The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 10 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 0 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Cacioppo: Vanta tests candidates with real internal problems to prevent surprise
“The questions, the exercises in our interview process are all sort of ripped from the headlines. Like, they are just real things we are thinking through. And I think repeatedly through the interview process, trying to be very direct and transparent about what …”
Cacioppo: Compliance workflows are inherently format translation suited for AI
“A lot of what these compliance workflows are taking information in one format and putting it in another. So taking a policy document and turning it an engineering config, and a control, a rule that's followed basically. You know, turning all of this into like …”
Cacioppo: Founders must trick themselves into enjoying each new company phase
“I do think it is a useful founder skill to convince yourself you like each phase.”
Cacioppo: Big tech engineers were the wrong profile for early Vanta
“Asking someone, hey, you're, you have this career path at the Silicon Valley company, you have this mortgage, you have this annual bonus, like, do you want to make one third of that amount and like sit in a room with us and see if this will work? It was like a…”
Cacioppo: How Vanta automated compliance despite intentionally ambiguous industry regulations
“These regulations are complex and nuanced, and there's, they're actually Full of gray and the gray is kind of purposeful so companies can figure out what's best for themselves. But I think that ambiguity led lots of folks to look at it and say, oh, you can't a…”
Cacioppo: Compliance is a wedge into broader security, not a niche
“Compliance is this, like, great wedge into all of these other security processes in the company, and so it does really feel like, or it's kind of the hard parts of Vanta, it's like, hey, there's so much opportunity, there's so many adjacencies, which do we cho…”
Cacioppo: Solving disliked, mandatory tasks generates outsized early customer gratitude
“Compliance does sit in this intersection of something you might need to do or really feel like you need to and something you don't want to do. And so one thing I found is like when you offer A service or a product in that intersection, customers tend to be so …”
Cacioppo: Vanta gained initial GTM traction by selling directly to engineers
“Where we first really had go-to-market success was selling to engineers and heads of engineering. And One of our early customers described us as like a babble fish, a translator, between engineering and audit, right? And I think there was something kind of dee…”
Cacioppo: Vanta began with SOC 2 as business software's de facto standard
“We started with SOC two SOC two, which was the closest thing that existed at the time to like a default business software standard. It's not a law. It's more like a de facto standard, but that seemed like the first thing companies get, so the first thing we st…”
Cacioppo taught herself to code by sitting with engineers at a friend's company
“I grabbed a desk at a friend's company, and so I would wake up every day and go to work, and I would, like, go to his company and, like, sit with his engineers, and they would be doing their, like, work for the company, and I would, like, be doing my little bl…”