Vanta

Vanta automates security compliance for companies seeking SOC 2, ISO 27001, HIPAA, and other certifications. Instead of the traditional months-long manual audit process, Vanta continuously monitors a company's infrastructure, code, and processes to provide real-time compliance status. The company has grown rapidly as security compliance has become a requirement for selling software to enterprises.

The engineering team is relatively small for its stage, which means individual engineers have significant scope and ownership. The stack is built on TypeScript, Node.js, React, and PostgreSQL, with significant work in integrations across cloud providers, SaaS tools, and security vendors. Engineers work on data pipelines for continuous monitoring, a rules engine for compliance checks, and the product surfaces that help customers understand and remediate their security posture.