ThreatModeler

ThreatModeler provides a threat modeling platform that lets development and security teams build and maintain structured threat models of applications and cloud environments as part of the software development lifecycle, rather than as a one-off design-review exercise. The platform uses generative and adaptive AI to help identify risks and recommend mitigations directly against architecture diagrams, aiming to make threat modeling a continuous, code-integrated practice rather than a periodic manual whiteboarding session, which is where most organizations’ threat modeling programs stall.

Founded in 2010 and headquartered in Jersey City, New Jersey, ThreatModeler raised a $60 million round in 2024 led by Invictus Growth Partners, with continued participation from earlier investors Inveready Asset Management and Paladin Capital Group. That capital funded ThreatModeler’s combination with IriusRisk, another established threat modeling vendor, consolidating two of the category’s more recognized platforms under common ownership, with Invictus as majority owner.

The IriusRisk combination is a genuine consolidation of category leadership rather than a distressed acquisition, both companies were independently viable threat modeling vendors beforehand, giving the combined entity meaningfully more scale and customer base than either had alone, while raising the usual integration questions that follow any merger of competing product lines.