ThreatOpus

7.7easy start · #1 of 22
in Threat Modeling Software

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you worknot on record

Runs on api, Web. Paid plans from £129.99/mo.

ThreatOpus is ranked #1 of 22 in threat modeling software on The Geeks Club. It runs on API, Web. There is a free plan. A free trial is offered. Paid plans start at £129.99/mo.

ThreatOpus plans and pricing

All plans

Starter £129.99/mo £129.99/month 15 users · 10 team workspaces · 50 threat modelling generations/month · 10 repositories · All SCM and CI providers · Email support threatopus.com · 30 Sept 2026

Pro £299.99/mo £299.99/month 50 users · 25 team workspaces · 250 threat modelling generations/month · 50 repositories · 9 additional threat modelling frameworks · 8 hours expert consultation/month · Priority support threatopus.com · 30 Sept 2026

Enterprise Not published Custom Custom users and repositories · Unlimited workspaces and threat modelling generations · All SCM and CI providers · SSO · Priority support threatopus.com · 30 Sept 2026

Free Not published £0.00/month 3 users · 1 team workspace · 5 threat modelling generations/month · 1 repository · 1 SCM or CI provider · STRIDE threatopus.com · 30 Sept 2026

Compared on threat modeling software

Free plan: Yes
Attack-path analysis: Yes
Risk prioritization: Yes
Collaborative review: Yes
Templates and frameworks: Yes
Modeling methods: multiple
Deployment: both

Best ThreatOpus alternatives

See all 12

CAIRIS 0 of 4 in the starter kit Lesson 27.3 OWASP Threat Dragon 0 of 4 in the starter kit Lesson 37.3 ThreatModeler Nexus 0 of 4 in the starter kit Lesson 47.1 ThreatTree 0 of 4 in the starter kit Lesson 56.9 AWS Threat Composer 0 of 4 in the starter kit Lesson 66.8 IriusRisk 0 of 4 in the starter kit Lesson 76.8

The record

Product: ThreatOpus combines threat modelling with pull request security checks that return PASS, WARN, or FAIL outcomes in a CI pipeline.
Threat modelling: Teams can describe a system, import from OpenAPI or Terraform, or link a GitHub repository to generate STRIDE threats and track mitigations.
Methodologies: STRIDE is available on every plan, while Pro adds nine additional threat modelling frameworks.
PR security: Merge Guard evaluates pull requests against policy bundles and returns decisions with reasons posted to CI checks.
Integrations: Listed source control and CI integrations include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure DevOps, TeamCity, AWS CodeBuild, and Travis CI.
Notifications: ThreatOpus can send check outcome notifications to Slack and Microsoft Teams.
API keys: PR Security supports scoped API keys for custom pipeline steps or internal orchestration.
Retention controls: Project settings let users choose whether raw architecture input is stored, set its retention period, and decide whether structured threat output remains after raw input expires.
Data export and deletion: Signed-in users can export their data as JSON and delete content they created through Data controls.
Authentication: Accounts use email verification and password policies, sessions use httpOnly cookies, and optional two-factor authentication is available in user settings.
Subprocessors: ThreatOpus says it does not sell personal data and that customers can request a subprocessor list for security review.
Support: The pricing page lists email support on Starter and Pro, and priority support on Pro and Enterprise.
Intended users: ThreatOpus describes its intended users as security teams, security champions, and platform engineers seeking governed threat models and clear merge decisions.
Assessment limitation: ThreatOpus says generated threats and mitigations support security work but do not replace professional assessment, penetration testing, or formal risk acceptance.
Price from: £129.99/mo

Where it ranks on The Geeks Club

Best Threat Modeling Software in 2026#1 of 22

Is ThreatOpus yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThreatOpus

Sources

threatopus.com· checked 30 Sept 2026
threatopus.com/product· checked 30 Sept 2026
threatopus.com/faqs· checked 30 Sept 2026
threatopus.com/security· checked 30 Sept 2026
threatopus.com/pricing· checked 30 Sept 2026