Explore sessions

Build and publish a Trust Center live in this session, configuring branding, document access, and automated NDA gating, so you leave equipped to help mid-market and upmarket clients turn their compliance into a proactive sales and security tool instead of a static page.

Set up a real vendor review workflow in Vanta—importing vendors, applying risk tiers, and launching an automated assessment—so you can help downmarket and mid-market clients replace fragmented, email-driven vendor reviews with a structured TPRM program that doesn't require a dedicated team to run.

Configure workspaces, scoping rules, and access reviews against a real org structure during the session, so you leave able to help enterprise clients map Vanta to how their business actually operates—connecting the right people, systems, and business units so security scales without adding operational overhead.

Connect to the Vanta MCP and build working agentic workflows during the session—querying failing tests, triaging remediation, and pushing fixes to Jira—so you leave able to help upmarket and enterprise clients close integration gaps, automate engineering remediation, and unlock agentic compliance workflows in tools like Claude Code and Cursor.

Build and publish a Trust Center live in this session, configuring branding, document access, and automated NDA gating, so you leave equipped to help mid-market and upmarket clients turn their compliance into a proactive sales and security tool instead of a static page.

Set up a real vendor review workflow in Vanta—importing vendors, applying risk tiers, and launching an automated assessment—so you can help downmarket and mid-market clients replace fragmented, email-driven vendor reviews with a structured TPRM program that doesn't require a dedicated team to run.

Configure workspaces, scoping rules, and access reviews against a real org structure during the session, so you leave able to help enterprise clients map Vanta to how their business actually operates—connecting the right people, systems, and business units so security scales without adding operational overhead.

Connect to the Vanta MCP and build working agentic workflows during the session—querying failing tests, triaging remediation, and pushing fixes to Jira—so you leave able to help upmarket and enterprise clients close integration gaps, automate engineering remediation, and unlock agentic compliance workflows in tools like Claude Code and Cursor.

Vanta leadership opens the day with the state of the partnership—where we're investing, what's new for partners, and what it means for your business—so you walk into every session after with the bigger picture in hand.

Join us for the official launch of Vanta's new Partner Program, including the investments we're making in the infrastructure and support behind it, so you're the first to know what's changing and what it means for your business.

An inside look at our product direction and what it means for partners.

Candid conversations with Vanta's executive team—ask about the partner program, the product roadmap, or where things are headed next.

Vanta leadership closes out the day with final thoughts and what's next for the partnership, sending you off with the big picture in hand.

Wind down after a full day of sessions with drinks and light bites, connecting with fellow partners and the Vanta team as the partner summit wraps.

Build and publish your Trust Center live in this session, configuring branding, document access, and automated NDA gating so you leave with a working page that accelerates security reviews instead of stalling them.

Set up a real vendor review workflow in your own Vanta instance—importing vendors, applying risk tiers, and launching an automated assessment—to replace email-chasing with a repeatable program no dedicated team is required to run.

Configure workspaces, scoping rules, and access reviews against your actual org structure during the session, so you walk out with Vanta mapped to how your business really operates rather than a generic default.

Connect to Vanta MCP and build working agentic workflows during the session—query failing tests, triage remediation, and push fixes to Jira—so compliance runs inside your engineering tooling by the time you leave.

Make the most of your VantaCon experience with a visit to Support Central, at the Vanta Demo. Connect with our Technical Support Engineers for personalized answers, practical tips, and guidance tailored to how you use Vanta.

Build and publish your Trust Center live in this session, configuring branding, document access, and automated NDA gating so you leave with a working page that accelerates security reviews instead of stalling them.

Set up a real vendor review workflow in your own Vanta instance—importing vendors, applying risk tiers, and launching an automated assessment—to replace email-chasing with a repeatable program no dedicated team is required to run.

Configure workspaces, scoping rules, and access reviews against your actual org structure during the session, so you walk out with Vanta mapped to how your business really operates rather than a generic default.

Connect to Vanta MCP and build working agentic workflows during the session—query failing tests, triage remediation, and push fixes to Jira—so compliance runs inside your engineering tooling by the time you leave.

