CAPEC is a free threat modeling solution. Heeler Runtime Threat Modeling is a commercial threat modeling solution by Heeler. Features, integrations, deployment and the company behind each one, side by side.
Hi Citrix. Hide VPNs. Hide Windows on a LAN. Knocknoc solves this. Just in time identity linked allow-listing. DIY, on-premise or SaaS. Prevent attacks fast.
VisitCAPEC™ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.
AI-powered continuous threat modeling for cloud applications in runtime
See more solutions in this category, or build a security stack from your picks.
Based on what each listing shows: deployment, company size, price and open source.
CAPEC fits if you are a startup and you need a free product.
Common questions when comparing CAPEC vs Heeler Runtime Threat Modeling for threat modeling.
CAPEC: CAPEC™ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.
Heeler Runtime Threat Modeling: AI-powered continuous threat modeling for cloud applications in runtime, built by Heeler.
The table above shows where their features, integrations, deployment and company size fit differ.
Often, yes. CAPEC and Heeler Runtime Threat Modeling are both Threat Modeling products, and both cover Cyber Threat Intelligence. Key differences: CAPEC is Free while Heeler Runtime Threat Modeling is Commercial. Use the table above to see where features, deployment and company size fit differ.
No Threat Modeling shortlist yet. This is the closest one.
Updated 2026-11-01
See the shortlist