Vanta

Vanta is a comprehensive security and compliance automation platform that helps organizations continuously monitor their security posture, achieve compliance certifications (such as SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS), and maintain ongoing adherence to security standards. The platform automates evidence collection, monitors security controls, and provides visibility into an organization's entire technology infrastructure and compliance status.

Category	GRC
Direction	Query source
Sign-in	OAuth Client Credentials, Access Token
Query languages	SQLite
Tables	9
Query templates	72
Website	vanta.com

Before you start

Huntbase can sign in to Vanta with any of these methods: OAuth Client Credentials, Access Token. Pick one, create the credential in Vanta, then keep it to hand for the Connect step.

OAuth Client Credentials

Vanta API OAuth client ID and client secret used to obtain an access token.

1. In the Vanta dashboard, go to Settings › Developer Console and select Create.
2. Choose Manage Vanta as the app type, and enter an application name and description.
3. Copy the generated client ID, then click Generate client secret and copy the secret.

Permissions:

• vanta-api.all:read

Access Token

A pre-generated Vanta API access token used directly instead of OAuth client credentials.

1. Create an application and client secret as in the OAuth Client Credentials method.
2. Request a token from https://api.vanta.com/oauth/token with grant_type set to client_credentials and scope set to vanta-api.all:read, then copy the access_token value.

Permissions:

• vanta-api.all:read

Watch out for

• Access tokens expire after one hour, and requesting a new token revokes the previous one. For a lasting connection, use OAuth Client Credentials.

For the vendor's own instructions, see Vanta API access setup.

tip

Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.

Connect Vanta

1. Go to Connections and click New connection, or click New connection on the Vanta product page.
2. On Product, pick Vanta and choose the Owner.
3. On Details, give the connection a Name and, optionally, a Description.
4. On Connect, fill in the settings and credentials described below.
5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings

Where your Vanta lives:

Field	Required	Notes
Client ID	No	The client ID generated for your app in the Vanta Developer Console.

Credentials

Choose a Method, enter a Credential label (for example Production), then fill in the fields for that method.

OAuth Client Credentials

Field	Required	Notes
Client Secret	Yes	Secret — not shown again after you save it.

Access Token

Field	Required	Notes
Access Token	Yes	Secret — not shown again after you save it.

Query it

Once connected, Vanta can serve these languages in a query tab, and Scout can use it when you ask in Auto:

Language	Use it for
SQLite	SQL over the 9 tables listed below, alongside every other connected source.

Example: SQLite

List all groups basic info — List all available groups with their names, IDs, and creation dates.

select
  name,
  id,
  creation_date
from
  vanta_group;

Vanta ships with 72 query templates. Find them in Library › Queries — see Query templates.

What syncs automatically

Vanta comes with a content pack. These queries run on a schedule on each new connection so the entities they find appear in the Activity Feed without you asking. You can turn syncing off from the connection's Synchronisation Settings card.

Query	Finds
Sync active personnel	user
Sync groups	group
Sync unencrypted computers	device
Sync policies	policy

Tables

Vanta adds 9 tables. Browse their columns from Schema in the query bar's ⋯ menu.

All 9 tables

Table	Contains
vanta_computer	Vanta Computer
vanta_evidence	Vanta Evidence
vanta_group	Vanta Group
vanta_integration	Vanta Integration
vanta_monitor	Vanta Monitor
vanta_policy	Vanta Policy
vanta_user	Vanta User
vanta_vendor	Vanta Vendor
vanta_vulnerability	Vanta Vulnerability - Security vulnerabilities detected across integrations (GitHub, AWS ECR, GCP Artifact Registry, etc.)

Next steps

• Connections — health, credentials and settings after you connect
• Query languages — syntax, parameters and time ranges
• Chatting with Scout — ask questions without writing a query
• All integrations — the rest of the catalog