New capabilities across the Risk Management and Security Assurance categories enable Drata customers to reduce manual work, increase time to value, and prove trust at scale
Drata, the leading agentic trust management platform, unveiled an industry-first set of agentic AI capabilities designed to convert trust from reactive proof into proactive, always-on execution. The release speaks to two critical enterprise challenges at the center of trust management: third-party risk management, which enables buyers to assess and monitor vendors at scale, and customer assurance, which empowers vendors to demonstrate trust through Trust Centers and streamlined security questionnaires.
Also Read: CIO Influence Interview with Gihan Munasinghe, CTO of One Identity
“We’re seeing a fundamental shift in how trust is proven and evaluated, with businesses worldwide now expected to continuously demonstrate trust at scale,” states Adam Markowitz, co-founder and CEO of Drata. “With our latest agentic AI capabilities, Drata moves beyond AI for piecemeal tasks to fully agentic workflow ownership, enabling organizations to autonomously assess third-party risk, service questionnaires at speed, and dynamically deliver trust information. That’s how trust becomes continuous, transparent, and autonomous.”
Releasing Agentic TPRM Assessment
Third-party risk programs today are overwhelmed by manual evidence collection and repetitive cycles: teams email vendors, stitch together stale artifacts and perform subjective reviews that slow procurement. Agentic TPRM Assessment flips that model.
Now available to all Drata customers, the agent automates criteria configuration and runs objective, criteria-driven security reviews that evaluate each control, provide reasoning and deep links to source evidence, and convert findings into follow-ups, tracked risks, and executive reports. Critically, the agent autonomously accesses vendor information hosted on Drata Trust Centers, automates access requests with explicit consent, ingests live trust artifacts and ensures assessments are based on current vendor evidence—not stale uploads.
For security teams, this agent eliminates back and forth cycles with vendors, enables repeatable up-market decisioning, and provides the ability to scale vendor coverage without proportional headcount increases.
“Agentic TPRM Assessment will transform how we run third-party reviews,” stated Sheron Chakalakal, Head of GRC at UiPath. “By ingesting live Trust Center evidence and producing criteria based evaluations, Drata eliminates the tedious back-and-forth with vendors and lets our team focus only on real risk—ultimately accelerating reviews and giving our procurement team the confidence to move faster.”
“Third-party risk is one of the most pressing challenges for every CISO,” said Scott Roberts, Chief Information Security Officer at UiPath. “Drata’s Agentic TPRM Assessment will fundamentally change how organizations operationalize third-party risk management — bringing rigor, consistency, and scale. Using Agentic AI, security teams can run assessments in minutes, achieve a more accurate risk posture across the supply chain, and operate at AI speed.”
Announcing Agentic Questionnaire Response
Traditionally, security questionnaires are a major bottleneck with messy spreadsheets, brittle mappings, and long subject matter expert handoffs causing a significant slowdown in deal velocity. Drata’s existing AI Questionnaire Assistance automatically intakes questionnaires and drafts answers grounded in approved Knowledge Base content, with every response tied to clear provenance. Now, Agentic Questionnaire Response builds on that innovation by orchestrating the full security questionnaire response lifecycle.
Currently available in beta access, Agentic Questionnaire Response streamlines and expedites answering, subject matter expert collaboration and reminders, review readiness, completion and final delivery—while keeping users firmly in control of all critical actions. Customers retain control of their questionnaire workflows by indicating how much the agent can do autonomously and maintaining key human-in-the-loop touchpoints.
Introducing AI Trust Center Setup
Building a Trust Center today is often a manual and slow process, requiring teams to write copy, attach artifacts, gather approvals for accuracy, and iterate for months before making it publicly available. AI Trust Center Setup will reduce this initial build time to hours.
AI Trust Center Setup ingests a customer’s artifacts and automatically generates a preview of the complete Trust Center in minutes, including mapped documentation and deep links. Customer assurance teams now act as editors-in-chief who review and publish—rather than spending time tracking down documents and waiting for approvals. New certifications and reports can be published with minimal effort, enabling companies to significantly reduce time to value and helping their buyers find trustworthy proof in seconds.
Building the Leading Agentic Trust Management Platform
Drata also announced the appointment of Bharat Guruprakash as Chief Product and Technology Officer. With more than 20 years of product and engineering leadership experience, Bharat joins Drata from Algolia, where as the Chief Product Officer, he led the company’s global product organization and helped build a platform of APIs that powers real-time, personalized digital experiences for enterprises worldwide. Previously, Bharat served as Vice President and General Manager of Twilio’s account security business and held leadership roles at Bitcasa, Samsung, and Digit International. At Drata, Bharat will lead the global product and engineering teams to advance the company’s agentic trust management platform.
See Drata’s Agentic AI in Action
Together, these agentic AI capabilities empower organizations to act on live evidence, automate governance-safe decisioning, and scale trust. To see these agentic AI capabilities live, stop by Booth #934 at the RSA Conference this week in San Francisco.
Catch more CIO Insights: CIO as Orchestrator of Cross-Functional Digital Strategy
[To share your insights with us, please write to psen@itechseries.com ]
