ThreatModeler
ThreatModeler is an enterprise software company that provides an AI-driven threat modeling platform unifying applications, cloud infrastructure, and devices for Fortune 1000 customers in financial services, pharma, technology, and critical manufacturing. It sells quote-based annual SaaS subscriptions supported by patents, a partner channel, and professional services.
- Company typePrivate
- Founded2010
- HeadquartersJersey City, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What ThreatModeler does
ThreatModeler is a Jersey City, New Jersey-based enterprise software company founded in 2010 that builds an AI-driven intelligent threat modeling platform for Fortune 1000 organizations. Its core platform unifies applications, cloud infrastructure, and devices into a single view of enterprise risk, using multi-agent AI systems to generate and continuously update threat models, prioritize risks in seconds, and guide mitigation through context-aware recommendations. The product portfolio includes the ThreatModeler Platform, IaC-Assist (an IDE-native Infrastructure-as-Code security plugin supporting Terraform and CloudFormation), CloudModeler (intelligent threat modeling for AWS, Azure, and Google Cloud environments), the AI Copilot WingMan, and the newly launched ThreatModeler Nexus — a governed agentic platform built on the Secure Design Graph that consolidated threat intelligence following the January 2026 $100 million acquisition of IriusRisk.
The platform is backed by 13 granted patents and an extensive content library of 2,500+ security requirements, 180+ compliance frameworks, 1,500+ threats, 2,900+ components, and 100+ protocols, plus the first-of-its-kind Threat Model Marketplace. ThreatModeler sells annual or multi-year enterprise SaaS subscriptions on a quote basis (per permitted number of threat models, with Tier I/II/III support tiers), supplemented by professional services and training. Go-to-market combines direct enterprise field sales targeting CISOs and security leaders with the two-tier ThreatNet Partner Program (resellers, distributors, technology/OEM partners) and implementation alliances with Deloitte, EY, GuidePoint, Optiv, and SHI.
The company serves hundreds of customers across financial services, pharmaceutical, technology, and critical industrial manufacturing, with named accounts including Charles Schwab, Aetna, Kaiser Permanente, and Lenovo. Following the IriusRisk merger, the combined organization operates across North America, EMEA, and Asia, is majority owned by Invictus Growth Partners (which led a $60 million financing in June 2024), with Paladin Capital Group retaining a stake. ThreatModeler is led by CEO Kevin Gallagher (appointed April 2026, previously led Invicti Security through a $1 billion exit), with founder Archie Agarwal serving as Chief Innovation Officer. The company is ISO 27001 certified, is pursuing FedRAMP authorization through a partnership with Knox Systems, and is targeting the broader $30 billion application security market opportunity.
ThreatModeler firmographics
Firmographics- Name
- ThreatModeler
- Legal name
- ThreatModeler Software, Inc.
- Website
- https://threatmodeler.com
- Company type
- Private
- Founded year
- 2010
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- ThreatModeler is an enterprise software company that provides an AI-driven threat modeling platform unifying applications, cloud infrastructure, and devices for Fortune 1000 customers in financial services, pharma, technology, and critical manufacturing. It sells quote-based annual SaaS subscriptions supported by patents, a partner channel, and professional services.
- Ownership category
- akta.pro rank
ThreatModeler industry classification
Industry- Product category
- Application Security / Threat Modeling Software
- NAICS
- Computer Systems Design Services (541512), Other Computer Related Services (541519)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Vulnerability Intelligence & Exploit Prediction (HDADAHAI)
- akta.pro secondary industries
- Threat Intelligence Services (BPAEADAC), Insider Threat Program Design & Risk Assessments (BPAKADAM)
Keywords
Where ThreatModeler is headquartered
LocationHeadquarters
- HQ city
- Jersey City
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
ThreatModeler business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription (Platform License): ThreatModeler operates as a SaaS platform (ThreatModeler Software, Inc.) offering subscription-based licensing. Licenses are sold per threat model or per Permitted Number of licenses as defined in a Quote. Enterprise customers purchase platform access that includes threat modeling capabilities, IaC-Assist, and CloudModeler. Pricing is quote-based for enterprise accounts.
- Channel Resale (ThreatNet Partner Program): Resellers and distributors purchase ThreatModeler products for resale to end users. The reseller acquires products from ThreatModeler directly or from authorized distributors in ThreatModeler's two-tier distribution model. Resellers determine their own resale prices. ThreatModeler also sells support packages (Tier I/II/III support) as part of the resale.
- Professional Services and Training: ThreatModeler provides product training performed by ThreatModeler, a ThreatModeler-designated company, or individual. Training is part of the partner accreditation requirements and customer onboarding. Professional services support implementation and integration for enterprise deployments.
