Vanta

Vanta é uma plataforma de trust management que automatiza segurança e compliance para frameworks como SOC 2, ISO 27001, HIPAA e GDPR. Ela monitora continuamente sua infraestrutura, pessoas e vendors por meio de testes automatizados e centraliza as evidências de que os auditores precisam.

Com a integração do Vanta no Zoen, você pode:

• Monitorar a postura de compliance: Listar frameworks com contagens de conclusão de controles, documentos e testes, e aprofundar em controles individuais e seus testes mapeados e documentos de evidência.
• Triar testes com falha: Listar testes automatizados de compliance por status, framework, integração ou categoria, e obter as entidades de recurso com falha que precisam de remediação.
• Gerenciar documentos de evidência: Listar e inspecionar documentos de evidência, fazer upload de arquivos com descrições e datas efetivas, baixar arquivos enviados anteriormente e enviar coleções de documentos para revisão do auditor.
• Acompanhar pessoas e tarefas de segurança: Listar pessoas com status de emprego, pertencimento a grupos e tarefas de segurança pendentes (treinamentos, aceite de políticas, background checks, monitoramento de dispositivos).
• Revisar políticas e vendors: Verificar status de aprovação e versões de políticas, e acompanhar vendors com níveis de risco, datas de contrato e agendas de revisão de segurança.
• Ficar em dia com vulnerabilidades: Listar vulnerabilidades com filtros de severidade e prazo de SLA, revisar histórico de remediação e inspecionar os ativos vulneráveis por trás de cada finding.
• Observar compliance de dispositivos: Listar computadores monitorados com resultados de screenlock, criptografia de disco, gerenciador de senhas e antivírus.
• Gerenciar cenários de risco: Consultar cenários do risk register com scores de likelihood/impact, decisões de tratamento e status de revisão.

A integração autentica com credenciais OAuth de client do Vanta (criadas em Settings → Developer Console no Vanta) e oferece suporte aos ambientes comercial (api.vanta.com) e FedRAMP (api.vanta-gov.com). Uploads de evidência exigem credenciais com o scope vanta-api.documents:upload.

Usage Instructions

Integrate Vanta into the workflow. Monitor compliance frameworks, controls, and automated tests; find failing test entities; manage evidence documents including file upload, download, and submission; and track people, policies, vendors, monitored computers, vulnerabilities, and risk scenarios. Requires Vanta OAuth client credentials.

Actions

vanta_list_frameworks

List the compliance frameworks (e.g., SOC 2, ISO 27001) available in a Vanta account with completion counts

Input

Output

vanta_get_framework

Get a Vanta compliance framework by ID, including its requirement categories and mapped controls

Input

Output

vanta_list_framework_controls

List the controls that belong to a specific Vanta compliance framework

Input

Output

vanta_list_controls

List the security controls in a Vanta account, optionally filtered by framework

Input

Output

vanta_get_control

Get a Vanta security control by ID, including its status and evidence pass/fail counts

Input

Output

vanta_list_control_tests

List the automated tests mapped to a specific Vanta control

Input

Output

vanta_list_control_documents

List the evidence documents mapped to a specific Vanta control

Input

Output

vanta_list_tests

List the automated compliance tests in a Vanta account, with filters for status, framework, integration, control, owner, and category

Input

Output

vanta_get_test

Get a Vanta automated compliance test by ID, including its status and remediation info

Input

Output

vanta_list_test_entities

List the failing or deactivated resource entities for a specific Vanta test, useful for finding exactly which resources need remediation

Input

Output

vanta_list_documents

List the evidence documents in a Vanta account, optionally filtered by framework or document status

Input

Output

vanta_get_document

Get a Vanta evidence document by ID, including its renewal schedule and deactivation status

Input

Output

vanta_list_document_uploads

List the files uploaded to a specific Vanta evidence document

Input

Output

vanta_upload_document_file

Upload an evidence file to a Vanta document. Requires credentials with the vanta-api.documents:upload scope.

Input

Output

vanta_download_document_file

Download a file previously uploaded to a Vanta evidence document and store it in execution files

Input

Output

vanta_submit_document

Submit a Vanta document collection for review so uploaded evidence becomes visible to auditors. Requires credentials with write access.

Input

Output

vanta_list_people

List the people tracked in a Vanta account with employment status, group membership, and security task completion

Input

Output

vanta_get_person

Get a person tracked in Vanta by ID, including employment, leave, and security task status

Input

Output

vanta_list_policies

List the security policies in a Vanta account with approval status and version info

Input

Output

vanta_get_policy

Get a Vanta security policy by ID, including its approval status and latest approved version documents

Input

Output

vanta_list_vendors

List the vendors tracked in a Vanta account with risk levels, contract dates, and security review schedules

Input

Output

vanta_get_vendor

Get a Vanta vendor by ID, including risk levels, contract details, and authentication info

Input

Output

vanta_list_monitored_computers

List the monitored computers in a Vanta account with screenlock, disk encryption, password manager, and antivirus check outcomes

Input

Output

vanta_list_vulnerabilities

List the vulnerabilities detected across a Vanta account with filters for severity, fixability, SLA deadlines, package, and integration

Input

Output

vanta_list_vulnerability_remediations

List remediated vulnerabilities in a Vanta account with detection, SLA deadline, and remediation dates

Input

Output

vanta_list_vulnerable_assets

List the assets associated with vulnerabilities in a Vanta account (servers, repositories, workstations, and more)

Input

Output

vanta_get_vulnerable_asset

Get a vulnerable asset in Vanta by ID, including the scanners reporting it and per-scanner asset details

Input

Output

vanta_list_risk_scenarios

List the risk scenarios in a Vanta risk register with likelihood/impact scores, treatment decisions, and review status

Input

Output

vanta_get_risk_scenario

Get a Vanta risk scenario by ID, including its scores, treatment decision, and review status

Input

Output