Make the most of your VantaCon experience with a visit to Support Central (at the Vanta Demo Bar). Connect with our Technical Support Engineers for personalized answers, practical tips, and guidance tailored to how you use Vanta.

Join us for the official kickoff reception — grab your badge, enjoy food and drinks, and start networking before the conference officially begins tomorrow!

Part game, part masterclass. Watch two top security leaders make on-the-spot calls in a high-stakes tabletop exercise centered on an AI governance incident. As injects evolve and tradeoffs sharpen, you’ll get a front-row seat to how they think under pressure.

Everyone is writing an AI governance policy. Far fewer have one that actually works. Two practitioners who've built AI governance programs from scratch share the five decisions that made the biggest difference: what they'd do again, what they'd skip, and where they got it wrong the first time. Bring your questions; most of the session is yours.

The best insight at any conference usually happens in the hallway, not on stage. This session moves it into the room. A moderator-guided discussion turns the audience into the panel, surfacing how peers are actually solving the problems everyone is quietly wrestling with. Come with a question you haven't been able to answer — you'll likely leave with three ways others have solved it.

Most GRC problems get talked about at conferences. Here, you'll build a solution to one. Ayoub from Lovable and Justin from Vanta open with the GRC engineering problems worth solving right now, then attendees break into groups of 3–6 to tackle one of three universal pain points using Vanta's MCP, Lovable, or whatever else you reach for. No engineering background required, just a willingness to build. Space limited to 75 attendees.

Nobody agrees on what AI governance means yet, and that's raising big questions. Do you need AI to govern AI? Is it a new discipline or just governance with a new name? Is the bigger risk your employees or your vendors? These questions are drawing lines in the sand across the security and compliance community. Two sharp voices take sides in a series of rapid-fire debates, and you vote on every one. Come ready to pick a side.

Every GRC program passes the audit. Only some become something the business genuinely relies on. Three GRC leaders pull back the curtain on the decisions, habits, and unconventional moves that transformed their programs and their careers. Less theory, more what they actually did differently.

Shake off the post-lunch lull with David Kwong — magician, mentalist, and New York Times crossword constructor. Expect sleight of hand, wordplay, and a few puzzles you'll be solving together, whether you meant to or not.

AI risk conversations tend to swing between hype and hand-waving. This fireside chat cuts through both, with practitioners discussing where AI risk is genuinely heading — from novel vulnerability discovery to failure modes that don't map to any existing control framework. The focus is practical: what GRC teams should start building now to stay ahead of risks that haven't fully arrived yet.

Some of the biggest risks facing your company don't have a framework, a control mapping, or a precedent to point to. Seasoned risk practitioners share how they make defensible decisions in that gap — how they scope the unknown, document their reasoning, and hold the line when leadership pushes back. Short, practical playbooks followed by open Q&A.

Teams at the Vanta + Lovable Hackathon took on some of GRC’s toughest problems: automating remediation, quantifying risk, mapping supply chain risk and catching control drift. Now the top teams demo what they built, live. Justin from Vanta and Ayoub from Lovable question each team, score the builds and name the winner. You’ll leave knowing how to build something like it in your own Vanta instance.

In a market where every company claims to be AI-powered, product differentiation gets copied in a quarter. Trust doesn't. This session makes the case that the companies winning enterprise deals aren't the ones with the best models — they're the ones whose customers believe them. A practitioner walks through how to build trust as a durable competitive advantage rather than a cost center.

The GRC role is being rewritten in real time by AI, automation, and rising executive expectations. Hiring managers and senior practitioners discuss where the job is heading, which skills will separate good from great, and what to start building now. If you're thinking about your next move — or the next five years — this is the session to sit in on.

What happens when a GRC team gets programmatic access to their own compliance data? A Vanta customer walks through an application they built on the MCP: why they built it, how it came together, and the measurable impact on their controls and their team's time. A candid look at what's possible when GRC starts building instead of just buying.

Grab a coffee, recharge, and get ready — because the closing keynote is coming up next, and you won't want to miss it.

The sessions are done, but the night isn't over. Join us for one last round of drinks, food, and conversation before we all head our separate ways. Trade contact info, swap takeaways from the day, and celebrate a great conference well spent.