DevSecOp Tools and Threat Modeling - A Brief History
As the years have passed, threat modeling has been widely adopted, and is considered a valued proactive security technique. Businesses are seeing the benefits across their SDLC when effectively implementing a threat modeling program, not just at the design phase.
As of 2024 IriusRisk is listed on the CYBERSYMPOSIUMS Application Security Technology Map under the category of Threat Modeling: https://thedemoforum.com/page/cybersecuritymarketmaps/map-database/app-api-db/Appsec-standalone-map/.
This great case study in 2023 by practical-devsecops.com highlighted how ABN Amro chose IriusRisk to move it's manual threat modeling processes, into an automated and repeatable program: https://www.practical-devsecops.com/threat-modeling-in-practice/.
In 2021 we were named in the Top 10 Threat Modeling Tools in 2021 by Spiceworks https://www.spiceworks.com/it-security/vulnerability-management/articles/top-threat-modeling-tools/.
But we were even on the AppSec radar in 2018 when Whitesource put us as the first Tool for Dev Teams: 9 Great DevSecOps Tools for Dev Teams to Integrate Throughout the DevOps Pipeline https://medium.com/@WhiteSourceSoft/9-great-devsecops-tools-for-dev-teams-to-integrate-throughout-the-devops-pipeline-f3ecd202b1ea.
Why do DevSecOps Teams need threat modeling?
We’ve been around since 2015, and are pleased to see the world of cybersecurity embrace and accelerate its use of threat modeling, especially for stretched DevSecOps teams. 50% of software vulnerabilities are flaws at the design stage. It is 100x more expensive to fix these flaws in production. We are here to change that, to empower development teams to consider security by design and by default. SEcurity teams rely on us to seamlessly align to their industry standards, while Operations know that only secure code is being deployed. All whale seeing a true view of the business architecture and associated risks to mitigate.
Want to learn more?
Take a look at our product page here: https://www.iriusrisk.com/threat-modeling-platform. Or see our product in action on our YouTube page. https://www.youtube.com/@iriusrisk/featured
About the author...
IriusRisk Team
The Threat Modeling Experts
IriusRisk
The IriusRisk Team represents the collective expertise and official voice of the company, driven by security researchers, product managers, and engineering leaders dedicated to the automation of threat modeling. This content is curated by the company's core staff to deliver official news, product roadmaps, and feature updates. The team's mission is to ensure every release and announcement is delivered with transparency, technical accuracy, and strategic alignment with the Secure by Design philosophy.
.jpg)
