Language: 日本語English

vanta Plugin

Author
Vanta
Category
Security
Topics
Security, Auth & Compliance · Cloud, Deployment & CI/CD
First seen
2026-07-09
Last confirmed
2026-07-13
Explanation last updated
2026-07-12

The explanation below is AI-generated. Please verify it against the sources.

Vanta is a plugin that connects Claude Code to Vanta's security and compliance platform via the Vanta MCP server. According to the GitHub README, it combines Vanta's remediation intelligence with local repository context to generate infrastructure-as-code fixes for failing compliance tests and open pull requests. It also provides slash commands (/vanta:fix-test and /vanta:list-tests) and broader MCP tools for managing controls, vendor risk, vulnerabilities, and policies. Use requires a Vanta Admin role, since the MCP server is currently in beta and not accessible to non-Admin users. Authentication uses OAuth, with no API keys to manage, per the README.

Overview

Vanta is a security and compliance platform; this plugin connects Claude Code to Vanta's hosted MCP server (regional endpoints for US, EU, and AUS) so that compliance data and remediation tools can be accessed from within Claude Code sessions.

What you can do with vanta

  • List and prioritize failing compliance tests relevant to your codebase (/vanta:list-tests)
  • Generate infrastructure-as-code fixes for a failing test and open a pull request (/vanta:fix-test )
  • Browse controls, their framework mappings, associated tests, and linked evidence documents
  • Review vendors, run security assessments, and track vendor risk attributes and compliance documentation
  • Surface vulnerable assets and monitor remediation progress
  • List, download, and upload policy documents
  • Enumerate framework requirements and identify compliance gaps across SOC 2, ISO 27001, and other frameworks (per the README)

Sources

Original description (English)

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster.

History of vanta

Back to list