Optro, an AI-powered GRC Intelligence Platform, has released new autonomous agent products designed to support risk teams across the enterprise.

“Our agents work inside your live, permissioned context, taking on real-world workflows to deliver the exact business outcomes you need—so teams can move fast with a human in control,” said Happy Wang, chief product and technology officer at Optro.
Optro’s GRC Intelligence Platform
Unlike generic AI models, Optro provides purpose-built GRC capabilities that operate strictly within team-defined guardrails and risk appetites.
Agentic capabilities include:
- Autonomous Testing: Optro’s agentic testing engine now supports operational audit testing across all control types, in addition to SOX.
- Agentic Stakeholder Management: Reduces evidence follow-up by helping preparers clarify requests and address gaps before submission.
- Agentic Risk Assessment Scoring: Analyses selected Optro data and recommends initial scores with supporting evidence.
- Agentic Compliance: Enables continuous compliance by having AI agents manage framework scoping, evidence collection, and control evaluation, while teams retain responsibility for judgments and attestations.
- Agentic TPRM: Provides a structured vendor assessment workflow, with AI agents handling onboarding and due diligence, while teams configure policies and evaluate results.
- Agentic AI Governance: Automated intake pre-populates AI system records from existing documentation, and the evidence evaluator identifies which controls are already satisfied.
Carmen Lam, VP of Internal Audit and Compliance at Klaviyo, said: “With Optro’s autonomous testing, we no longer bundle testing into a single point in time. We now test throughout the year, which means we catch issues earlier and work with control owners to fix them sooner.


















