Vanta

Use cases and templates: Vanta integration for AI agents

Vanta is a trust management platform that automates security and compliance for frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It continuously monitors your infrastructure, people, and vendors through automated tests, and centralizes the evidence auditors need.

With the Vanta integration in Sim, you can:

• Monitor compliance posture: List frameworks with control, document, and test completion counts, and drill into individual controls and their mapped tests and evidence documents.
• Triage failing tests: List automated compliance tests by status, framework, integration, or category, and pull the exact failing resource entities that need remediation.
• Manage evidence documents: List and inspect evidence documents, upload evidence files with descriptions and effective dates, download previously uploaded files, and submit document collections for auditor review.
• Track people and security tasks: List people with employment status, group membership, and outstanding security tasks (trainings, policy acceptance, background checks, device monitoring).
• Review policies and vendors: Check policy approval status and versions, and track vendors with risk levels, contract dates, and security review schedules.
• Stay on top of vulnerabilities: List vulnerabilities with severity and SLA deadline filters, review remediation history, and inspect the vulnerable assets behind each finding.
• Watch device compliance: List monitored computers with screenlock, disk encryption, password manager, and antivirus check outcomes.
• Manage risk scenarios: Query risk register scenarios with likelihood/impact scores, treatment decisions, and review status.

Create a Manage Vanta application in Vanta's Developer Console, then add a Vanta credential in Sim with its client ID, client secret, and deployment. Select that saved credential in your Vanta blocks. Sim stores the credentials securely and obtains access tokens automatically; there is no browser authorization redirect or shared Sim OAuth application to configure.

Standard Vanta deployments, including US, EU, and AU tenants, use api.vanta.com; Vanta Gov uses api.vanta-gov.com. Read operations require vanta-api.all:read; submitting documents also requires vanta-api.all:write; evidence uploads require vanta-api.documents:upload. Grant the scopes needed for your workflows when creating the application. See Vanta's authentication documentation.

The first successful connection sets this application's permissions in Sim. Every connection to that application must always use the same permissions, including after tokens expire or credentials are reconnected. Leave permissions blank on reconnect to retain the current choice. To choose different permissions, create a separate Manage Vanta application and connect it in Sim.

If your workflow entered credentials directly on a Vanta block, create and select a saved Vanta credential before running it again. Use a dedicated Vanta application for Sim: Vanta allows one active access token per application, so another client obtaining a new token can invalidate Sim's token.

Use the block

Monitor compliance frameworks, controls, and automated tests; find failing test entities; manage evidence documents including file upload, download, and submission; and track people, policies, vendors, monitored computers, vulnerabilities, and risk scenarios. Select a saved Vanta credential created with your Vanta application client ID and client secret.

Actions

Vanta List Frameworks

List the compliance frameworks (e.g., SOC 2, ISO 27001) available in a Vanta account with completion counts

Input

Output

Vanta Get Framework

Get a Vanta compliance framework by ID, including its requirement categories and mapped controls

Input

Output

Vanta List Framework Controls

List the controls that belong to a specific Vanta compliance framework

Input

Output

Vanta List Controls

List the security controls in a Vanta account, optionally filtered by framework

Input

Output

Vanta Get Control

Get a Vanta security control by ID, including its status and evidence pass/fail counts

Input

Output

Vanta List Control Tests

List the automated tests mapped to a specific Vanta control

Input

Output

Vanta List Control Documents

List the evidence documents mapped to a specific Vanta control

Input

Output

Vanta List Tests

List the automated compliance tests in a Vanta account, with filters for status, framework, integration, control, owner, and category

Input

Output

Vanta Get Test

Get a Vanta automated compliance test by ID, including its status and remediation info

Input

Output

Vanta List Test Entities

List the failing or deactivated resource entities for a specific Vanta test, useful for finding exactly which resources need remediation

Input

Output

Vanta List Documents

List the evidence documents in a Vanta account, optionally filtered by framework or document status

Input

Output

Vanta Get Document

Get a Vanta evidence document by ID, including its renewal schedule and deactivation status

Input

Output

Vanta List Document Uploads

List the files uploaded to a specific Vanta evidence document

Input

Output

Vanta Upload Document File

Upload an evidence file to a Vanta document. Requires credentials with the vanta-api.documents:upload scope.

Input

Output

Vanta Download Document File

Download a file previously uploaded to a Vanta evidence document and store it in execution files

Input

Output

Vanta Submit Document

Submit a Vanta document collection for review so uploaded evidence becomes visible to auditors. Requires credentials with write access.

Input

Output

Vanta List People

List the people tracked in a Vanta account with employment status, group membership, and security task completion

Input

Output

Vanta Get Person

Get a person tracked in Vanta by ID, including employment, leave, and security task status

Input

Output

Vanta List Policies

List the security policies in a Vanta account with approval status and version info

Input

Output

Vanta Get Policy

Get a Vanta security policy by ID, including its approval status and latest approved version documents

Input

Output

Vanta List Vendors

List the vendors tracked in a Vanta account with risk levels, contract dates, and security review schedules

Input

Output

Vanta Get Vendor

Get a Vanta vendor by ID, including risk levels, contract details, and authentication info

Input

Output

Vanta List Monitored Computers

List the monitored computers in a Vanta account with screenlock, disk encryption, password manager, and antivirus check outcomes

Input

Output

Vanta List Vulnerabilities

List the vulnerabilities detected across a Vanta account with filters for severity, fixability, SLA deadlines, package, and integration

Input

Output

Vanta List Vulnerability Remediations

List remediated vulnerabilities in a Vanta account with detection, SLA deadline, and remediation dates

Input

Output

Vanta List Vulnerable Assets

List the assets associated with vulnerabilities in a Vanta account (servers, repositories, workstations, and more)

Input

Output

Vanta Get Vulnerable Asset

Get a vulnerable asset in Vanta by ID, including the scanners reporting it and per-scanner asset details

Input

Output

Vanta List Risk Scenarios

List the risk scenarios in a Vanta risk register with likelihood/impact scores, treatment decisions, and review status

Input

Output

Vanta Get Risk Scenario

Get a Vanta risk scenario by ID, including its scores, treatment decision, and review status

Input

Output