Vanta launches AI Governance, Risk Quantification and a Vanta Agent for entire jobs

Compliance automation company Vanta Inc. today launched AI Governance by Vanta, a product on its Agentic Trust Platform said to give security teams a single view of every artificial intelligence system in a company.

Also making their debut at VantaCon 2026 in San Francisco this week are Risk Quantification, Autonomous Vendor Assessments and a new version of the Vanta Agent that the company claims can take on entire jobs.

Vanta is pitching the new products at security teams that are under pressure to move faster on AI. According to job-title data compiled by Vanta, the number of AI security engineers and architects has tripled so far this year compared with all of 2025.

AI governance roles, which did not appear in the company’s figures before 2024, have grown tenfold in two years. A complete inventory of the AI tools in use is still out of reach for many security teams, Vanta said.

Chief Product Officer Jeremy Epling, who is due to demonstrate the products at a keynote later today, said security teams are usually being held accountable for AI with the same headcount they had before it arrived.

“Plenty of tools can list the AI running in your company,” Epling said. Vanta also checks whether that AI is doing what a customer approved, he added, with the Vanta Agent taking on the follow-up work once someone signs off.

Designed to follow an AI agent through its full life cycle, AI Governance by Vanta is said to cover discovery, vulnerability testing, behavior controls and proof of governance. Vanta’s early access program for the product, opened in July, has become its most requested to date, with the waitlist now six times oversubscribed.

Point products for AI security often detect threats without the business context to judge how much they matter, according to Vanta. The company claims to be the only vendor tying an AI agent’s live security telemetry directly to an organization’s compliance controls.

On the risk side, Vanta’s unified risk view, which draws on live signals from across a customer’s compliance program, now includes Autonomous Vendor Assessments. According to the company, Risk Quantification, also added to the view, is meant to show leaders the financial impact of their most critical risks.

Entire jobs can now be handed to the latest version of the Vanta Agent. Once it has learned how a customer runs its program, the agent is said to bring staff in when a decision calls for human judgment. Users can also reach it natively inside Claude, ChatGPT, Cursor and Slack.

Vanta also named Fredrick “Flee” Lee its new chief information security officer. Lee joins on Nov. 16 from Reddit Inc., where he led security before, during and after the company’s initial public offering. Gusto Inc., where he ran security before Reddit, was a Vanta customer at the time. At Vanta, he is expected to act as what the company calls “customer zero” in pushing the product road map.

The company has been valued at $4.15 billion since July 2025, when it raised $150 million in a Series D round led by Wellington Management Co. LLP.

Image: Vanta