IriusRisk
IriusRisk: A flexible threat-modeling platform with automation, integrations, and a useful free tier. Ranked #2 of 24 in Threat Modeling Software by our editors (9.3/10); pricing: Free plan; best for organizations wanting integrations and automated modeling.
At a glance
- Editor score9.3 / 10
- PricingFree plan
- Best forOrganizations wanting integrations and automated modeling
- Free planYes
- Facts checked22 Sep 2026
Where it wins
- Automatic threats, countermeasures, risk scoring, and prioritization
- Free lifetime Community Edition with three active threat models
- SaaS and on-premises deployment with workflow integrations
Where it doesn't
- Community Edition supports one user with limited collaboration
- Community Edition is limited to three active threat models
- Enterprise pricing is quote-based
Our verdict on IriusRisk
IriusRisk is a threat-modeling platform for security, development, and architecture teams. It combines data-flow diagramming, automatic threat and countermeasure generation, risk scoring, prioritization, security content libraries, standards mapping, and collaborative project access. Templates, questionnaires, infrastructure-as-code imports, APIs, and AI-assisted threat-model creation with Jeff support teams that want to connect modeling with software-development workflows rather than keep it as a separate review activity.
Its freemium structure gives smaller teams a clear starting point. The Community Edition is a free lifetime subscription with three active threat models, one user with limited collaboration, threat-model templates, technical and compliance reports, and Draw.io-based diagramming. Enterprise adds SaaS or on-premises deployment, unlimited users, no maximum number of threat models, custom components, standards and libraries, issue-tracker integrations, and OpenAPI access. Enterprise pricing is quote-based, so organizations comparing paid options will need to evaluate the commercial fit directly.
Integration and automation are central strengths. IriusRisk connects with tools and services including Azure DevOps, ServiceNow, Jira Software, AWS CloudFormation, Google Cloud, HashiCorp Terraform, Jenkins, diagrams.net, Lucidchart, Keycloak, and Microsoft platforms. Its issue-tracker and CI/CD integrations, OpenAPI integration, and infrastructure-as-code imports can help place threat modeling within existing delivery processes. Choose IriusRisk if your organization needs automated modeling, risk prioritization, collaboration, and deployment flexibility. Teams needing only a small, single-user modeling workflow may find the Community Edition's model and collaboration limits restrictive, while larger teams should assess Enterprise pricing and configuration requirements before committing.
Your product? Our editors can test IriusRisk in depth and publish a review, labelled as paid · from $149/mo →
IriusRisk pricing
All 2 IriusRisk plans and prices →
IriusRisk fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Project limit | Not verified |
| Attack-path analysis | Not verified |
| Risk prioritization | Yes |
| Collaborative review | Yes |
| Templates and frameworks | Yes |
| Modeling methods | Multiple |
| Deployment | Both |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Compliance & security | ISO 27001, GDPR, SSO/SAML |
| Support | Email, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 20 integrations: Azure DevOps, CA Rally, ServiceNow, Jira Software, AWS CloudFormation, diagrams.net … See all → |
| Pricing | Free plan (source) |
| Website | iriusrisk.com |
| Facts checked | 22 Sep 2026 |
IriusRisk integrations
IriusRisk lists 20 integrations on its own site.
- Azure DevOps
- CA Rally
- ServiceNow
- Jira Software
- AWS CloudFormation
- diagrams.net
- Fortify
- Google Cloud
- HashiCorp Terraform
- Jenkins
- Keycloak
- Lucidchart
- Microsoft Active Directory
- Microsoft Azure
- Microsoft Threat Modeling Tool
- Microsoft Visio
- Okta
- Salesforce
- SwaggerHub
- Synopsys
See all IriusRisk integrations →
Alternatives to IriusRisk
- CAIRISA broad open-source choice for teams connecting threats, requirements, architecture, and risk.9.4
- ThreatModeler NexusAI-assisted threat modeling with attack paths, risk prioritization, compliance, and CI/CD checks.9.2
- ThreatOpusA workflow-integrated threat modeling platform with a capable free plan and broad CI/CD coverage.9.1
See all IriusRisk alternatives →
IriusRisk vs the competition
- IriusRisk vs CAIRIS
- IriusRisk vs ThreatModeler Nexus
- IriusRisk vs ThreatOpus
- IriusRisk vs CYMETRIS
- IriusRisk vs itemis SECURE
- IriusRisk vs KAVACH
Compare IriusRisk with any tool side by side →
Used IriusRisk? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used IriusRisk for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
IriusRisk is listed in our Threat Modeling Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/iriusrisk/"><img src="https://www.itechguides.com/best/badge/iriusrisk.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update