ThreatModeler + IriusRisk Merger

What was announced?

ThreatModeler and IriusRisk are merging to form a single global leader. This brings together the industry’s two leading threat modeling platforms under one organization. Both products continue to be fully supported, and there is no disruption to customers.

When did the transaction close?

The transaction was completed December 30, 2025. Day-to-day customer experience remains unchanged while integration planning progresses. Any future updates will be communicated through official channels.

Why did ThreatModeler and IriusRisk merge?

This move combines two highly complementary platforms and teams to create the global leader in AI-driven threat modeling. As AI-driven development and cloud-native systems accelerate, organizations need stronger, more scalable approaches to secure-by-design.

By uniting strengths in intelligent automation, cloud visibility, and shift-left simplicity, the combined company is positioned to deliver deeper innovation and broader value to customers and the market.

What does this mean for customers?

There is no disruption to how customers use their current product or interact with their existing support teams – contracts and support relationships remain intact. Over time, customers will benefit from increased investment, expanded capabilities, and a stronger combined innovation roadmap.

How does this benefit customers?

Customers gain:

● Continued support for their existing product

● Increased investment in R&D and security innovation

● Broader platform capabilities and complementary workflows

● Expanded regional coverage and support resources

● A strengthened partner ecosystem

● Access to a larger global community of threat modeling practitioners

Will either product be discontinued or replaced?

Through inputs from our customers, advisors, and community, we will merge the capabilities of the two current products into a single, market-leading, best-in-class platform, with a seamless upgrade path.

Does this change how my data is stored, processed, or protected?

No. This does not change how customer data is stored, processed, or protected. All existing security controls, data protection practices, and compliance commitments remain in place. If changes are considered in the future, they will be communicated clearly and implemented with appropriate safeguards.

Will my existing integrations and APIs continue to work?

Yes. All existing integrations and APIs continue to function as they do today. Any future enhancements or consolidation of integration capabilities will be communicated in advance and approached in a way that minimizes impact.

How will customer support be handled going forward?

Customers can continue working with the same support teams and account contacts they rely on today. Both platforms will maintain their established support structures while integration planning progresses.

What does this mean for partners?

Partners gain access to a stronger combined offering, a broader ecosystem, and expanded global reach. This creates new opportunities for integrations, services, co-selling, and customer expansion. Existing partnerships remain unchanged and fully supported.

What does this mean for prospects currently evaluating a platform?

Prospects evaluating either platform can continue their evaluations without disruption. Both platforms remain fully supported and available. This should strengthen long-term confidence by unifying complementary capabilities under one organization and expanding the innovation roadmap.

What happens to projects that are currently in progress

All active customer engagements—including implementations, proofs of concept, and renewals—will continue as planned. The same teams, timelines, and commitments remain in place, and there is no disruption to in-flight work.

What benefits does this create for the broader market?

This merger establishes a single, global leader in AI-driven threat modeling at a time when organizations must modernize secure-by-design practices to keep pace with AI and cloud adoption. The combined company delivers greater clarity, innovation, and capability to the market, helping enterprises reduce risk and improve development speed.

Will the company name change?

The combined organization will operate under the ThreatModeler brand.

How does this affect the existing communities around each platform?

We will continue to invest in the community, and are excited to join the ThreatModeler community together with the Threat Modeling Connect community.

Who should customers contact with further questions?

Customers should continue working with their existing Customer Success Manager or account contact. The support experience remains unchanged.

Who should partners contact with questions?

Partners should reach out to their established partner or alliances contact. A partner communication channel remains fully active and supported.

How should media or analyst inquiries be handled?

Media and analyst inquiries should be directed to the ThreatModeler Communications team: marketing@threatmodeler.com

Where can I find more information?

Additional details will be shared as integration planning progresses. Updates will be posted through official ThreatModeler and IriusRisk communication channels and customer engagement teams.

Are the financial terms of the transaction being disclosed?

ThreatModeler and IriusRisk are both privately held companies. The financial terms of the transaction were not disclosed.

‍

‍