Vanta handles/automates(ish) the compliance process for actual regulatory frameworks/programs (SOC2, ISO27001, GDPR, etc). From looking at their site/repo for Kexa, they don't have anything specific to this type of compliance.
In theory you could use Kexa to set up rules to help you achieve compliance, but you'd still need a Vanta or something else to help you understand if you're actually compliant with a given framework.
Unless you have a wild use-case that hasn't been tackled by what's out there, why on earth would rolling your own be a good idea? Building a proper, secure, and performant API gateway is NOT a few dozen lines of code.
There are some super robust (and fast) Go API gateways that take care of all the things you didn't think about when trying to roll your own.
Vanta handles/automates(ish) the compliance process for actual regulatory frameworks/programs (SOC2, ISO27001, GDPR, etc). From looking at their site/repo for Kexa, they don't have anything specific to this type of compliance.
In theory you could use Kexa to set up rules to help you achieve compliance, but you'd still need a Vanta or something else to help you understand if you're actually compliant with a given framework.