1
Define your architecture:
Draw a diagram using drag and drop components, powered by our embedded draw.io diagramming tool, or answer our embedded questionnaires to define your application architecture.
How Our Platform Works
2
Generate your threat model in minutes:
Based on your diagram or questionnaire answers, IriusRisk uses its built-in security standards libraries to generate a list of the threats to the various components within your application. All of the threats are already linked to their appropriate countermeasures - so it can tell you instantly what you need to do to fix the problems.
3
Assess your threats and countermeasures:
You can instantly see real-time threat scores on your applications' threat models, and quickly generate reports. You can review this output and choose to accept or reject a countermeasure, based on the level of risk it presents to your business. The established countermeasures are then synced with your development team's issue tracker, such as Jira Cloud and Server, ServiceNow, Microsoft TFS, and Azure DevOps.
4
Your living, real-time threat model:
The two way sync between IriusRisk and your issue tracker will enable an always-on, real-time view of your progress and the risk ratings associated with your app. Developers get countermeasures inserted directly into their workflow without ever needing to leave the IriusRisk platform.
An overview of our plans
COMMUNITY (FREE)
SaaS | Free Lifetime SubscriptionPerfect for getting hands-on with threat modeling for the first time, or to combine your efforts with tooling
- 1 threat model
- Export Threats & Countermeasures as XLS
- Export threat models as XML
- Architectural diagramming with draw.io
- Limited technical and compliance reports
- Receive free community updates
ENTERPRISE
Available as SaaS or On-PremiseOur most popular option. Benefit from all of the powerful capabilities IriusRisk has to offer to automate and scale across your organisation
- All community capabilities, plus:
- Available for unlimited users
- Data imports, custom field definition or workflow management
- Syncs with popular issue trackers
- Dedicated Customer Success Manager
- Hands-on, assisted onboarding process
- API access
- Enhanced import and export of models, threats, test results and metadata
- Full custom field definition and workflow management
- All technical and compliance reports
Your new number one
threat modeling resource
Visit our Resources hub for threat modeling articles, thought leadership, how-tos, and on-demand sessions with leading authorities from the world of application security.
Experience the
Platform Live
Want to see IriusRisk in action and find out more about the transformative benefits that threat modeling can bring to your business?
Complete the form and a threat modeling specialist will reach out to you shortly to explore the benefits it will bring to your organisation.