Tutamantic
Tutamantic is a UK-based threat modeling software company founded in 2015, offering the Tutamen cloud platform, online training, and consulting services. It serves enterprise security teams across the UK and US with its proprietary Rapid Threat Model Prototyping methodology.
- Company typePrivate
- Founded2015
- HeadquartersLondon, United Kingdom
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Tutamantic does
Tutamantic is a UK-based software company founded in 2015 that builds threat modeling automation software intended to reduce security risks during the architectural and design stages of software development. The company's flagship product is the Tutamen Threat Model Automation Cloud Service, which applies a proprietary methodology called Rapid Threat Model Prototyping (RTMP) — attributed to company Director and inventor Geoffrey Hill — to generate and manage threat models more efficiently than manual approaches. Tutamantic sells primarily into enterprise security, architecture, and engineering functions seeking to embed threat modeling earlier in the development lifecycle.
The company operates three commercial lines: a subscription-based Tutamen cloud platform, online training programs teaching threat modeling practitioners, and workflow consulting that helps organizations integrate threat modeling into their SDLC. Tutamantic runs a sales-led go-to-market with Calendly-scheduled demos and quote-based pricing, indicating multi-year enterprise contracts rather than transactional SMB sales. Operations span the UK and US, headcount is reported at 11-50, and the firm has been externally recognized, including inclusion in Practical DevSecOps' "Threat Modeling Leaders You Must Follow in 2024" list.
No external funding rounds, revenue figures, customer logos, or leadership additions beyond Geoffrey Hill are disclosed in the available input, which constrains confidence in any financial or growth characterization.
Tutamantic firmographics
Firmographics- Name
- Tutamantic
- Website
- https://tutamantic.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Tutamantic is a UK-based threat modeling software company founded in 2015, offering the Tutamen cloud platform, online training, and consulting services. It serves enterprise security teams across the UK and US with its proprietary Rapid Threat Model Prototyping methodology.
- Ownership category
- akta.pro rank
Tutamantic industry classification
Industry- Product category
- Application Security / Threat Modeling Software
- NAICS
- Computer Systems Design Services (541512), Computer Systems Design and Related Services (5415)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Attack Surface Management (EASM/CAASM) (HDADAHAC)
- akta.pro secondary industry
- Threat Intelligence Services (BPAEADAC)
Keywords
Where Tutamantic is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Offices2 records
Markets served
Tutamantic business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Cloud Service Subscription: Automated threat model cloud service delivered as a subscription, allowing organizations to reuse their own diagrams to create rich threat models continuously throughout the software development lifecycle.
- Online Training: Instructor-led threat modeling training courses teaching the Rapid Threat Model Prototyping methodology, based on real-world scenarios and delivered over two days.
- Workflow Consulting: Consulting engagement where experienced consultants analyze optimal integration points in the customer's current build process and CI/CD automation chain, providing guidance, schemas, code and default settings.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Quote-based engagement model - no public pricing tiers |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels5 records
Tutamantic product offering
Product offeringCore offering
Tutamantic develops and delivers threat modeling automation software and associated services for software development organizations. Its flagship Tutamen Threat Model Automation Cloud Service converts existing infrastructure diagrams (DrawIO, Terraform, Visio, Lucidchart) into living threat models that automatically generate threats, mitigations, and threat paths. The company supplements this software with instructor-led Online Training on the proprietary Rapid Threat Model Prototyping (RTMP) methodology and Workflow Consulting to integrate threat modeling into CI/CD pipelines.
Product overview
Tutamantic offers a portfolio of three integrated threat modeling services: the Tutamen Threat Model Automation Cloud Service as the core platform that processes diagrams and infrastructure schemas to automatically generate threats, mitigations, and threat paths; supplemented by Online Training courses teaching the Rapid Threat Model Prototyping (RTMP) methodology; and Workflow Consulting services that help integrate threat modeling into development and CI/CD pipelines. The three offerings work together to enable organizations to discover and mitigate security threats early during software design.
Differentiator
Problem solved
Functional benefit
Products and services
- Tutamen Threat Model Automation Cloud Service A cloud-based subscription service that transforms existing diagrams and infrastructure schemas (Draw.io, Terraform, Visio, Lucidchart) into living threat models, automatically generating threats, mitigations, threat paths, and areas of maximum concern. Used by security and software development teams to continuously produce threat models throughout the software development lifecycle.
