ThreatModeler has acquired IriusRisk, combining two leading platforms to scale AI-driven threat modeling in a $30 billion app security market.
ThreatModeler, a provider of AI-driven threat modeling software, has acquired IriusRisk, bringing together what the companies describe as the two leading enterprise platforms in the threat modeling market.
The deal, announced Thursday, is aimed at expanding global scale, accelerating product development, and strengthening customer offerings as demand rises for application security tools in a market the companies estimate at $30 billion. Financial terms were not disclosed.
The acquisition positions ThreatModeler as a global leader in threat modeling, with customers across financial services, pharmaceuticals, technology, and industrial manufacturing in North America, Europe, and Asia. The company said customers report strong returns on investment, citing productivity gains of up to tenfold and cost savings of as much as 50 percent in the first year of use.
“With the addition of IriusRisk, we’re building the global leader in the threat modeling market to meet rapidly expanding demand,” said Matt Jones, the company’s chief executive. He said the combined platform will offer more scalable solutions that embed secure-by-design practices across large organizations.
Demand for threat modeling has increased as enterprises seek to scale cybersecurity efforts amid growing software complexity and a shortage of specialized security talent. Together, the two companies bring hundreds of customers, the industry’s largest professional threat modeling communities, and tens of thousands of threat models built to date. ThreatModeler said the combined organization will help enterprises scale security practices without proportionally increasing headcount.
Also Read: Why Seasonal Hiring Puts Data Security at Risk
“This milestone accelerates our vision to protect customers with an AI-native platform powered by the industry’s largest proprietary dataset,” said Archie Agarwal, founder and chief innovation officer of ThreatModeler. He said the integration will enable faster innovation and deeper intelligence across the platform.
Stephen de Vries, chief executive of IriusRisk, said both companies share a focus on helping organizations adopt secure-by-design practices earlier in the development lifecycle. “By joining forces, we are better positioned to deliver on that shared mission,” he said.
The companies said their platforms offer complementary strengths. ThreatModeler’s AI-driven tools emphasize speed and consistency across complex enterprise environments, while IriusRisk has built deep engagement with development and architecture teams, helping drive widespread adoption and one of the most active threat modeling communities in the industry. Combined, the platforms are designed to embed threat modeling throughout the software lifecycle and use intelligent automation to reduce the time required to build models and scale adoption.
Also Read: Real-Time Fraud Detection Stalled by Slow Data Pipelines
“Cybersecurity is a nonstop arms race, now accelerated by AI,” said John DeLoche, co-founder and managing partner at Invictus Growth Partners. He said the acquisition creates the industry’s largest threat modeling dataset, giving enterprises an advantage as AI reshapes both offense and defense.
The combined company is majority owned by Invictus Growth Partners, with Paladin Capital Group, a longtime investor in IriusRisk, remaining a shareholder.
