TrustCloud Updates TrustLens with Agentic AI to Automate Third-Party Risk Management
TrustCloud has updated its TrustLens platform with agentic AI designed to automate third-party risk assessments and shift the industry away from static, questionnaire-based models.
TrustCloud has introduced new agentic AI capabilities to its TrustLens third-party risk management (TPRM) platform, aiming to replace traditional, questionnaire-heavy assessment models with automated, continuous risk monitoring. The company claims this shift allows organizations to move away from rigid, process-driven workflows toward outcome-oriented risk reduction Help Net Security.
The technical core of this update involves an AI agent designed to perform deterministic risk assessments by combining specialized AI models with predefined rules. According to TrustCloud, this agent automates more than 70% of the assessment workload, while maintaining human oversight for final approvals and decision-making Help Net Security. By integrating inside-out and outside-in data, the system generates intelligent risk summaries and provides continuous, auditable proof of a vendor's security posture, rather than relying on static, point-in-time attestations.
The platform’s capabilities include automated scoping based on inherent risk tiers, which allows organizations to move away from "one-size-fits-all" questionnaires. The agent also facilitates real-time analysis of vendor profiles, gaps, and evidence, which is intended to reduce the manual back-and-forth communication typically associated with vendor risk management Help Net Security. Furthermore, the system enables proactive monitoring of security drift, allowing teams to track new risks that emerge after an initial assessment is completed.
The impact of these capabilities was demonstrated in a recent deployment with a Global 2000 life sciences customer. By leveraging the TrustLens AI agent, the organization reportedly assessed over 5,000 suppliers in six months, marking a 10x improvement in speed. Additionally, the company expanded its vendor coverage from 20% to 92% of its ecosystem and identified four times as many critical vendor gaps compared to its previous manual processes Help Net Security.
Jikku Venkat, Head of Product for Customer Assurance and Third-Party Risk at TrustCloud, noted that the industry has historically prioritized rigid adherence to assessment processes over actual risk reduction. By automating the assessment process, TrustCloud intends to provide CISOs with the speed, accuracy, and coverage required to manage complex supply chains effectively Help Net Security.
This development reflects a broader trend in the cybersecurity industry toward the automation of governance, risk, and compliance (GRC) tasks. As organizations struggle to manage increasingly large and dynamic vendor ecosystems, the shift toward agentic AI represents an attempt to scale risk management operations without linearly increasing headcount. Future developments in this space will likely continue to focus on integrating real-time data feeds to maintain a 24/7 view of third-party security postures Help Net Security.