January 2026
EXITS
ThreatModeler Acquires IriusRisk to Build Seamless Security For Enterprises In the AI Coding Era
ThreatModeler, the innovation leader in AI-driven threat modeling, today announced it has acquired IriusRisk, bringing together the top two enterprise threat modeling platforms to expand global scale, accelerate innovation, and deliver greater customer value in a surging $30 billion application security market.
The acquisition positions ThreatModeler as the global leader in threat modeling, trusted by Fortune 1000 companies across the financial services, pharmaceutical, technology, and critical industrial manufacturing industries in North America, EMEA, and Asia. Customers have reported ROI, including 10x productivity improvements and a fifty percent cost savings within the first year of adopting ThreatModeler’s platform.
“With the addition of IriusRisk, we’re building the global leader in the threat modeling market to meet rapidly expanding demand,” said Matt Jones, CEO of ThreatModeler. “Together, we deliver customers greater innovation, expanded support, and more scalable solutions that make secure-by-design a sustainable, continuous practice at enterprise scale.”.
The demand for a scalable threat modeling solution has never been higher as companies across every industry and segment look to scale their cybersecurity practices and teams. With hundreds of customers, the largest professional threat modeling communities, and tens of thousands of threat models built, the combined organization is uniquely positioned to democratize secure by design practices, enabling enterprises to virtually scale their internal security and development teams while protecting all critical applications and infrastructure.
“This is an exciting leap forward for the industry, as both our companies share a passion for helping enterprises start left with their secure by design approach,” added Stephen de Vries, CEO of IriusRisk. “By joining forces, we are better positioned to deliver on that shared mission.”
Daniela Coutinho, Principal at Bright Pixel, says: “This milestone reflects years of focus, resilience, technical excellence, and outstanding leadership from the IriusRisk founders and team. We congratulate everyone on this successful outcome, which will enable the company to accelerate innovation and deliver even greater value to customers.”
Together, ThreatModeler and IriusRisk bring complementary strengths that redefine how threat modeling is practiced at enterprise scale. ThreatModeler’s AI-driven platform enables security architects to operate with speed, consistency, and impact across complex environments, while IriusRisk’s deep engagement with development and architecture teams has driven broad adoption and the industry’s most active threat modeling community. The combined platform expands access to critical expertise, embeds threat modeling across the software lifecycle, and delivers intelligent automation that has already helped customers build threat models twice as fast and scale adoption by more than tenfold.
The combined company is majority owned by Invictus Growth Partners, with Paladin Capital Group, the longstanding investor in IriusRisk, remaining a shareholder.
ThreatModeler
ThreatModeler revolutionizes application and cloud security by making threat modeling a sustainable, high-velocity, and continuous practice. Designed to support the modern enterprise, their intelligent platform enables teams to proactively identify risks, mitigate threats, ensure compliance, and embed secure-by-design principles across apps, infrastructure, and code—with unprecedented speed, precision, and scale. Visit us at threatmodeler.com.
About IriusRisk
IriusRisk is a leading provider of threat modeling solutions, offering an AI-enhanced platform that enables organizations to build security into their software development lifecycle from the earliest stages. The platform combines automated threat detection, compliance monitoring, and collaborative security design to help enterprises deliver secure products faster. Visit us at www.iriusrisk.com.
