In 1997, Christina Cacioppo—then 11 years old—was already running a thriving Beanie Baby business on eBay. She traces the spark back to a moment at home in Columbus, Ohio, when her mom—who worked at Ohio State University—came in one evening and announced, “I used the world wide web today.” Cacioppo says she pictured an actual web strung across a wall and couldn’t imagine what anyone would do with it, which only made her more determined to figure it out.
That curiosity became a habit. She was the kind of kid who fell down rabbit holes on purpose—reading constantly, pushing through complicated ideas, and enjoying the feeling of finally making something click. When Beanie Babies hit peak mania, she didn’t just collect them; she turned the craze into a tiny marketplace. And, in the process, she stumbled into an early, very practical lesson about doing business online: trust is hard to build, and security is easy to get wrong.
The Beanie Baby Hustle and the First Security Problem
Even at 11, Cacioppo ran into the friction points of online payments. She didn’t have a credit card—and she wasn’t about to borrow her mom’s—so she got creative. To keep the whole operation quiet, she used money orders from the local grocery store. “I was showing up on my bike with like $8.42 and sliding it across the counter,” she’s recalled. It was problem-solving in miniature, and it stuck.
That same pattern—immerse, do the unglamorous work, and keep pushing—shows up throughout her career. Cacioppo’s view is that curiosity isn’t just personality; it’s leverage. If you’re willing to do the research and the grind, you can get surprisingly far, even in areas that feel like they belong to “naturals.”
A Roundabout Path to Building Vanta
Cacioppo’s early years didn’t follow a neat Silicon Valley script. She explored widely: international internships, work that pulled her outside the U.S., and a constant habit of learning by doing. When she arrived at Stanford, she switched majors repeatedly—French, political science, international relations, creative writing, economics, computer science, and more—eventually deciding the most transferable skill she had was the ability to research and ramp up fast.
After earning her master’s in 2009, she joined Union Square Ventures in 2010. While working in venture, she started a side project that became a small business: sharing job leads and opportunities through email, then a newsletter, then a website that charged for listings. She’s said it brought in about $30,000 over a year—an early reminder that sometimes the simplest ideas are the most durable.
USV also gave her a front-row seat to founders: different personalities, different strengths, different ways of working. Over time, it chipped away at the myth she’d absorbed at Stanford—that founders had to look like a narrow archetype. You didn’t need to be a hoodie-wearing prodigy who started coding in kindergarten. You just needed a problem worth solving, and the stamina to keep going.
The False Starts That Taught the Right Lesson
Cacioppo’s first attempts at founding didn’t land. She experimented with products, including a book site she described as “Goodreads, but better, but worse,” and an Android app built with fellow Stanford alum Matt Spitz. After months of effort, they eventually sold that app for $20,000—hardly a breakout, but not a total loss either.
Next came a tutoring and coding-education idea, built the scrappy way: Craigslist posts, direct tutoring, referrals. It worked—until it didn’t scale. Eventually she took a job at Dropbox.
Dropbox, “Trustober,” and a Growing Obsession
In 2014, Cacioppo joined Dropbox as a product manager on a small team working on Dropbox Paper. The experience taught her how to ship inside a fast-moving company—and it also put security on her radar in a lasting way. Dropbox famously leans into security culture, including an October tradition it calls “Trustober,” focused on security awareness and practices.
After leaving, she watched a series of major breaches and hacks dominate headlines. Uber disclosed in 2017 that personal information tied to roughly 57 million riders and drivers had been accessed, and the company later agreed to a widely reported $148 million multistate settlement in 2018 tied to disclosure issues. Around the same time, John Podesta’s email was compromised through a phishing attack, and Equifax revealed in 2017 that attackers exposed the data of about 147 million people.
What bothered her wasn’t just the scale—it was the pattern. These weren’t underfunded teams operating in chaos. They were major organizations with resources. So why did they keep getting it wrong?
The Insight Behind Vanta
Cacioppo’s conclusion wasn’t “everyone is incompetent.” It was: online security must be harder than it looks—hard enough that even smart, motivated teams routinely miss basics. That puzzle became the seed of Vanta.
Starting in 2017, she and a former Dropbox colleague began interviewing startups about how they handled security and audits—evaluations of software systems, employee practices, and configurations against regulatory requirements. They heard a consistent refrain: everyone understood security mattered, but it kept slipping down the priority list behind building and selling the product.
Then a key detail snapped into place. In one conversation, Cacioppo learned that a company’s security rigor wasn’t just internal discipline—it could be a prerequisite for doing business. Certain partners demanded strong controls as the cost of entry. That suggested a broader, scalable opportunity: help companies build security and prove it, without turning compliance into a full-time, manual slog.
Compliance Automation as a Growth Lever
Traditional security pitches often lean on fear: buy this or something terrible will happen. Cacioppo’s approach aimed for something more practical—and more optimistic. Strong security unlocks deals, accelerates trust, and reduces friction. The point isn’t paranoia; it’s momentum.
That idea shaped the product: compliance automation software that helps organizations strengthen security controls and streamline the path to meeting common frameworks and requirements. Vanta is often described as a compliance automation platform, and the company’s broader ambition is to raise the baseline for what “good security” looks like across the internet.
Vanta was founded in 2018, and by 2019 it was publicly in-market and growing largely through word of mouth. In the years since, it has expanded rapidly; as of a July 2024 report, Vanta had more than 8,000 customers.
The Founder Trait That Shows Up Everywhere
The throughline in Cacioppo’s story isn’t a single flash of genius. It’s the willingness to do the unglamorous work: to interview, to research, to rebuild, to iterate, and to keep going even when the early versions don’t work. That’s what turned a kid experimenting with eBay and money orders into a CEO building infrastructure for trust online.
And in a world where security failures are constant, that stubborn curiosity may be the most useful trait of all.