IriusRisk
6.1#9 in threat modeling softwareFree planFree planWebAPISelf-hosted
VisitIriusRisk vs ThreatTree
ThreatTree
6.6#4 in threat modeling softwareFrom $29 a monthFree planWebAPI
VisitWhat both publish
| Fact | IriusRisk | ThreatTree |
|---|---|---|
| Headquarters | Cuarte (Huesca), Spain | United Kingdom |
| Integrations | Listed integrations include Jira, ServiceNow, Azure DevOps, Jenkins, GitHub, OWASP ZAP, Terraform, AWS CloudFormation, and an Open API. | The Enterprise plan lists custom Jira and ServiceNow ticketing, Terraform/OpenAPI architecture import, Splunk and Microsoft Sentinel feeds, GRC platform sync, and Confluence/Notion embeds. |
| Intended users | The site describes the product for security teams, developers, CISOs, and compliance teams. | ThreatTree describes itself as a browser-based tool for security teams ranging from solo consultants to CISO organizations. |
| Purpose | IriusRisk is an AI threat modeling tool for secure software design. | ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees. |
| Support | IriusRisk offers Standard, Gold, and Platinum support plans with varying availability, response times, and support channels. | The pricing page lists priority support with Pro and dedicated support and an SLA with Enterprise. |
IriusRisk plans
- Community EditionFree
- EnterprisePriced on request
ThreatTree plans
- FreeFree
- Pro$29 a month
- EnterprisePriced on request
Pick IriusRisk if…
It suits security teams, developers, CISOs, and compliance teams that need to model threats and apply security controls. The free Community Edition is limited to one user and three active models.
Pick ThreatTree if…
ThreatTree is intended for security teams ranging from solo consultants to CISO organizations. It may suit teams that need structured threat models, risk prioritization, and collaborative review.