Automatically push security findings to your compliance platform. No manual evidence collection.
AttackerView integrates with compliance platforms to automatically deliver vulnerability scan results as compliance evidence. Vanta receives the complete workspace state in its background sync. Drata receives evidence after scans and during its initial sync.
Your SOC 2, ISO 27001, PCI DSS (supporting evidence), and HIPAA evidence stays current without anyone copying screenshots or uploading PDFs. Vanta owns the tests, control associations, and audit outcomes evaluated from received resources. These exports support compliance reviews; they are not certification.
You can connect integrations in Settings. The 14-day trial includes them. After it they need Hunter.
Both integrations send the same core data, formatted for each platform:
When a finding is fixed, Vanta drops it on the next sync. Drata gets a new evidence file listing only the findings still open after the next scan, and files already in Drata stay there. If a domain has no open findings left, no new file is uploaded.
AttackerView maps findings to relevant controls in supported compliance frameworks:
| Framework | Example controls |
|---|---|
| SOC 2 | CC6.1, CC6.3, CC6.6, CC6.7, CC6.8, CC7.1 |
| ISO 27001 | A.5.14, A.8.8, A.8.9, A.8.24 |
| PCI DSS | 4.2.1, 6.2.4, 6.3.3 |
| HIPAA | 164.312(a)(1), 164.312(e)(1) |
AttackerView reports include these mappings. Drata receives mapped evidence; Vanta owns its test and control associations. The Vanta payload does not carry control tags.
OAuth connection. Continuous background sync (every few minutes) of all domains and findings. Vanta receives vulnerability resources and owns the resulting tests and remediation SLAs.
API key connection. Syncs existing findings within a minute of connecting, then pushes updated evidence after each scan. Linked to relevant DCF controls. Works on all Drata plans.
| Vanta | Drata | |
|---|---|---|
| Auth method | OAuth (no keys to manage) | API key |
| Sync frequency | Every few minutes (background) | Initial sync on connect, then on scan completion |
| Sync scope | All domains + findings (full state) | Per domain (after each scan) |
| SLA tracking | Built-in (Vanta calculates) | Via Drata's control monitoring |
| Regional support | Global (single endpoint) | US, EU, APAC |
You can connect both at the same time. Each operates independently.