Skip to content
SPECIFICTION
Get listed

IriusRisk

iriusrisk.com

Free plan WebAPISelf-hosted
Visit iriusrisk.com
Spec score 7.8 #7 of 23 in Threat Modeling Software

What it is

IriusRisk is an AI threat-modeling tool for planning secure software design. It helps teams build threat models, identify threats and countermeasures, and surface vulnerabilities and compliance gaps. Its Jeff AI Assistant can turn user stories, documentation, meeting transcripts, or code into a diagram showing threats and security controls. A built-in knowledge base supports applying standards such as PCI DSS, NIST, and GDPR, marking aligned countermeasures as required. Integrations include Jira, ServiceNow, Azure DevOps, Jenkins, GitHub, OWASP ZAP, Terraform, AWS CloudFormation, and Open API; users can also import diagrams from draw.io, Visio, Lucidchart, and Microsoft Threat Modeling Tool. The free Community Edition costs nothing and allows one user and three active threat models. Enterprise has no listed price and is offered as SaaS or on-premise. IriusRisk says its cloud services are not designed or certified for certain sensitive data, including PHI and GDPR special category data.

Spec sheet

Purpose
IriusRisk is an AI threat modeling tool for secure software design.Read 2 Oct 2026 · iriusrisk.com
Intended users
The site describes the product for security teams, developers, CISOs, and compliance teams.Read 2 Oct 2026 · iriusrisk.com
Deployment
The Enterprise plan is offered as SaaS or on-premise.Read 2 Oct 2026 · iriusrisk.com
Integrations
Listed integrations include Jira, ServiceNow, Azure DevOps, Jenkins, GitHub, OWASP ZAP, Terraform, AWS CloudFormation, and an Open API.Read 2 Oct 2026 · iriusrisk.com
Compliance
The built-in knowledge base supports applying standards such as PCI DSS, NIST, and GDPR to threat models, with countermeasures marked required where aligned.Read 2 Oct 2026 · iriusrisk.com
Support
IriusRisk offers Standard, Gold, and Platinum support plans with varying availability, response times, and support channels.Read 2 Oct 2026 · iriusrisk.com
Headquarters
Cuarte (Huesca), SpainRead 23 Sep 2026 · iriusrisk.com
AI assistant
Its Jeff AI Assistant can use user stories, documentation, meeting transcripts, or code to generate a threat model diagram with threats and security controls.Read 2 Oct 2026 · iriusrisk.com
Data security
The trust hub says security measures include encryption in transit and at rest, access controls, regular penetration testing, and incident response procedures.Read 2 Oct 2026 · iriusrisk.com
Diagram imports
IriusRisk says users can import diagrams from draw.io, Visio, Lucidchart, and Microsoft Threat Modeling Tool.Read 2 Oct 2026 · iriusrisk.com
Free edition limits
Community Edition is described as a free subscription for individuals, with one user and three active threat models.Read 2 Oct 2026 · iriusrisk.com
Security certification
IriusRisk states it holds ISO/IEC 27001 certification and maintains independently audited controls to protect customer data.Read 2 Oct 2026 · iriusrisk.com
Sensitive data limit
IriusRisk says its cloud services are not designed or certified to process PHI, specially treated financial data, IDs, or GDPR special category data.Read 2 Oct 2026 · iriusrisk.com
Threat models
The platform helps users create threat models, identify threats and countermeasures, and see vulnerabilities and compliance gaps.Read 2 Oct 2026 · iriusrisk.com

Plans and prices

Community Edition Free 3 active threat models · One user with limited collaboration · Templates and libraries · XML diagram export · Technical and compliance reports Read 2 Oct 2026 · iriusrisk.com
Enterprise Priced on request SaaS or on-premise · Purchased threat models with no maximum · Unlimited users · Configurable · OpenAPI · Dedicated Customer Success Manager · Enterprise onboarding Read 2 Oct 2026 · iriusrisk.com

Every IriusRisk plan and price →

Strong points and limits

Strong points

  • Jeff AI Assistant generates threat model diagrams.
  • Knowledge base covers PCI DSS, NIST, and GDPR.
  • Imports diagrams from four listed tools.
  • Enterprise supports SaaS or on-premise deployment.

Limits

  • Community Edition allows one user.
  • Free edition is limited to three active threat models.
  • Cloud services are not designed for certain sensitive data.

Who it suits

IriusRisk suits security teams, developers, CISOs, and compliance teams that need to model threats and align controls with standards. The free edition is limited to one user and three active threat models.

Verdict

IriusRisk combines AI-assisted threat modeling with standards, integrations, and diagram imports. Check the Community Edition limits and sensitive-data restrictions against your needs.

Where Specifiction places it

Alternatives to IriusRiskAll alternatives →