- Online Threat Modeling Training (RTMP) Instructor-led two-day threat modeling training course teaching the open-source Rapid Threat Model Prototyping (RTMP) methodology, covering commonly used security frameworks tied directly to STRIDE, Agile integration, and quick assessment of optimal security mitigations. Targeted at engineers, security champions, and security teams.
- Workflow / Integration Consulting Expert consulting engagement in which Tutamantic consultants analyze a customer's current build process and CI/CD automation chain, identifying optimal integration points for threat modeling and providing guidance, schemas, code, and default settings for best use of threat and mitigation outputs. Targeted at organizations adopting or maturing DevSecOps.
Quantifiable outcome
- 3.5x performance improvement when combining People (Online Training) + Process (Workflow Consulting) + Technology (Cloud Service)
- +3 more outcomes
Companies that use Tutamantic
Customer profileNamed customers3 records
Segments3 records
Ideal customer profiles2 records
Tutamantic technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
Feature3 records
Tutamantic partnerships and signals
Strategic signalScale indicators4 records
Recent moves4 records
Expansion highlights4 records
Tutamantic competitors and assessment
Company assessmentEmerging players
- OWASP Threat Dragon: OWASP Threat Dragon is an open-source threat modeling tool that competes at the free/community tier with Tutamantic's cloud offering, particularly for cost-sensitive development teams.
- Devici: Devici is an emerging threat modeling platform focused on diagram-based automated threat analysis, serving a similar enterprise security audience as Tutamantic with overlapping STRIDE-driven methodology.
- Avocado Systems: Avocado Systems provides application security and runtime threat detection tooling, overlapping with Tutamantic in adjacent DevSecOps and application security workflows for enterprise customers.
Broad incumbents
- Snyk: Snyk is a broad developer security platform expanding into threat modeling and security design, representing a larger incumbent that could subsume Tutamantic's niche through platform consolidation.
- Microsoft Threat Modeling Tool: Microsoft's free Threat Modeling Tool uses STRIDE and is widely adopted, functioning as a broad incumbent free alternative that competes with Tutamantic in the design-stage security category.
Direct peers
- IriusRisk: IriusRisk is a threat modeling and secure design platform that automates threat analysis from architecture inputs, directly competing with Tutamantic's Tutamen cloud service in the same enterprise buyer segment.
- ThreatModeler: ThreatModeler provides an automated threat modeling platform with STRIDE-based analysis, targeting the same DevSecOps and security architect buyers as Tutamantic and offering comparable diagram-to-model workflows.
- Security Compass (SD Elements): Security Compass offers SD Elements, a threat modeling and secure-by-design platform that integrates into the SDLC, competing directly with Tutamantic's design-stage automation and consulting offerings.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat3 records
Key risks6 records
Key highlights7 records
Customer concentration
Tutamantic social profiles
Digital presenceTutamantic financial estimates
Financial estimateRevenue estimate
Valuation estimate
Tutamantic leadership team
Management profileNumber of profiles
Profiles1 record
Tutamantic funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Tutamantic M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Tutamantic
What does Tutamantic do?
Tutamantic develops and delivers threat modeling automation software and associated services for software development organizations. Its flagship Tutamen Threat Model Automation Cloud Service converts existing infrastructure diagrams (DrawIO, Terraform, Visio, Lucidchart) into living threat models that automatically generate threats, mitigations, and threat paths. The company supplements this software with instructor-led Online Training on the proprietary Rapid Threat Model Prototyping (RTMP) methodology and Workflow Consulting to integrate threat modeling into CI/CD pipelines.
Is Tutamantic a public or private company?
Tutamantic is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Tutamantic founded?
Tutamantic was founded in 2015. It employs 11 to 50 people.
Where is Tutamantic based?
Tutamantic is headquartered in London, United Kingdom, in the Europe region.
How does Tutamantic make money?
Three revenue lines are on record. Cloud Service Subscription is the primary driver. The others are online Training and workflow Consulting.
Who are Tutamantic's main competitors?
Emerging players on record are OWASP Threat Dragon, Devici and Avocado Systems. Broad incumbents are Snyk and Microsoft Threat Modeling Tool. Direct peers are IriusRisk, ThreatModeler and Security Compass (SD Elements).
Does Tutamantic have an API?
No public API is recorded for Tutamantic.
What industry is Tutamantic in?
Tutamantic's product category is Application Security / Threat Modeling Software. Its primary akta.pro industry code is HDADAHAC, Attack Surface Management (EASM/CAASM), with a secondary code of BPAEADAC, Threat Intelligence Services. Its NAICS code is 541512 and its SIC code is 7372.