- Enterprise Licensing: Annual or multi-year subscription licenses are sold to enterprises, with the Quote specifying the permitted number of threat models. License terms confirm that if no term is specified, the default is one year. Updates are included only with active maintenance contracts or service subscriptions.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise Subscription — quote-based pricing for large organizations requiring full platform access |
| Subscription | Annual | Platform Products — ThreatModeler, IaC-Assist, CloudModeler sold as part of platform subscription |
| Freemium | Pay-as-you-go | Threat Model Marketplace — free and paid threat model templates |
| Freemium | Pay-as-you-go | Evaluation / Beta — free 30-day evaluation licenses |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels9 records
ThreatModeler product offering
Product offeringCore offering
ThreatModeler provides an intelligent, automated threat modeling SaaS platform that enables enterprises to identify, prioritize, and remediate cybersecurity risks across applications, infrastructure, cloud (AWS, Azure, Google Cloud), and AI systems. The platform generates threat models in minutes through multi-agent AI and the Secure Design Graph, integrating natively with CI/CD pipelines, IDEs (via MCP), and IaC tooling (Terraform, CloudFormation) to enable continuous, shift-left DevSecOps for Fortune 1000 customers.
Differentiator
Problem solved
Functional benefit
Brands
- ThreatModeler Platform: The core intelligent, collaborative threat modeling platform.
- IaC-Assist
- CloudModeler
- Threat Model Marketplace
Products and services
- ThreatModeler Platform Intelligent, collaborative threat modeling platform that enables enterprise security, development, and cloud teams to build, manage, and scale threat models across applications, infrastructure, and devices.
- IaC-Assist Patented IDE plugin that secures Infrastructure-as-Code in real time by automatically detecting security controls and applying mitigations within Terraform and AWS CloudFormation, allowing developers to identify and remediate flaws while writing code.
- CloudModeler Intelligent threat modeling product for cloud environments that automatically maps AWS, Microsoft Azure, and Google Cloud services into threat models and supports cloud service architecture simulations.
- ThreatModeler (Enterprise Threat Modeling) Enterprise threat modeling product that automates the identification and prioritization of security risks across an organization's applications, infrastructure, and cloud environments for security architects, engineers, and developers.
- ThreatModeler Nexus Governed agentic threat modeling platform built on the Secure Design Graph that uses multi-agent AI to deliver architecture-aware threat modeling across applications, infrastructure, and AI systems, targeting federal agencies and regulated enterprises.
- Threat Model Marketplace Cybersecurity asset marketplace offering pre-built, field-tested threat model templates for download, enabling practitioners to accelerate threat modeling across use cases and compliance frameworks.
Quantifiable outcome
- 50% reduction in threat modeling effort for a global financial services firm using ThreatModeler Nexus
- +6 more outcomes
Companies that use ThreatModeler
Customer profileNamed customers8 records
Segments6 records
Ideal customer profiles3 records
ThreatModeler technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability10 records
Feature13 records
ThreatModeler partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core, flagship and minor.
- Knox SystemscoreThreatModeler is partnering with Knox Systems to pursue FedRAMP authorization, aiming to bring governed agentic threat modeling to federal agencies and regulated organizations. This partnership supports ThreatModeler's expansion into the government and federal sector market.
- IriusRiskflagshipThreatModeler acquired IriusRisk for $100 million in January 2026, uniting the top two enterprise threat modeling platforms. The merger created the global leader in threat modeling, combining ThreatModeler's AI-driven platform with IriusRisk's developer and architecture team engagement model. The combined organization serves Fortune 1000 customers across financial services, pharmaceutical, technology, and critical industrial manufacturing in North America, EMEA, and Asia. The merger operates on the Secure Design Graph that consolidates threat intelligence from both platforms.
- NYU Tandon School of EngineeringminorThreatModeler partnered with NYU's Tandon School of Engineering to launch the ThreatModeler Certified Practitioner Program — Introduction to Threat Modeling. The program equips NYU students with practical threat modeling skills and certifications. Students who complete the course earn a NYU Cybersecurity Skills Badge in Introduction to Threat Modeling. The partnership addresses the cybersecurity skills gap and builds a pipeline of threat modeling practitioners.
- Trusted Partners (Deloitte, EY, GuidePoint, Optiv, SHI)minorThreatModeler maintains a partner ecosystem including Deloitte, EY, GuidePoint, Optiv, and SHI as trusted partners displayed on its customer case study page. These appear to be consulting and implementation partners who help deploy ThreatModeler's platform within enterprise customer environments.
- ThreatNet Partner Program — Technology PartnerscoreThe ThreatNet Partner Program includes technology partners who can integrate, build, and certify their own solutions using ThreatModeler's API-based solutions. Technology partners are eligible for the TMI Badge which showcases their partnership. The program also includes resellers, distributors, and OEM offerings.
Scale indicators12 records
Recent moves7 records
Expansion highlights7 records
ThreatModeler competitors and assessment
Company assessmentBroad incumbents
- Veracode: Veracode provides enterprise application security testing including SAST, DAST, and software composition analysis. As a long-standing incumbent in enterprise AppSec, it competes for the same CISO security budget that ThreatModeler targets with its threat modeling platform.
