Vanta, which offers enterprise data security compliance tools, raises $100M led by Craft Ventures at a $1.4B valuation
In some ways, Vanta Inc. looks like a startup from a frothier era. It's run by a 35-year-old entrepreneur in San Francisco and sells software primarily to other startups. Thanks: @mariesdiamond
Context & Ripple Effects
Vanta's raise caps a fast climb: two years after a $50M Series A built on just over $10M of ARR, the company is now valued at $1.4B selling compliance software mostly to other startups — exactly the customer base most exposed when San Francisco tech-sector job cuts make security questionnaires and audits a sales bottleneck.
The round also lands as lead investor Craft Ventures reportedly targets around $1B for a new fund, making Vanta an early anchor bet on automating trust checks between companies. Later coverage confirms the thesis held: Sequoia led a $150M Series C at $2.45B in 2024, and Wellington Management's $150M Series D at $4.15B followed in 2025.
First-order effects
- Vanta gains $100M to scale a product whose buyers are startups racing to close enterprise deals, turning security compliance from a consulting engagement into self-serve software.
- Craft Ventures converts a reported ~$1B fund target into a marquee position in compliance automation, with Vanta as its flagship proof point.
Second-order effects
- Rivals in security-compliance tooling must match the funded pace of product expansion or cede the startup segment, where Vanta was already doubling its customer base roughly every six months at the Series A stage.
- Audit firms and consultants who bill for manual SOC 2-style work face pricing pressure as their process gets productized by a well-capitalized vendor.
Third-order effects
- If the valuation arc from $1.4B toward the later $4.15B round holds as a pattern, compliance automation consolidates into a durable infrastructure category rather than a point solution — with capital concentrating behind the vendor that owns the startup-to-enterprise trust workflow.
- For founders, third-party verification of security posture shifts from an annual audit event to continuous software, changing what enterprise procurement expects before signing any contract.
The trend: Security compliance is being rebuilt as automated software sold to startups, and investors are funding it through the downturn as core B2B sales infrastructure.