Vanta Expands Trust Platform to Govern AI, Quantify Risk, and Scale GRC Expertise
SAN FRANCISCO — November 12, 2026 — Vanta, the leading Trust Platform, today
announced AI Governance by Vanta, Risk Quantification and Autonomous Vendor Assessment, and the next evolution of the Vanta Agent at VantaCon 2026. The new products and features give security, risk, and compliance teams an enhanced, single current view of every AI system, risk, and vendor in their company, where the Vanta Agent can take on entire jobs, continuously moving work forward while keeping teams in control.
AI adoption is accelerating across every business, and security and GRC leaders are being asked to move faster while managing the growing risk and accountability that comes with it. According to new data from Vanta, AI Security Engineer and Architect roles have tripled year to date compared to all of 2025, and AI Governance roles, absent from Vanta's data before 2024, have grown 10x in two years. Many of those teams still can't name every AI tool and agent running in their company, what it can access, or what risk it brought in. For these reasons, Vanta has upgraded their industry-leading tech stack, now fully available to all of their 20,000+ customers.
Built on the Trust Graph, Vanta's Trust Platform now includes:
- AI Governance by Vanta: Full end-to-end security for the AI agent lifecycle starting with discovering AI, testing for vulnerabilities, controlling behavior, and proving how it's governed.
- Enhanced unified risk with Autonomous Vendor Assessments and Risk Quantification: Unified risk connects live signals across your program, runs autonomous vendor assessments, surfaces your most critical risks, and translates them into financial impact leaders can act on.
- Next Evolution of the Vanta Agent: An Agent that takes on entire jobs, learns how each program runs and brings teams in when judgment is needed, working natively where teams already do, in Claude, ChatGPT, Cursor, and Slack.
"Security and GRC teams are being asked to adopt AI faster and stay accountable for all of it, usually with the same headcount they had before AI arrived," said Jeremy Epling, Chief Product Officer at Vanta. "Plenty of tools can list the AI running in your company. Vanta tells you whether it's doing what you approved and what it means for your risk, then the Vanta Agent does the follow-up work once you sign off. That gives a lean team the reach of an entire GRC organization."
"For the last few years, AI has been the agent of change inside most companies, and security teams have spent that time reacting to it," said Christina Cacioppo, CEO and co-founder of Vanta. "When those teams can see every system and act on it at the same speed, they become the agents of change. Those are the people in the room at VantaCon this week."
When Vanta shared its vision for AI governance in July, it became the company's most requested early access program to date, with a waitlist now six timesoversubscribed. AI security point solutions can detect threats, but often lack the business context to understand their significance. Traditional GRC systems document policies and controls, but remain disconnected from the live behavior those policies are meant to govern. Only Vanta connects the live security telemetry of an AI agent directly to the compliance controls of the business.
"My job is to help the business move quickly while understanding where we're taking risk. With AI, that starts with knowing what's being used, what could go wrong, and what needs our attention," said Eric Freeman, CISO of Writer. "What I like about Vanta's approach is that it connects AI across the company to the compliance and risk work we're already doing. The Vanta Agent can take more of the manual work off our plate, so our team can focus on addressing risk and making the calls that need our judgment."
Vanta also named Fredrick "Flee" Lee as its new Chief Information Security Officer. Lee joins Vanta on November 16 from Reddit, where he led security before, during, and after the company's IPO. He previously served as CISO at Gusto, where he was a Vanta customer, and held security leadership roles at Square and NetSuite. Lee will lead Vanta's own security program and push the product roadmap as Vanta's customer zero.
VantaCon 2026: Agents of Change
Vanta CEO Christina Cacioppo and CPO Jeremy Epling will unveil and demo the new products today at 9 AM PT during the VantaCon 2026 product keynote. Speakers from Cursor, ShipBob, Duolingo, and more will explore how agentic AI is changing trust, risk, and compliance. To register for the livestream, visit https://www.vanta.com/vantacon.
About Vanta
Vanta is the leading Trust Platform, setting the standard for how businesses earn and prove trust as AI reshapes security and compliance. Over 20,000 companies like Snowflake, GitHub, Ramp, Cursor, Golden State Warriors, and Icelandair rely on Vanta to guide, automate, and improve the GRC work that trust is built on. For more information, visit www.vanta.com.
Contacts