- Snyk: Snyk is a broader developer security platform offering SAST, SCA, container security, and IaC scanning. Its IaC and cloud security capabilities overlap with ThreatModeler's IaC-Assist and CloudModeler, and Snyk's installed base among enterprise developers represents competitive overlap in DevSecOps tooling.
- Rapid7: Rapid7 is a broader security operations and vulnerability management platform that acquired Noetic Cyber (where ThreatModeler's CFO Karen Higgins previously served). Its Insight platform serves overlapping enterprise security and DevOps buyer personas with adjacent capabilities.
- Microsoft Threat Modeling Tool: Microsoft's free Threat Modeling Tool is the most widely deployed legacy threat modeling solution, integrated with the Microsoft security stack and SDL methodology. It competes with ThreatModeler on enterprise threat modeling workflows but lacks automation, AI capabilities, and IaC/cloud integration.
- Invicti (Acunetix/Netsparker): Invicti is an enterprise application security platform with DAST and IAST capabilities, led by former CEO Kevin Gallagher who now leads ThreatModeler. The two companies serve overlapping enterprise AppSec buyers and Gallagher's prior experience scaling Invicti directly informs ThreatModeler's go-to-market execution.
- Checkmarx: Checkmarx is a broad application security platform with SAST, SCA, and IaC security offerings. Its Checkmarx One platform competes in the same enterprise application security category and overlaps with ThreatModeler's shift-left DevSecOps positioning.
Emerging players
- Contrast Security: Contrast Security provides runtime application security (IAST/RASP) for enterprise applications. While focused on detection rather than design-time threat modeling, it serves overlapping enterprise security buyers and competes for the same AppSec budget allocation.
Direct peers
- Foreseeti (acquired by Cisco): Foreseeti (now part of Cisco) offers automated threat modeling and attack simulation tools with a focus on cloud and infrastructure architectures. Its securiCAD platform directly competes with ThreatModeler's CloudModeler and IaC-Assist capabilities for enterprise infrastructure threat modeling.
- IriusRisk: IriusRisk was the second-leading enterprise threat modeling platform prior to ThreatModeler's January 2026 acquisition. Both platforms offered automated threat modeling for developers and architects with strong compliance framework coverage, and IriusRisk's developer-focused model complemented ThreatModeler's enterprise orientation.
- Security Compass (SD Elements): Security Compass's SD Elements is a direct competitor in automated threat modeling and secure-by-design tooling for enterprise software development. Both platforms target Fortune 1000 customers with compliance-driven threat modeling workflows and integrate with CI/CD pipelines.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
ThreatModeler social profiles
Digital presenceThreatModeler financial estimates
Financial estimateRevenue estimate
Valuation estimate
ThreatModeler leadership team
Management profileNumber of profiles
Profiles7 records
ThreatModeler subsidiaries and ownership
Company hierarchySubsidiaries1 record
ThreatModeler funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ThreatModeler M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ThreatModeler
What does ThreatModeler do?
ThreatModeler provides an intelligent, automated threat modeling SaaS platform that enables enterprises to identify, prioritize, and remediate cybersecurity risks across applications, infrastructure, cloud (AWS, Azure, Google Cloud), and AI systems. The platform generates threat models in minutes through multi-agent AI and the Secure Design Graph, integrating natively with CI/CD pipelines, IDEs (via MCP), and IaC tooling (Terraform, CloudFormation) to enable continuous, shift-left DevSecOps for Fortune 1000 customers.
Is ThreatModeler a public or private company?
ThreatModeler is a private company. It is classified as venture growth investor backed and is currently operating.
When was ThreatModeler founded?
ThreatModeler was founded in 2010. It employs 11 to 50 people.
Where is ThreatModeler based?
ThreatModeler is headquartered in Jersey City, United States, in the North America region.
How does ThreatModeler make money?
Four revenue lines are on record. SaaS Subscription (Platform License) is the primary driver. The others are channel Resale (ThreatNet Partner Program), professional Services and Training and enterprise Licensing.
Who are ThreatModeler's main competitors?
Broad incumbents on record are Veracode, Snyk, Rapid7, Microsoft Threat Modeling Tool, Invicti (Acunetix/Netsparker) and Checkmarx. Contrast Security is listed as an emerging player. Direct peers are Foreseeti (acquired by Cisco), IriusRisk and Security Compass (SD Elements).
Does ThreatModeler have an API?
Yes. ThreatModeler offers API-based solutions for partners and technology integrations. The API enables technology partners to build and certify their own solutions that integrate with ThreatModeler's platform. Partners can access the platform through API integrations to embed threat modeling capabilities into their own offerings.
What industry is ThreatModeler in?
ThreatModeler's product category is Application Security / Threat Modeling Software. Its primary akta.pro industry code is HDADAHAI, Vulnerability Intelligence & Exploit Prediction, with a secondary code of BPAEADAC, Threat Intelligence Services. Its NAICS code is 541512 and its SIC code is 7372.