Optro has announced the launch of an expanded set of autonomous agentic products to empower risk teams across the enterprise. Unveiled at CRX (formerly Audit & Beyond), Optro’s annual user conference, the announcement marks the formal arrival of GRC Intelligence, the next evolution of GRC: a trusted system of record, agentic AI that acts on that data, and governance over all the AI operating within the enterprise.
Optro’s GRC Intelligence Platform is grounded in domain-trained precision, human-led control, and responsible governance. Rather than adapting generic AI models, Optro is the only GRC Intelligence Platform that delivers purpose-built GRC capabilities that operate strictly within team-defined guardrails and risk appetites. Every agent action, decision, model entry, and evidence trail is fully logged, cited, and audit-ready to ensure total enterprise confidence.
“Every risk leader is asking two questions: what are your AI agents standing on, and how are you governing the AI running across your enterprise?” said Happy Wang, Chief Product and Technology Officer at Optro. “We built both into one platform with intention. Our agents work inside your live, permissioned context, taking on real-world workflows to deliver the exact business outcomes you need—so teams can move fast with a human in control. We don’t just claim quality, we evidence it: from verifiable execution that yields high-value results, to thousands of tests before any release, and continuous monitoring once agents are live in your own environment, so your data stays with you. That is GRC Intelligence.”
Agentic capabilities announced today include:
- Autonomous testing: Optro’s leading agentic testing engine now extends beyond SOX to operational audit testing across all control types, delivering full population coverage via Optro Analytics and giving auditors time back for judgment-based strategic work. Upcoming platform enhancements will soon introduce automated evidence collection to further streamline audit workflows. In its first three months using Autonomous Testing, Reddit’s internal audit team automated 175 controls, more than 40 percent of its SOX scope, reducing testing time per control by 60 percent on average. The team has since expanded agentic testing to over 75 percent of its SOX controls and to other recurring testing programmes.
- Agentic stakeholder management: Reduces evidence follow-up by helping preparers clarify requests and address gaps before submission, so auditors spend less time chasing evidence and get to testing faster.
- Agentic risk assessment scoring: Analyses selected Optro data and recommends starting scores with supporting evidence. Audit teams spend less time on manual analysis and gain a faster, more consistent view of risk for planning and prioritisation.
- Agentic compliance: Turns compliance into a continuous programme, where AI agents run framework scoping, evidence collection, and control evaluation across every framework, while teams make judgments and own every attestation.
- Agentic TPRM: Delivers a prescriptive vendor assessment workflow where AI agents perform onboarding and due diligence tasks while teams configure policy and evaluate outcomes.
- Agentic AI governance: Automated intake pre-populates AI system records from existing documentation, and the evidence evaluator flags which controls are already satisfied. In addition, AI Discovery, previewing ahead of 2027 availability, surfaces shadow AI enterprise-wide.
GRC was built for an era where the process of managing risk was predictable: document it, mitigate it, move on. Those days are over. The world now demands that GRC tell you what happens next. Optro’s GRC Intelligence platform addresses this by building a system of action using autonomous AI agents to execute end-to-end workflows in real time.
Discussion about this post