Vanta

Identity & securityCredentials form

Read Vanta compliance frameworks, controls, tests, documents, policies, people, vendors, vulnerabilities and issues, and create evidence documents.

14 actions

ActionEffectData handledScope
vanta_list_frameworksLists the compliance frameworks active in Vanta, such as soc2 or iso27001_2022, with how many controls, documents and tests passreadGeneral
vanta_list_controlsLists the organization's security controls, optionally only those of given frameworksreadGeneral
vanta_get_controlReturns one control with its description, owner, domains and framework sectionsreadGeneral
vanta_list_control_testsLists the automated tests mapped to a control with their statusreadGeneral
vanta_list_testsLists Vanta's automated compliance tests, filtered by status, framework, integration, control, owner or categoryreadGeneral
vanta_list_test_entitiesLists the items a test checked, such as individual S3 buckets or accounts, optionally only failing or deactivated onesreadGeneral
vanta_list_documentsLists evidence documents with their upload status, filtered by framework and statusreadGeneral
vanta_create_documentCreates a custom evidence document that Vanta tracks and reminds owners to renewwriteGeneral
vanta_list_policiesLists the organization's security policies with their approval status and latest versionreadGeneral
vanta_list_peopleLists people with their employment status and security task status, such as training, policy acceptance and device monitoring, searchable by name or emailreadPersonal data
vanta_get_personReturns one person with their employment details and the status of each security taskreadPersonal data
vanta_list_vendorsLists vendors with their risk level, status and review dates, searchable by namereadGeneral
vanta_list_vulnerabilitiesLists vulnerabilities found by connected scanners, filtered by severity, fix availability, SLA deadline, package or assetreadGeneral
vanta_list_issuesLists compliance issues such as audit findings and nonconformities, filtered by status, severity, source and due datereadGeneral