Devici
Devici is an AI-powered, diagram-centric threat modeling platform that helps DevSecOps, AppSec, and software development teams identify and mitigate software security threats. Acquired by Security Compass in June 2025, it now operates as a product within Security Compass's AppSec portfolio.
- Company typePrivate
- Founded2023
- HeadquartersRaleigh, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Devici does
Devici is a threat modeling platform that helps security and development teams identify, analyze, and mitigate software security threats through diagram-centric modeling augmented by AI. Founded in 2023 in Raleigh, United States, with 1–10 employees, the company built its product around five integrated modules: Devici Canvas (visual data flow diagramming), AI-Infusion (LLM-driven attribute inference from natural-language descriptions), Devici Codex (a curated library spanning STRIDE-LM, CAPITALS/Zero Trust, MITRE CWE, LINDDUN, OWASP Top Ten, OWASP Top Ten for LLMs, OWASP API Security Top 10), Code Genius (a Design SAST engine that derives threat models from source code in JavaScript, TypeScript, Java, Python, and C#), and real-time Collaboration for distributed teams.
The platform's core technology combines visual data-flow diagramming with LLM-powered suggestions and a local code-analysis engine that does not upload customer code to the cloud. Devici monetizes through a freemium tier (up to 3 threat models and 3 users), a Pro tier (unlimited users, multi-layer canvases, custom templates), and an Enterprise tier (unlimited models, SSO/SAML, Jira/Azure DevOps/Splunk/GitHub integrations, Code Genius, dedicated CSM, REST API). Go-to-market is hybrid: product-led growth via a self-serve free tier and demo booking, layered with enterprise field sales for larger deployments. The target segments are DevSecOps and AppSec teams (primary), software developers and architects, and organizations building AI-driven applications.
In June 2025, Devici was acquired by Security Compass, a portfolio company of FTV Capital, and now operates as a product platform within Security Compass's portfolio alongside SD Elements and Application Security Training. Post-acquisition, Devici is positioned as the diagram-driven threat modeling pillar of Security Compass's broader AppSec and DevSecOps offering.
Devici firmographics
Firmographics- Name
- Devici
- Legal name
- Devici
- Website
- https://devici.com
- Company type
- Private
- Founded year
- 2023
- Operating status
- Acquired
- Headcount range
- 1–10 employees
- Short description
- Devici is an AI-powered, diagram-centric threat modeling platform that helps DevSecOps, AppSec, and software development teams identify and mitigate software security threats. Acquired by Security Compass in June 2025, it now operates as a product within Security Compass's AppSec portfolio.
- Ownership category
- akta.pro rank
Where Devici is headquartered
LocationHeadquarters
- HQ city
- Raleigh
- HQ country
- United States
- HQ region
- North America
Markets served
Devici business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Subscription - Free Tier: Free tier offering allowing teams to build up to 3 threat models with up to 3 users. Includes core features like AI-infused threat modeling, collaboration, and Devici Codex access. Serves as entry point for evaluation and onboarding.
- Subscription - Enterprise: Enterprise tier with unlimited threat models, unlimited users, premium support, dedicated customer success manager, and advanced features including Code Genius, API access, SSO/SAML, and integrations with Jira, Azure DevOps, and Splunk. Custom pricing based on organization needs.
- Subscription - Pro: Mid-tier plan with unlimited users, multi-layer threat canvases, and custom threat modeling templates. Positioned for organizations actively growing a threat modeling culture.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free threat modeling for small teams, open source projects, or individuals |
| Subscription | Annual | Full-feature plan for organizations growing threat modeling culture |
| Subscription | Annual | Enterprise-scale threat modeling with advanced controls and integrations |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
Devici product offering
Product offeringCore offering
Devici is a cloud-based threat modeling platform that enables security and development teams to identify, analyze, and mitigate security threats through diagram-driven data flow modeling augmented by AI. It combines visual threat modeling, an integrated threat knowledge library, code-aware analysis that generates threat models directly from source code, and real-time team collaboration.
Product overview
Devici is a threat modeling platform consisting of a unified core product with integrated feature modules. The platform centers on Devici Canvas for visual diagram-driven threat modeling, augmented by AI-Infusion for AI-powered suggestions, Devici Codex for comprehensive threat libraries, and Code Genius for automated model generation from code. Collaboration features enable real-time team participation, while a REST API supports enterprise automation. The platform was acquired by Security Compass in June 2025 and integrates with Jira, Azure DevOps, Splunk, and GitHub.
