IriusRisk

6.8easy start · #7 of 22
in Threat Modeling Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, self-hosted, Web.

IriusRisk is ranked #7 of 22 in threat modeling software on The Geeks Club. It runs on API, Self-hosted, Web. There is a free plan.

IriusRisk plans and pricing

All plans

Community Edition Free 3 active threat models · One user with limited collaboration · Templates and libraries · XML diagram export · Technical and compliance reports iriusrisk.com · 2 Oct 2026

Enterprise Not published SaaS or on-premise · Purchased threat models with no maximum · Unlimited users · Configurable · OpenAPI · Dedicated Customer Success Manager · Enterprise onboarding iriusrisk.com · 2 Oct 2026

Compared on threat modeling software

Free plan: Yes
Risk prioritization: Yes
Collaborative review: Yes
Templates and frameworks: Yes
Modeling methods: multiple
Deployment: both

Best IriusRisk alternatives

See all 20

ThreatOpus 0 of 4 in the starter kit Lesson 17.7 CAIRIS 0 of 4 in the starter kit Lesson 27.3 OWASP Threat Dragon 0 of 4 in the starter kit Lesson 37.3 ThreatModeler Nexus 0 of 4 in the starter kit Lesson 47.1 ThreatTree 0 of 4 in the starter kit Lesson 56.9 AWS Threat Composer 0 of 4 in the starter kit Lesson 66.8

The record

Purpose: IriusRisk is an AI threat modeling tool for secure software design.
Threat models: The platform helps users create threat models, identify threats and countermeasures, and see vulnerabilities and compliance gaps.
AI assistant: Its Jeff AI Assistant can use user stories, documentation, meeting transcripts, or code to generate a threat model diagram with threats and security controls.
Compliance: The built-in knowledge base supports applying standards such as PCI DSS, NIST, and GDPR to threat models, with countermeasures marked required where aligned.
Integrations: Listed integrations include Jira, ServiceNow, Azure DevOps, Jenkins, GitHub, OWASP ZAP, Terraform, AWS CloudFormation, and an Open API.
Diagram imports: IriusRisk says users can import diagrams from draw.io, Visio, Lucidchart, and Microsoft Threat Modeling Tool.
Security certification: IriusRisk states it holds ISO/IEC 27001 certification and maintains independently audited controls to protect customer data.
Data security: The trust hub says security measures include encryption in transit and at rest, access controls, regular penetration testing, and incident response procedures.
Sensitive data limit: IriusRisk says its cloud services are not designed or certified to process PHI, specially treated financial data, IDs, or GDPR special category data.
Support: IriusRisk offers Standard, Gold, and Platinum support plans with varying availability, response times, and support channels.
Intended users: The site describes the product for security teams, developers, CISOs, and compliance teams.
Free edition limits: Community Edition is described as a free subscription for individuals, with one user and three active threat models.
Headquarters: Cuarte (Huesca), Spain
Price from: Free

Where it ranks on The Geeks Club

Best Threat Modeling Software in 2026#7 of 22

Is IriusRisk yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote IriusRisk

Sources

iriusrisk.com· checked 2 Oct 2026
iriusrisk.com/threat-modeling-platform· checked 2 Oct 2026
iriusrisk.com/integrations· checked 2 Oct 2026
iriusrisk.com/trust· checked 2 Oct 2026
iriusrisk.com/plans· checked 2 Oct 2026