Tech riderRev. 30 Sept 2026
ThreatOpus
- 1Runs onAPI, Web
- 2CostsFree plan · free trial · paid from £129.99/mo
- 3Attack-path analysisYes
- 4Risk prioritizationYes
- 5Collaborative reviewYes
- 6Templates and frameworksYes
- 7Modeling methodsmultiple
- 8Deploymentboth
8 lines stated Written from the maker's own pages: threatopus.com
Overview
ThreatOpus is ranked #3 of 22 in threat modeling software on Specifiction. It runs on API, Web. There is a free plan. A free trial is offered. Paid plans start at £129.99/mo.
ThreatOpus plans and pricing
All plansStarter £129.99/mo £129.99/month 15 users · 10 team workspaces · 50 threat modelling generations/month · 10 repositories · All SCM and CI providers · Email support threatopus.com · 30 Sept 2026
Pro £299.99/mo £299.99/month 50 users · 25 team workspaces · 250 threat modelling generations/month · 50 repositories · 9 additional threat modelling frameworks · 8 hours expert consultation/month · Priority support threatopus.com · 30 Sept 2026
Enterprise Not published Custom Custom users and repositories · Unlimited workspaces and threat modelling generations · All SCM and CI providers · SSO · Priority support threatopus.com · 30 Sept 2026
Free Not published £0.00/month 3 users · 1 team workspace · 5 threat modelling generations/month · 1 repository · 1 SCM or CI provider · STRIDE threatopus.com · 30 Sept 2026
Compared on threat modeling software
- Free plan
- Yesthreatopus.com
- Attack-path analysis
- Yesthreatopus.com
- Risk prioritization
- Yesthreatopus.com
- Collaborative review
- Yesthreatopus.com
- Templates and frameworks
- Yesthreatopus.com
- Modeling methods
- multiplethreatopus.com
- Deployment
- boththreatopus.com
Facts
- Product
- ThreatOpus combines threat modelling with pull request security checks that return PASS, WARN, or FAIL outcomes in a CI pipeline.threatopus.com · 30 Sept 2026
- Threat modelling
- Teams can describe a system, import from OpenAPI or Terraform, or link a GitHub repository to generate STRIDE threats and track mitigations.threatopus.com · 30 Sept 2026
- Methodologies
- STRIDE is available on every plan, while Pro adds nine additional threat modelling frameworks.threatopus.com · 30 Sept 2026
- PR security
- Merge Guard evaluates pull requests against policy bundles and returns decisions with reasons posted to CI checks.threatopus.com · 30 Sept 2026
- Integrations
- Listed source control and CI integrations include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure DevOps, TeamCity, AWS CodeBuild, and Travis CI.threatopus.com · 30 Sept 2026
- Notifications
- ThreatOpus can send check outcome notifications to Slack and Microsoft Teams.threatopus.com · 30 Sept 2026
- API keys
- PR Security supports scoped API keys for custom pipeline steps or internal orchestration.threatopus.com · 30 Sept 2026
- Retention controls
- Project settings let users choose whether raw architecture input is stored, set its retention period, and decide whether structured threat output remains after raw input expires.threatopus.com · 30 Sept 2026
- Data export and deletion
- Signed-in users can export their data as JSON and delete content they created through Data controls.threatopus.com · 30 Sept 2026
- Authentication
- Accounts use email verification and password policies, sessions use httpOnly cookies, and optional two-factor authentication is available in user settings.threatopus.com · 30 Sept 2026
- Subprocessors
- ThreatOpus says it does not sell personal data and that customers can request a subprocessor list for security review.threatopus.com · 30 Sept 2026
- Support
- The pricing page lists email support on Starter and Pro, and priority support on Pro and Enterprise.threatopus.com · 30 Sept 2026
- Intended users
- ThreatOpus describes its intended users as security teams, security champions, and platform engineers seeking governed threat models and clear merge decisions.threatopus.com · 30 Sept 2026
- Assessment limitation
- ThreatOpus says generated threats and mitigations support security work but do not replace professional assessment, penetration testing, or formal risk acceptance.threatopus.com · 30 Sept 2026
Best ThreatOpus alternatives
See all 20 All accessCh 01 CAIRIS Free planAPILinux Free to start7.5 All accessCh 02 OWASP Threat Dragon Free planLinuxMac Free to start7.4 All accessCh 04 AWS Threat Composer APIBrowser 7.2 All accessCh 05 ThreatModeler Nexus Free planAPIself-hosted from $333.33/mo7.1 All accessCh 06 ThreatTree Free planAPIWeb from $29/mo6.9 All accessCh 07 IriusRisk Free planAPIself-hosted Free to start6.8
Where it ranks on Specifiction
Is ThreatOpus yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- threatopus.com· checked 30 Sept 2026
- threatopus.com/product· checked 30 Sept 2026
- threatopus.com/faqs· checked 30 Sept 2026
- threatopus.com/security· checked 30 Sept 2026
- threatopus.com/pricing· checked 30 Sept 2026