I asked Claude to download the PDF mostly as an experiment, here is its explanation for how it did this:
Claude’s explanation
Vanta trust portals use a JavaScript single-page application that doesn’t expose direct PDF download links in the HTML. The PDF URL is only revealed through network traffic when the page loads.
I used Puppeteer to intercept network requests with content-type: application/pdf:
Here is a url where you can download the PDF.
I asked Claude to download the PDF mostly as an experiment, here is its explanation for how it did this:
Claude’s explanation
Vanta trust portals use a JavaScript single-page application that doesn’t expose direct PDF download links in the HTML. The PDF URL is only revealed through network traffic when the page loads.
I used Puppeteer to intercept network requests with
content-type: application/pdf:When the page loads, it fetches the PDF for its viewer, revealing the actual URL with these parameters:
rid- the document’s internal IDr- the trust report slug (from the HTML’sdata-slugidattribute)view=true- returns the PDF content