Vanta’s AI Compliance Engine Gains Steam With Push into Government, Enterprise

Last year, Vanta was valued at $2.45 billion. This week, the company announced a $150 million Series D funding round that pushed its valuation to $4.15 billion: a 69% increase in twelve months. The round, led by Wellington Management with participation from Goldman Sachs, Sequoia, and CrowdStrike Ventures, brings the trust management platform’s total capital raised to more than $500 million since 2021.

Founded in 2018 by Christina Cacioppo, Vanta started by helping startups automate SOC 2 compliance. It now serves over 12,000 customers globally and is positioning itself as an AI-powered infrastructure layer for continuous risk monitoring, policy enforcement, and third-party governance.

From SOC 2 to Continuous Compliance

Vanta’s original proposition was a straightforward automation of the process of getting SOC 2 certified. Startups could move faster, avoid hiring expensive compliance teams, and meet buyer expectations without months of prep. Over time, the company expanded its coverage to over 35 frameworks including GDPR, HIPAA, ISO 27001, and more recently, FedRAMP and CMMC, in a bid to serve defense and government-adjacent clients.

What began as a tool for startups is now pitched as a full-stack trust management platform. Vanta’s technology continuously monitors over 200 million assets and provides real-time visibility into security posture through features like its “Trust Centers,” which allow companies to show live security compliance data to customers and auditors.