IriusRisk

Founded by Cristina Bentue & Stephen de Vries in 2012

Create and automate threat models for during design phase

Pricing model

Free Tier

Rating

★ People love it

Time to value

Quick Setup (< 1 hour)

You can use IriusRisk to build threat models for software applications and infrastructure, identifying security risks before code is written. It uses AI to generate architecture diagrams, analyze threats, and suggest security controls. Teams can integrate it with developer tools like Jira, scan Infrastructure as Code, and apply compliance frameworks automatically. Both security professionals and developers can use it without deep threat modeling expertise, since the built-in libraries and guidance handle the security knowledge.

What IriusRisk does

Generate architecture diagrams from text descriptions using AIAutomatically assign security controls to identified threatsSync security requirements directly into Jira as ticketsScan Infrastructure as Code files for security threatsMap threat models to compliance frameworks like NIST or ISO 27001Review and approve AI-suggested threats and mitigationsBuild custom security content libraries for internal useTrack remediation progress across multiple product teamsAI assistant named Jeff that generates threat model diagrams from text prompts or image uploadsMCP-enabled integration that connects AI agents to a governed threat modeling frameworkAutomated threat and control recommendations based on architecture componentsBuilt-in security content libraries including AI-specific threat librariesBi-directional integration with developer tools like Jira so threats sync both waysInfrastructure as Code scanning to detect threats in Terraform and CloudFormation filesSmart Views that filter AI outputs to show only what matters to each user roleFree Community Edition with lifetime access to core threat modeling features