Differentiator
Problem solved
Functional benefit
Brands
- Devici: Devici is a threat modeling platform that empowers teams to mitigate threats in everything they build. It features diagram-driven threat modeling with AI-powered capabilities.
- AI-Infusion
- Devici Codex
- Code Genius
- Collaboration
- Devici Canvas
Products and services
- Devici Threat Modeling Platform
Companies that use Devici
Customer profileSegments3 records
Ideal customer profiles3 records
Devici technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability5 records
Feature5 records
Devici partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Security CompassflagshipSecurity Compass acquired Devici in June 2025 to expand its threat modeling capabilities. Devici operates as a product under Security Compass, enhancing their portfolio of security solutions including SD Elements and Application Security Training. The acquisition strengthens Security Compass's position in the DevSecOps ecosystem.
Scale indicators1 record
Recent moves5 records
Expansion highlights5 records
Devici competitors and assessment
Company assessmentDirect peers
- IriusRisk: Commercial threat modeling and secure design platform that competes head-on with Devici in providing automated threat modeling, libraries, and integrations for DevSecOps teams.
- ThreatModeler: Enterprise threat modeling platform (ThreatModeler and ThreatModeler SDK) focused on automated threat identification, integration with SDLC tooling, and scaling threat modeling across large organizations—a direct alternative to Devici.
- Microsoft Threat Modeling Tool: Free Microsoft tool that enables diagram-driven threat modeling using the STRIDE framework, competing directly with Devici's core visual threat modeling workflow at the entry-tier price point.
- OWASP Threat Dragon: Open-source web-based threat modeling tool with diagram-driven modeling and STRIDE/LINDDUN support, providing a free alternative to Devici's diagram-centric canvas.
Broad incumbents
- SD Elements (Security Compass): Security Compass's flagship platform for security requirements and compliance. Now a sibling product to Devici within Security Compass, but it overlaps in the broader secure SDLC and DevSecOps category.
- Snyk: Developer security platform spanning SAST, SCA, IaC, and container security; competes with Devici for developer mindshare in the DevSecOps budget, even though it does not natively offer diagram-driven threat modeling.
- Veracode: Established application security vendor offering SAST, DAST, SCA, and increasingly design-time security guidance, positioning it as a broad AppSec incumbent that overlaps with parts of Devici's value proposition.
- Checkmarx: Enterprise AppSec platform with SAST, SCA, and IaC scanning; an incumbent that increasingly bundles design-time and architectural risk analysis, competing for the same DevSecOps buyer as Devici.
Emerging players
- Apiiro: Code-to-risk application security platform that analyzes codebases to surface design and architectural risks—adjacent to Devici's Code Genius D-SAST capability but focused on a broader set of risks.
- ForAllSecure: Application security vendor focused on automated, proactive security testing (Mayhem); comparable to Devici in targeting design- and build-time application risk with automation-first tooling.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
Devici social profiles
Digital presenceDevici financial estimates
Financial estimateRevenue estimate
Valuation estimate
Devici leadership team
Management profileNumber of profiles
Devici funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Devici M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Devici
What does Devici do?
Devici is a cloud-based threat modeling platform that enables security and development teams to identify, analyze, and mitigate security threats through diagram-driven data flow modeling augmented by AI. It combines visual threat modeling, an integrated threat knowledge library, code-aware analysis that generates threat models directly from source code, and real-time team collaboration.
Is Devici a public or private company?
Devici is a private company. It is classified as corporate owned and is currently acquired.
When was Devici founded?
Devici was founded in 2023. It employs 1 to 10 people.
Where is Devici based?
Devici is headquartered in Raleigh, United States, in the North America region.
How does Devici make money?
Three revenue lines are on record. Subscription - Free Tier is the primary driver. The others are subscription - Enterprise and subscription - Pro.
Who are Devici's main competitors?
Direct peers on record are IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool and OWASP Threat Dragon. Broad incumbents are SD Elements (Security Compass), Snyk, Veracode and Checkmarx. Emerging players are Apiiro and ForAllSecure.
Does Devici have an API?
Yes. Devici offers a REST API that allows users to send threat model details to other systems and applications. The API is available on the Enterprise plan and enables automation of threat model workflows.