IriusRisk

IriusRisk is a threat modeling platform founded in 2015 by Stephen de Vries and Cristina Bentué, originally launched under the Continuum Security brand before rebranding. The company is headquartered in Spain and operates globally with approximately 200 employees across Europe, North America, and New Zealand. The platform focuses on automating threat modeling within the software development lifecycle (SDLC), enabling development and security teams to identify and address security risks at the design phase — before code is written. IriusRisk targets enterprises, particularly in regulated industries such as financial services and medical devices, though its mission extends to all software-producing organizations. Core capabilities of the platform include automated threat model generation based on system architecture inputs, countermeasure recommendations, and integration into DevSecOps workflows. The platform incorporates AI-augmented features to assist teams in producing threat models more efficiently. IriusRisk also offers a free Community Edition, which provides access to a collaborative environment for sharing threat models of system architectures. Beyond the product, IriusRisk runs Threat Modeling Connect, a global practitioner community launched in November 2022, aimed at making threat modeling a standard practice in software development. The company also offers a free certification program called the DeRisker Training Program for automated threat modeling. IriusRisk has received co-funding from the European Union and is associated with the European Cybersecurity Competence Centre. The company serves more than 100 clients worldwide and has reported year-on-year growth of approximately 100%.