For ThreatModeler Customers
The ThreatModeler you know, now Nexus.
Your upgrade from version 7.5 to ThreatModeler Nexus is an evolution of the platform you already use — seamless, free, and managed by your Customer Success team.
What the merger made possible
Two leaders. One thing neither could build alone.
ThreatModeler and IriusRisk had each separately built highly capable platforms for the enterprise. Together, we built what neither could create independently: a single governed platform that connects system architecture to AI, runs continuously across the SDLC, and makes defensible threat modeling accessible to every team. The ThreatModeler platform you already trust is the foundation it's built on.
The Secure Design Graph
Over a decade of verified relationships between components, threats, controls, and compliance — consolidated into one connected asset no competitor can rebuild from public sources.
Agentic AI, built in
Three specialized agents that model your architecture, enrich the Graph, and generate reports continuously — with no blank canvas or manual diagramming to start.
Enterprise at scale
MCP server, RBAC, Bring Your Own AI, and 180+ compliance frameworks — all governed, auditable, and built for the way the largest enterprises actually operate.
Your questions
A safe home for your questions.
Everything you need to know about what changes, what doesn't, and what comes next.
Still have a questions?
Can't find the answer to your question? Contact us and we'll get back to you as soon as possible!
What this means for you
The short version: nothing you rely on breaks.
The upgrade to ThreatModeler Nexus is designed to be seamless. Your subscription, your team, and your work product are protected — and the platform you know carries forward with more capability built in.
01
A free, seamless upgrade
v7.5 to ThreatModeler Nexus (v26.1) is delivered free, managed by CS, with no action required on your part.
02
The platform you know
An evolution of your current platform, not a new system to learn. Your workflows carry forward.
03
Your work stays intact
Your existing threat models, content, and configurations are preserved through the upgrade.
04
Your team and pricing hold
Same CSM, TAM, support, and SLAs. Your current subscription pricing and licensing are unchanged.
What you get
A practical way to learn, model, and share secure design decisions.
Community Edition is built for practitioners, students, developers, architects, and security teams who want to experience threat modeling before scaling it across a program.
01
Cloud made systems harder to reason about.
Modern architectures span APIs, services, identities, data stores, cloud infrastructure, and constantly changing delivery pipelines.
02
AI made behavior harder to predict.
AI-generated code and agentic workflows introduce non-determinism. Security teams need to understand intent, not just scan artifacts.
03
The SDLC now runs at AI speed.
AI coding assistants ship more code and more pull requests every day. Secure design can no longer sit in an early-stage review; it has to happen during build, where software is written and shipped.
04
So we made threat modeling continuous.
ThreatModeler Nexus is governed, repeatable, and architecture-aware, integrated into the way software is actually built rather than bolted on after.
A simple starting point
Use the four-question framework to make threat modeling approachable.
Community Edition helps new and experienced practitioners move from blank page to structured security thinking: architecture, threats, mitigations, and validation.
01
What are we working on?
Capture the system, data flows, components, and trust boundaries.
02
What can go wrong?
Identify relevant threats based on architecture and system context.
03
What are we going to do about it?
Map threats to mitigations, controls, and security requirements.
04
Did we do a good job?
Validate the design, document decisions, and share the outcome.
What this means for customers.
The merger brought together two proven threat modeling teams without disrupting the customers who depend on them. Your contracts, support, and success teams stay in place. What changes is how much more the platform can do.
Brought together
One company.
ThreatModeler and IriusRisk combined two leading teams, two patent portfolios, and over a decade of curated security knowledge into a single organization.
Built
ThreatModeler Nexus.
Architecture, intent, AI, governance, and developer workflows in one platform, grounded in the Secure Design Graph and driven by three specialized agents.
Now
Securing the AI SDLC.
ThreatModeler and IriusRisk combined two leading teams, two patent portfolios, and over a decade of curated security knowledge into a single organization.
Continuity in Your Success
The same teams stay focused on your success.
Zero Loss, Full Migration
Your existing work carries forward, with no capability lost.
Next-Gen AI Platform
You gain agentic AI, the Secure Design Graph, and MCP-connected workflows in one governed platform.
Leadership team
The people behind the platform.
The combined company brings together experienced leaders from both organizations, united around one platform for continuous, governed, architecture-aware security.
Sam Keller
Senior Security Architect
Sarah Wheeler
Chief People Officer
Ben Oster
Chief Product Officer
Stephen De Vries
Chief Strategy Officer
Pratik Thakker
Chief Information Security Officer
Anthony Lombardo
Vice President, Marketing
Mike LeBlanc
Chief Revenue Officer
Krishna Bala, Ph.D.
Chief Technology Officer
Karen Higgins
Chief Financial Officer
Archie Agarwal
Founder & Chief Innovation Officer
Kevin Gallagher
Chief Executive Officer