Integration · Security and identity
AI agents for Vanta
Track compliance in Vanta: see which automated tests are failing and the exact resources (users, buckets, laptops, repos) causing it, progress on each framework.
- Actions
- 8
- Read
- 7
- Write
- 1
Actions
What your agents can do in Vanta
Track compliance in Vanta: see which automated tests are failing and the exact resources (users, buckets, laptops, repos) causing it, progress on each framework (SOC 2, ISO 27001, HIPAA …) and its controls, the people Vanta tracks and their onboarding and offboarding tasks, open vulnerabilities and their fix-by dates, and record a leaver's offboarding as complete.
Read 7
Look things up. Nothing changes.
List tests
Lists Vanta's automated tests, optionally only those needing attention (NEEDS_ATTENTION is a failing test), or by framework, integration, control or category.
List a test's failing resources
Lists the resources a test checks that are failing (or deactivated), by test ID.
List frameworks
Lists the frameworks in the compliance program with progress.
List controls
Lists the organization's controls, optionally only those in some frameworks: each with id, externalId, name, description, source, domains, owner and implementationDetails.
List people
Lists the people Vanta tracks, optionally by name or email (partial) or employment status (UPCOMING, CURRENT, ON_LEAVE, INACTIVE, FORMER).
Get a person
Reads one person by Vanta ID: name, emailAddress, employment, leaveInfo, groupIds, sources.
List vulnerabilities
Lists vulnerabilities Vanta's scanners report, optionally by severity (CRITICAL, HIGH, MEDIUM, LOW), only fixable ones, those due before a date.
Write 1
Create, change or send.
Complete offboarding
Records offboarding as complete for former employees, naming the person who acknowledges it (their Vanta person ID).
A person can approve first
Any write action can be set to wait for a person's approval before it runs, so an agent asks before it changes anything.
Connection
How it connects
Connect it once in the console, then give it to the agents and workflows that need it.
Enter the sign-in details Vanta gives you for its API.
What you enter
- Client ID
- Client secret
Settings
- Vanta deployment
- Access
Kept safe
- Credentials are stored encrypted with your organization's own keys.
- They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
- Calls go only to the tool's own servers.
Ideas
Ideas to start with
Starting points made only from the actions above. Mix them with any other tool your agents can use.
- 01
Ask about your Vanta data
Ask a question in plain words. The agent can list tests, list a test's failing resources or list frameworks in Vanta, then answers with what it found.
- 02
Share what it finds in Slack
Give one agent Vanta and Slack: it can list tests in Vanta and post a summary to a Slack channel in the same run.
- 03
Run it as a workflow step
Add "Complete offboarding" to a workflow, and it runs in Vanta the same way every time, with or without an agent.
Works well with
More Security and identity tools
- Okta14 actionsFind people and read their groups, apps, MFA factors and sign-in history in Okta, list groups and members, and run joiner and leaver steps.
- Microsoft Entra ID10 actionsFind people and groups in Microsoft Entra ID (formerly Azure Active Directory), read a person's group and role memberships and their sign-in log, add or remove group members, and run leaver and incident steps.
- Google Workspace Admin9 actionsManage people and groups in a Google Workspace domain.
- CrowdStrike Falcon8 actionsInvestigate and respond in CrowdStrike Falcon: search the hosts the Falcon sensor protects and read their details, network-contain a compromised host or lift containment, search and read alerts.
- Wiz7 actionsWork cloud security issues in Wiz: list open issues by severity or type, read one issue with the affected resource and its notes, move it to in progress, resolve or reject it with a reason, add a note.
- 1Password4 actionsWatch a 1Password Business account's security activity through the Events API.
FAQ
Vanta and MyDeepAgents
Can MyDeepAgents connect to Vanta?
Yes. The Vanta connector has 8 actions: 7 read and 1 makes changes. Your agents can call them as tools, and your workflows can run them as steps.
How do I connect Vanta?
Enter the sign-in details Vanta gives you for its API. You'll need: Client ID and Client secret. The connection also asks for: Vanta deployment and Access. Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.
Can an agent change data in Vanta without asking?
Only if you let it. Its one action that changes data can be set to wait for a person's approval before it runs.
Can I use Vanta in workflows as well as agents?
Yes. Every Vanta action also works as a step in a workflow, and the same connection serves your agents and your workflows.
Early access
Put Vanta to work
Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.