No Rules Required: New Model Questionnaire Builder

Build smarter, not harder

If you've ever tried to build a project questionnaire in IriusRisk using the rules engine, you’ll know just how powerful it can be. It is a widely used feature by our customers, however there was a lot of dependence from users to get help from an architect or technical expert in order to create these questionnaires. We recognized that this needed to change for more companies to be able to benefit from this capability.

That’s why we’re excited to introduce the Model Questionnaire Builder, a brand new way to create and manage threat modeling questionnaires that’s intuitive, flexible, and designed for real-world teams like yours.

Why questionnaires are king

Model Questionnaires are the gateway to understanding your project context-whether you're identifying technologies used, understanding deployment environments, or tailoring security questions to specific teams. And they’re not just helpful; they’re essential. Many of our customers were already going to great lengths to build them, that’s why we knew we had to simplify the experience.

What’s new (and why it matters)

With the new Model Questionnaire Builder, you can:

• Create questionnaires in minutes, not hours: No more navigating rule-based logic. Just create, add, and build.
• Empower your whole team: Security analysts, product managers, developers, anyone can now build or edit questionnaires without leaning on technical architects.
• Capture the right data, your way: Ask the questions that matter most to your projects. Tailor inputs to real-world use cases, not generic templates.
• Refine and iterate anytime: All changes are made in one place, and updates are fast and simple, so you’re never stuck with a static form that no longer fits.

Real teams, real impact

We’ve already seen users swapping out complex rules for this streamlined builder, and the results are clear: faster creation, better alignment with project needs, and more people contributing to the threat modeling process. This is exactly why we make these changes and iterations, to make them work in the real-world for true use cases.

Ready to try it?

If you’re already using IriusRisk, log in and give the Model Questionnaire Builder a spin (find it under the ‘Security content’ tab). Need help? Your Customer Success Manager is just a message away.

If you’re not a customer yet but curious how it works, let’s chat—we’ll walk you through a live demo and show you how it could work for your team. You can also download our Model Questionnaire One Pager here.