Christina Cacioppo – Founder and CEO of Vanta

Christina Cacioppo is an American entrepreneur, product leader, and the founder and CEO of Vanta, a security and trust management platform that helps businesses automate compliance, manage security risks, and demonstrate trust to customers and partners.

Since founding Vanta in 2018, Cacioppo has transformed a solution to an internal operational problem into one of the world's leading security and compliance software companies. Vanta crossed $300 million in annual recurring revenue in April 2026 and serves more than 16,000 companies. Its customers include Snowflake, Atlassian, Duolingo, Ramp, Cursor, and Harvey.

The company was valued at $4.15 billion following a $150 million Series D funding round in July 2025, bringing Vanta's total external funding to approximately $504 million.

From Building Things to Building Companies

Cacioppo developed an interest in entrepreneurship at an early age. According to Forbes, she started experimenting with business as a child, including running a small eBay business selling Beanie Babies when she was 11.

Her early interest in building things eventually evolved into a career combining technology, product management, investing, and entrepreneurship.

Before becoming a founder, Cacioppo worked in venture capital at Union Square Ventures, where she gained experience evaluating early-stage technology companies and understanding how startups develop markets and achieve product-market fit.

Her experience as an investor gave her an unusual perspective when she eventually became an entrepreneur herself: she had spent years studying what makes startups succeed before having to apply those lessons to her own company.

Product Leadership at Dropbox

Before founding Vanta, Cacioppo joined Dropbox, where she led product management for Dropbox Paper.

Working on Dropbox Paper gave her direct experience with the operational challenges of building and scaling software products inside a rapidly growing technology company. More importantly, it exposed her to the complicated security and compliance requirements that businesses face when selling software to larger enterprises.

It was this experience that eventually inspired Vanta.

While working at Dropbox, Cacioppo encountered the cumbersome process of preparing for SOC 2 compliance. Much of the work involved manually collecting evidence, coordinating across teams, documenting security controls, and preparing information for auditors.

She recognized that the process was highly repetitive and poorly suited to a modern software environment.

That observation became the foundation for Vanta.

Founding Vanta

Cacioppo founded Vanta in 2018 with engineer Erik Goldman.

The original idea was straightforward: automate the tedious parts of security compliance so companies could spend less time preparing for audits and more time building their businesses.

Vanta initially focused heavily on SOC 2 compliance automation.

Instead of asking employees to manually gather evidence from dozens of systems, Vanta connected directly to a company's technology stack and continuously monitored security controls.

This approach turned compliance from a periodic, manual exercise into an ongoing software process.

Vanta's early traction was particularly strong among startups that needed SOC 2 certification to sell to larger enterprise customers.

The company became especially popular within the Y Combinator ecosystem, eventually becoming the compliance platform used by a substantial portion of YC startups.

Turning Compliance Into a Growth Function

Cacioppo's larger insight was that compliance should not simply be treated as an administrative requirement.

Security certifications can directly influence a company's ability to close deals.

A startup may have an excellent product, but a prospective enterprise customer may refuse to sign a contract unless the company can demonstrate appropriate security controls.

That means trust becomes part of the sales process.

Cacioppo has therefore positioned Vanta around a broader mission: helping businesses earn and prove trust.

The company's mission has expanded beyond SOC 2 into areas including ISO 27001, HIPAA, GDPR, vendor risk management, security questionnaires, Trust Centers, and AI risk management.

From Compliance Automation to Trust Management

One of the most important strategic decisions under Cacioppo's leadership has been expanding Vanta beyond automated audit preparation.

The company increasingly describes itself as a trust management platform.

The distinction is important.

Traditional compliance tools primarily help organizations prepare for audits and certifications. Vanta aims to provide continuous visibility into an organization's security and compliance posture.

Its platform connects to business systems, monitors controls, identifies potential problems, helps teams remediate issues, and provides evidence that can be shared with customers and auditors.

The result is a shift from point-in-time compliance toward continuous trust verification.

Vanta's own leadership has argued that this distinction is becoming increasingly important as companies adopt cloud infrastructure, artificial intelligence, and increasingly complex technology ecosystems.

The AI Security Challenge

The rapid adoption of artificial intelligence has created a new opportunity for Vanta.

Employees can now adopt AI tools without necessarily going through traditional security and procurement processes.

This creates what the industry calls "shadow AI"—AI applications being used inside organizations without formal approval or visibility from security teams.

In April 2026, Vanta reported that its annual recurring revenue had reached $300 million and highlighted the growing challenge created by unmanaged AI adoption.

Vanta's own data indicated that 70% of companies had employees using shadow AI.

For Cacioppo, this represents a major evolution of the problem Vanta was originally built to solve.

The question is no longer simply whether a company has appropriate security controls.

It is increasingly whether companies can continuously understand and govern the rapidly changing technology being used throughout their organizations.

