Automatically push security findings to your compliance platform. No manual evidence collection.
AttackerView integrates with compliance platforms to automatically deliver vulnerability scan results as compliance evidence. When a scan completes or Watchtower detects changes, your compliance platform gets updated with the latest findings.
Your SOC 2, ISO 27001, PCI DSS (supporting evidence), and HIPAA evidence stays current without anyone copying screenshots or uploading PDFs. Auditors see real-time vulnerability data linked to the controls they care about.
You can connect integrations in Settings. Requires a Watchtower plan or higher.
Both integrations send the same core data, formatted for each platform:
When a finding is fixed, it's automatically removed from your compliance platform on the next sync. No manual cleanup needed.
AttackerView maps each finding to relevant compliance controls across four frameworks:
| Framework | Example controls |
|---|---|
| SOC 2 | CC6.1, CC6.6, CC6.7, CC7.1, CC7.2 |
| ISO 27001 | A.5.14, A.8.8, A.8.9, A.8.24 |
| PCI DSS | 4.2.1, 6.2.4, 6.3.3 |
| HIPAA | 164.312(a)(1), 164.312(e)(1) |
These mappings are built into every finding. Your compliance platform receives them automatically.
OAuth connection. Continuous background sync (every few minutes) of all domains and findings. Vanta auto-creates ~32 compliance tests and tracks remediation SLAs.
API key connection. Syncs existing findings within a minute of connecting, then pushes updated evidence after each scan. Linked to relevant DCF controls. Works on all Drata plans.
| Vanta | Drata | |
|---|---|---|
| Auth method | OAuth (no keys to manage) | API key |
| Sync frequency | Every few minutes (background) | Initial sync on connect, then on scan completion |
| Sync scope | All domains + findings (full state) | Per domain (after each scan) |
| Auto-created tests | Yes (~32 tests) | No (maps to existing controls) |
| SLA tracking | Built-in (Vanta calculates) | Via Drata's control monitoring |
| Regional support | Global (single endpoint) | US, EU, APAC |
You can connect both at the same time. Each operates independently.