ThreatModeler Acquires IriusRisk to Redefine Enterprise Threat Modeling

ThreatModeler Acquires IriusRisk to Redefine Enterprise Threat Modeling

Read time: 3 minutes

ThreatModeler, the innovation leader in AI-driven threat modeling, today announced it has acquired IriusRisk, bringing together the top two enterprise threat modeling platforms to expand global scale, accelerate innovation, and deliver greater customer value in a rapidly growing $30 billion application security market.

This acquisition creates an unmatched proprietary threat-model dataset that accelerates how enterprises identify, prioritize, and mitigate application risk. By combining the two market leaders, ThreatModeler strengthens the software development lifecycle for both security architects and developers while enabling secure AI and cloud adoption at scale. Customers are already realizing up to 10x productivity gains and 50% cost reductions through scalable, automated threat modeling.

The acquisition positions ThreatModeler as the global leader in threat modeling, trusted by Fortune 1000 companies across financial services, pharmaceuticals, technology, and critical industrial manufacturing sectors in North America, EMEA, and Asia. Enterprises using the platform consistently report strong return on investment through faster development cycles, reduced security risk, and lower operational costs.

“With the addition of IriusRisk, we’re building the global leader in the threat modeling market to meet rapidly expanding demand,” said Matt Jones, CEO of ThreatModeler. “Together, we deliver customers greater innovation, expanded support, and more scalable solutions that make secure-by-design a sustainable, continuous practice at enterprise scale.”

Demand for scalable threat modeling solutions has never been higher. Organizations across every industry are seeking ways to strengthen cybersecurity practices while managing increasing application complexity. With hundreds of customers, the largest professional threat modeling communities, and tens of thousands of threat models built, the combined organization is uniquely positioned to democratize secure-by-design practices.

By virtually scaling internal security and development teams through automation and AI, enterprises can protect critical applications and infrastructure without significantly increasing headcount or cost.

“This milestone accelerates our vision to protect customers with an AI-native platform powered by the industry’s largest proprietary dataset,” said Archie Agarwal, Founder and Chief Innovation Officer of ThreatModeler. “By combining our teams and technology, we’re enabling faster innovation, deeper intelligence, and a security partner built to scale with our customers.”

“This is an exciting leap forward for the industry, as both our companies share a passion for helping enterprises start left with their secure-by-design approach,” added Stephen de Vries, CEO of IriusRisk. “By joining forces, we are better positioned to deliver on that shared mission.”

Together, ThreatModeler and IriusRisk bring complementary strengths that redefine how threat modeling is practiced at enterprise scale. ThreatModeler’s AI-driven platform empowers security architects with speed, consistency, and actionable insights, while IriusRisk’s strong engagement with development and architecture teams has fueled widespread adoption and created the industry’s most active threat modeling community.

The combined platform expands access to critical expertise, embeds threat modeling across the entire software lifecycle, and delivers intelligent automation. Customers have already reported building threat models twice as fast and scaling adoption by more than tenfold.

“Cybersecurity is a nonstop arms race, now accelerated by AI. Threat modeling is essential for teams that want to proactively protect enterprise systems and applications,” said John DeLoche, Co-Founder and Managing Partner at Invictus Growth Partners. “This acquisition unites leading threat-modeling expertise and creates the industry’s largest dataset, giving enterprises a decisive advantage in the AI era.”

The combined company is majority owned by Invictus Growth Partners, with Paladin Capital Group, the longstanding investor in IriusRisk, remaining a shareholder. Together, the organizations are positioned to drive the next generation of AI-native, scalable, and enterprise-ready threat modeling solutions.