Overview
Vanta is a trust-management platform: it watches controls, runs automated tests, and tracks the policies, people, vendors, risks and vulnerabilities behind a certification. The Automize connector is read-only — it lists and reads that state so a process can build a control register, chase failing tests, or check a person's onboarding before another system acts.
Setting up the connection
Auth type: OAuth 2.0 (Client Credentials).
- In the Vanta developer console, create an OAuth application and copy its client ID and secret.
- Leave Scopes at the default vanta-api.all:read. Every action this connector publishes is a read, so a read scope is all it needs.
- Leave Environment as commercial unless this is a Vanta Gov (FedRAMP) tenant, which uses its own API and token host.
- In Automize, open Settings → Connectors → Vanta → Add connection and paste the client ID and secret. Automize exchanges them for an access token per run.
Available operations
33 operations available. Click any row to jump to its detail.
| Operation | Category | What it does |
|---|---|---|
| Get Control | General | Get one control by its ID |
| Get Document | General | Get one document by its ID |
| Get Framework | General | Get one framework by its ID |
| Get Person | General | Get one person by their ID |
| Get Policy | General | Get one policy by its ID |
| Get Risk Scenario | General | Get one risk scenario by its ID |
| Get Test | General | Get one test by its ID |
| Get Vendor | General | Get one vendor by its ID |
| List Control Documents | General | List the documents mapped to a control |
| List Control Tests | General | List the tests mapped to a control |
| List Controls | General | List controls, optionally filtered by framework |
| List Discovered Vendors | General | List vendors Vanta discovered but which are not yet managed |
| List Documents | General | List evidence documents |
| List Event Logs | General | List audit-trail event logs |
| List Framework Controls | General | List the controls belonging to one framework |
| List Frameworks | General | List the compliance frameworks active for the account |
| List Groups | General | List people groups |
| List Integrations | General | List connected integrations |
| List Issues | General | List open compliance issues |
| List Monitored Computers | General | List endpoints monitored by the Vanta agent |
| List People | General | List people and their onboarding/offboarding state |
| List Policies | General | List policies and their acceptance state |
| List Risk Scenario Controls | General | List the controls mitigating a risk scenario |
| List Risk Scenarios | General | List risk scenarios from the risk register |
| List Test Entities | General | List the entities (users, buckets, repos) causing a test to fail |
| List Tests | General | List automated tests and their pass/fail state |
| List Users | General | List active Vanta users |
| List Vendor Findings | General | List findings raised against a vendor |
| List Vendor Security Reviews | General | List security reviews performed on a vendor |
| List Vendors | General | List managed vendors |
| List Vulnerabilities | General | List vulnerabilities detected across monitored assets |
| List Vulnerability Remediations | General | List remediations and their SLA state |
| List Vulnerable Assets | General | List assets carrying at least one vulnerability |
Operations
Get Control
Get one control by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Control ID controlId | Yes | string |
Get Document
Get one document by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Document ID documentId | Yes | string |
Get Framework
Get one framework by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Framework ID frameworkId | Yes | string |
Get Person
Get one person by their ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Person ID personId | Yes | string |
Get Policy
Get one policy by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Policy ID policyId | Yes | string |
Get Risk Scenario
Get one risk scenario by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk scenario ID riskScenarioId | Yes | string |
Get Test
Get one test by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Test ID testId | Yes | string |
Get Vendor
Get one vendor by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Vendor ID vendorId | Yes | string |
List Control Documents
List the documents mapped to a control
| Parameter | Required | Type | Description |
|---|---|---|---|
Control ID controlId | Yes | string |
List Control Tests
List the tests mapped to a control
| Parameter | Required | Type | Description |
|---|---|---|---|
Control ID controlId | Yes | string |
List Controls
List controls, optionally filtered by framework
No input parameters.
List Discovered Vendors
List vendors Vanta discovered but which are not yet managed
No input parameters.
List Documents
List evidence documents
No input parameters.
List Event Logs
List audit-trail event logs
No input parameters.
List Framework Controls
List the controls belonging to one framework
| Parameter | Required | Type | Description |
|---|---|---|---|
Framework ID frameworkId | Yes | string |
List Frameworks
List the compliance frameworks active for the account
No input parameters.
List Groups
List people groups
No input parameters.
List Integrations
List connected integrations
No input parameters.
List Issues
List open compliance issues
No input parameters.
List Monitored Computers
List endpoints monitored by the Vanta agent
No input parameters.
List People
List people and their onboarding/offboarding state
No input parameters.
List Policies
List policies and their acceptance state
No input parameters.
List Risk Scenario Controls
List the controls mitigating a risk scenario
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk scenario ID riskScenarioId | Yes | string |
List Risk Scenarios
List risk scenarios from the risk register
No input parameters.
List Test Entities
List the entities (users, buckets, repos) causing a test to fail
| Parameter | Required | Type | Description |
|---|---|---|---|
Test ID testId | Yes | string |
List Tests
List automated tests and their pass/fail state
No input parameters.
List Users
List active Vanta users
No input parameters.
List Vendor Findings
List findings raised against a vendor
| Parameter | Required | Type | Description |
|---|---|---|---|
Vendor ID vendorId | Yes | string |
List Vendor Security Reviews
List security reviews performed on a vendor
| Parameter | Required | Type | Description |
|---|---|---|---|
Vendor ID vendorId | Yes | string |
List Vendors
List managed vendors
No input parameters.
List Vulnerabilities
List vulnerabilities detected across monitored assets
No input parameters.
List Vulnerability Remediations
List remediations and their SLA state
No input parameters.
List Vulnerable Assets
List assets carrying at least one vulnerability
No input parameters.
FAQ
- Which objects tell me whether a control is actually satisfied?
- List Controls gives the control set, List Control Tests the tests mapped to one, and List Tests their current pass/fail state. List Test Entities names the specific users, buckets or repositories causing a test to fail — that is the list worth putting in front of someone.