Vanta prices access to an auditor, not the audit itself

The workload

Vanta's own SOC 2 product page describes what it automates, verified and quoted directly: it 'connects read-only to your cloud, identity, code, and device tools' and 'automatically pulls evidence, maps it to controls, and runs 1,200+ tests hourly.' That targets a specific, real workload — the manual evidence-gathering (screenshotting configuration panels, exporting access logs, chasing down policy documents) a solo founder would otherwise do by hand ahead of a SOC 2 engagement, mapped against the five Trust Services Categories covered elsewhere in this batch.

What the documents show

Verified: Vanta's own pricing page lists no public dollar figure. It presents four named tiers (Essentials, Plus, Professional, Enterprise) distinguished by which frameworks and features are included, and its call to action reads 'Request a free demo today to discuss your business needs and get personalized pricing' — pricing requires a sales conversation, as retrieved on 16 September 2026. Verified, from the product page: Vanta 'introduces you to vetted, independent auditors that help align on scope and timing,' language that keeps the actual audit engagement outside Vanta's own service. Vanta automates evidence collection and monitoring; it does not itself examine that evidence and issue the SOC 2 report, a distinction its own page draws.

The operating cost

Because no price is published, this entry cannot state a verified subscription figure; determining one requires requesting Vanta's own quote. A second, separate cost sits entirely outside Vanta's pages: the independent auditor's fee for the actual SOC 2 examination, which neither the pricing page nor the product page states. Together, an unstated platform subscription and an unstated audit fee make up the real total, and this entry states plainly that no dollar figure for either was found on Vanta's own site.

The stop condition

Vanta is billed as a continuous-monitoring subscription, not a one-time purchase, so its cost accrues every billing period whether or not an audit is actively underway. Editorially: a natural point to reassess is after a completed audit cycle, when a founder can weigh whether continuous monitoring is worth carrying until the next audit window or whether the subscription can be paused and re-purchased closer to the next engagement — a decision neither page addresses directly.

• Has an actual quote been requested, or is a tier name on the pricing page being treated as if it carried a known price?
• Which specific auditor will perform the SOC 2 examination, and has that firm's own fee been quoted separately from Vanta's subscription?
• Is continuous monitoring being used continuously, or would a pause between audit cycles cost less overall?

A compliance-automation subscription and an audit are two different purchases from two different parties, and Vanta's own pages keep that boundary visible even while selling across it.