Building an AI-Native Trust Platform

Cacioppo has increasingly positioned Vanta as an AI-powered platform rather than simply a compliance automation tool.

AI can help automate security reviews, analyze evidence, identify risks, and accelerate the process of responding to security questionnaires.

Vanta reported that its AI-powered security review capabilities could complete reviews up to 81% faster.

The company is also expanding into AI governance and risk management as businesses increasingly need to demonstrate how they control the use of artificial intelligence.

This creates an opportunity for Vanta to become a central system for managing trust across an organization's entire technology ecosystem.

Vanta's Rapid Growth

Vanta's growth has accelerated significantly in recent years.

The company took approximately two years to grow from $10 million to $100 million in ARR and another 15 months to reach $200 million. It then reached $300 million only nine months later in April 2026. Cacioppo noted that Vanta's growth rate had increased during each of the previous four quarters.

Customer growth has accelerated alongside revenue.

By July 2025, Vanta had more than 12,000 customers. By April 2026, that figure had grown beyond 16,000.

The company's customer base includes some of the most recognizable technology and high-growth companies in the world.

Vanta's customers include Snowflake, Atlassian, Duolingo, Ramp, Cursor, and Harvey.

The $4.15 Billion Valuation

In July 2025, Vanta announced a $150 million Series D investment led by Wellington Management.

The transaction valued the company at $4.15 billion, a significant increase from its $2.45 billion valuation in 2024.

The round brought Vanta's total funding to approximately $504 million. Investors include Wellington Management, Sequoia Capital, Craft Ventures, Goldman Sachs Alternatives, J.P. Morgan, Y Combinator, Atlassian Ventures, and CrowdStrike Ventures.

Interestingly, Cacioppo said Vanta had not been forced to raise the money because of a cash shortage. Instead, she viewed the financing as an opportunity to accelerate the company's expansion while the market opportunity was particularly strong.

A Founder With a Product Mindset

Cacioppo's background in product management strongly influences her approach to leadership.

Rather than building Vanta solely around a technical solution to compliance, she has continually expanded the company's product around the broader business problem of trust.

This product-oriented approach has allowed Vanta to move into adjacent markets as customer needs have evolved.

A startup may initially need SOC 2 certification.

As it grows, it may need ISO certification, vendor risk management, customer security questionnaires, a Trust Center, privacy controls, and AI governance.

Vanta's strategy is to remain part of that journey.

Leadership Philosophy

Cacioppo's leadership philosophy combines long-term thinking with an emphasis on product-market fit and disciplined execution.

She has spoken publicly about the different phases of building a company: creating a product, finding product-market fit, and then scaling.

Her experience at Union Square Ventures also appears to influence her approach to capital. Vanta has historically maintained significant financial flexibility while continuing to grow rapidly.

This gives Cacioppo the ability to make strategic investments without being forced into short-term decisions.

Her approach is less about growth at any cost and more about building a durable company around a large and expanding market opportunity.

Building Trust in the AI Era

The fundamental problem Vanta addresses has become increasingly important as businesses adopt AI.

Companies want to move quickly, but customers, regulators, investors, and partners increasingly demand evidence that businesses are managing security and risk responsibly.

This creates a tension between speed and trust.

Cacioppo's vision for Vanta is to eliminate that trade-off.

If security, compliance, and trust can be continuously monitored and automated, companies can move faster without sacrificing confidence.

That idea is particularly relevant in the AI era, where technology adoption can happen faster than traditional security and compliance processes can adapt.

Christina Cacioppo – Key Facts

Full Name: Christina Cacioppo
Profession: Entrepreneur, product leader, and technology executive
Current Position: Founder & CEO, Vanta
Company Founded: 2018
Co-Founder: Erik Goldman
Previous Experience: Dropbox, Union Square Ventures
Known For: Vanta, security compliance automation, trust management, AI governance
Headquarters: San Francisco, California
Latest Reported ARR: $300M+
Customers: 16,000+
Latest Announced Valuation: $4.15 billion
Total Funding: Approximately $504 million
Latest Major Funding: $150 million Series D, July 2025

Christina Cacioppo's Entrepreneurial Legacy

Christina Cacioppo's career demonstrates how a seemingly narrow operational problem can become the foundation for a major technology company.

She experienced the frustration of compliance firsthand while working at Dropbox, recognized that the process could be fundamentally redesigned through software, and turned that insight into Vanta.

What began as an effort to automate SOC 2 compliance has evolved into a much larger platform for managing trust, security, risk, and AI governance.

With more than $300 million in ARR and over 16,000 customers by 2026, Vanta has become one of the leading companies operating at the intersection of cybersecurity, compliance, and enterprise software.

Cacioppo's larger contribution may ultimately be the reframing of compliance itself.

Rather than treating trust as a bureaucratic obstacle that slows businesses down, she has built Vanta around the idea that trust can become a competitive advantage and a growth accelerator.

As AI continues to transform how companies operate, that idea is likely to become increasingly important.