Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more. IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform. Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.

Description

Threat modeling serves as a fundamental aspect of the Microsoft Security Development Lifecycle (SDL), acting as an engineering strategy aimed at uncovering potential threats, attacks, vulnerabilities, and countermeasures that may impact your application. This technique not only aids in the identification of risks but also influences the design of your application, aligns with your organization's security goals, and mitigates potential hazards. The Microsoft Threat Modeling Tool simplifies the process for developers by utilizing a standardized notation that helps visualize system components, data flows, and security boundaries. Additionally, it assists those involved in threat modeling by highlighting various classes of threats to consider, depending on the architectural design of their software. Crafted with the needs of non-security professionals in mind, this tool enhances accessibility for all developers, offering straightforward guidance on the creation and evaluation of threat models, ultimately fostering a more secure software development practice. By integrating threat modeling into their workflow, developers can proactively address security concerns before they escalate into serious issues.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

AWS CloudFormation
Amazon Web Services (AWS)
Azure DevOps
CA Flowdock
Cucumber
CucumberStudio
FortifyData
JUnit
Jira
Jira Service Management
Lucidchart
Microsoft Threat Modeling Tool
Microsoft Visio
OAuth
OWASP ZAP
Redmine
Seeker
Serenity BDD
Terraform
ThreadFix

Integrations

AWS CloudFormation
Amazon Web Services (AWS)
Azure DevOps
CA Flowdock
Cucumber
CucumberStudio
FortifyData
JUnit
Jira
Jira Service Management
Lucidchart
Microsoft Threat Modeling Tool
Microsoft Visio
OAuth
OWASP ZAP
Redmine
Seeker
Serenity BDD
Terraform
ThreadFix

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

IriusRisk

Country

Spain

Website

www.iriusrisk.com/

Vendor Details

Company Name

Microsoft

Founded

1975

Country

United States

Website

www.microsoft.com/en-us/securityengineering/sdl/threatmodeling

Product Features

Risk Management

Alerts/Notifications
Auditing
Business Process Control
Compliance Management
Corrective Actions (CAPA)
Dashboard
Exceptions Management
IT Risk Management
Internal Controls Management
Legal Risk Management
Mobile Access
Operational Risk Management
Predictive Analytics
Reputation Risk Management
Response Management
Risk Assessment

Product Features

Alternatives

SD Elements Reviews

SD Elements

Security Compass

Alternatives

Devici Reviews

Devici

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity
Fork Reviews

Fork

VerSprite Cybersecurity