ThreatModeler + IriusRisk
Simple, transparent, fair licensing.
We only charge for what you use. Start free, scale to enterprise with full continuity across every plan.
SaaS · Free forever
For individuals exploring automated threat modeling. No credit card required — free for life.
- 3 active threat models
- Single user (limited collaboration)
- Intuitive diagram interface
- Out-of-the-box threat model templates
- Export diagram as XML
- Technical and compliance reports
- Monthly product updates
SaaS or On-Premise · Custom pricing
For large organizations that need scale, configuration, integrations, and platinum-tier support.
- Unlimited threat models — no maximum
- Unlimited users
- Import from external diagramming tools
- Fully configurable components, standards & libraries
- Reports in a variety of formats and an agent to help you build
- Monthly updates to Secure Design Graph
- Integrations with popular issue trackers
- OpenAPI access
- Dedicated Customer Success Manager
- Enterprise onboarding & platinum support
- Nexus MCP Server — embed threat modeling into IDEs, CI/CD pipelines & AI coding tools (Claude Code, Cursor, VS Code)
- Agentic threat model creation & updates from source code, IaC, and architecture context
- Secure Design Graph — single source of truth across applications, cloud, and AI systems
- BYOAI with governed, deterministic framework (policy guardrails, audit-ready outputs)
- Portfolio-wide risk analysis & executive reporting across business units
- OAuth 2.1 MCP security with RBAC — no hard-coded keys
Simple, transparent, fair licensing.
Everything you need to know before choosing a plan.
2,500+
Security requirements mapped
180+
Compliance frameworks supported
13
Granted patents
Compare plans
Everything side by side.
See exactly what's included across every tier.
Threat Modeling
Active threat models
3
Unlimited
Diagram interface
Import from external diagramming tools
Threat model templates library
Custom
Configurable components, standards & libraries
Agentic & MCP Capabilities
Nexus MCP Server
IDE integration (Claude Code, Cursor, VS Code)
CI/CD pipeline integration
Agentic threat model creation from source code & IaC
Secure Design Graph (single source of truth)
BYOAI with deterministic governance framework
Portfolio-wide risk analysis & AI reporting
Users & Access Control
Users
1
Unlimited
Role-based access control (RBAC)
SSO / SAML
OAuth 2.1 MCP security
Audit trails
Reporting & Export
Technical & compliance reports
Multi-format
Export (XML, full model with threats & countermeasures)
XML only
Full model
Executive & leadership reporting
Integrations & API
Issue tracker integrations
OpenAPI access
Support & Deployment
Monthly product & content updates
Dedicated Customer Success Manager
Enterprise onboarding & platinum support
Deployment
SaaS
SaaS or On-Premises
Merger FAQ
Common questions.
Everything you need to know before choosing a plan.
Still have a questions?
Can't find the answer to your question? Contact us and we'll get back to you as soon as possible!