories and devices, monitors its security controls automatically, collects evidence for auditors and flags problems as they arise.

Christina Cacioppo, the CEO, founded Vanta in San Francisco in 2018 with Erik Goldman. Cacioppo had been a partner at Union Square Ventures and worked at Dropbox. Vanta went through Y Combinator and became one of the fastest-growing security software companies, serving startups and, increasingly, large enterprises.

What Vanta automates

• Compliance frameworks: SOC 2, ISO 27001, HIPAA, GDPR, ISO 42001 for AI management, NIST frameworks, the EU AI Act, and many others.
• Continuous monitoring: checking hundreds of controls, such as whether laptops are encrypted or former employees still have access, through more than 400 integrations.
• Trust Center: a public page where a company shares its security posture and documents with prospective customers.
• Questionnaire automation: using AI to answer the long security questionnaires that large customers send.
• Vendor risk management: assessing the security of a company's own suppliers.
• Vanta Agent: an AI agent that handles compliance tasks, audits and customer commitments continuously.

Business model

Vanta sells annual subscriptions priced by company size and the frameworks and products used. Customers often start with one framework, typically SOC 2, then add others as they grow and sell into new markets or industries. That natural expansion, plus additional products like vendor risk management and AI governance, drives growth within accounts.

Growth

In April 2026 Vanta announced it had passed US$300 million in annual recurring revenue. It said the journey from US$10 million to US$100 million took about two years, from US$100 million to US$200 million 15 months, and from US$200 million to US$300 million just nine months, with its growth rate increasing for four consecutive quarters. It had 16,000 customers, including 60% of the companies on the Forbes AI 50 list. Named customers include Snowflake, Samsara, Ramp, Cursor and Clay.

Funding

Vanta's backers include Sequoia Capital, Craft Ventures, Y Combinator, Goldman Sachs and J.P. Morgan, along with strategic investors Atlassian Ventures, HubSpot Ventures and Workday Ventures. In July 2025 it raised a US$150 million Series D led by Wellington Management at a US$4.15 billion valuation, its last public valuation when it announced US$300 million in ARR. Given the growth since, a new round or IPO would likely price it considerably higher.

Why AI is accelerating compliance demand

As companies adopt AI tools and build AI products, new security and governance questions arise: what data employees paste into AI tools, how AI systems are tested, and how they comply with new rules such as the EU AI Act. Vanta has positioned itself around this, offering AI governance frameworks and tools to detect "shadow AI", unapproved AI tools employees use. AI companies themselves are among its fastest-growing customers, because they need certifications quickly to sell to enterprises.

Competitors

Vanta competes with Drata, Secureframe and newer AI-native compliance startups, with governance, risk and compliance platforms such as OneTrust and ServiceNow, and with audit and consulting firms. Its advantages are its brand among startups, the breadth of its integrations, and a growing enterprise business.

Vanta at a glance

Vanta is a San Francisco compliance automation company founded in 2018 by Christina Cacioppo and Erik Goldman. It passed US$300 million in ARR in April 2026 with 16,000 customers, and raised a US$150 million Series D at US$4.15 billion in July 2025, led by Wellington Management.

What a SOC 2 report is and why it matters

SOC 2 is an audit standard developed by the American Institute of Certified Public Accountants. An independent auditor examines a company's controls over security, and optionally availability, confidentiality, processing integrity and privacy, and issues a report. A Type I report looks at whether controls are designed properly at a point in time; a Type II report tests whether they operated effectively over a period, usually six to twelve months. Large customers increasingly require a Type II report before buying software, which is why startups often pursue it early. Automation can cut the preparation time from months to weeks.

Valuation in context

At US$4.15 billion, Vanta's last valuation was less than 14 times its April 2026 ARR, modest compared with many AI companies. That reflects the timing of the round, set when ARR was lower, rather than investor scepticism. Our guide to SaaS valuation multiples explains how growth rate, retention and margins drive the multiples investors pay.

Choosing a compliance platform

• Which frameworks do you need now and in the next two years?
• Does it integrate with your cloud providers, identity system and HR tools?
• Will your preferred auditors work with it?
• How much of the questionnaire and vendor review work can it automate?

Asking for a short trial connected to your real systems shows quickly how much evidence collection a platform can actually automate, and how much will still need manual work from your team before an audit.

It is also worth asking current customers of a similar size how long their first audit took after switching, and how much time their engineers spend on compliance each month now compared with the period before they first adopted the new compliance platform.

Next things to watch

Watch ARR milestones, enterprise and international growth, adoption of Vanta Agent, any new funding round or IPO filing, and competition from AI-native compliance startups.

Practical guidance

Startup founders selling to enterprises should plan for SOC 2 early. Security leaders can use automation to free their teams from evidence collection. Investors should note that Vanta's growth has accelerated at a scale where most software companies slow down.

Latest developments (October 2026)

Vanta has not announced a new round since July 2025, when Wellington Management led a US$150 million Series D at US$4.15 billion, according to Bloomberg. The compliance automation company is using AI agents to collect evidence and answer security questionnaires, and it is expanding into government work. See our cybersecurity unicorns guide.

Sources

Every figure on this page comes from the public sources below. Where sources disagreed, we used the company's own announcement or a primary news report. Private-company data changes; check the date beside each figure.

1. Fortune
2. Vanta