The application security landscape is consolidating as ThreatModeler, a leader in AI-driven threat modeling, has announced its acquisition of IriusRisk. This strategic merger unites the two foremost platforms in the sector, aiming to create an unparalleled proprietary threat intelligence dataset and deliver seamless, scalable security for enterprises navigating AI and cloud adoption. The move is a direct response to the surging demand for integrating security early in the software development lifecycle.
ThreatModeler has acquired rival threat modeling platform IriusRisk to dominate the expanding application security market.
The merger creates the industry's largest proprietary threat-model dataset to power AI-driven security insights.
The combined platform promises to help enterprises achieve 10x productivity gains and 50% cost reductions in threat modeling.
It aims to democratize "secure-by-design" practices, enabling scalable protection for critical applications and infrastructure.
The unified company is positioned to accelerate secure AI and cloud adoption at enterprise scale.
The new entity is backed by Invictus Growth Partners, with Paladin Capital Group remaining a shareholder.
This acquisition positions the combined company as the definitive global leader in the threat modeling space, trusted by Fortune 1000 companies worldwide. Matt Jones, CEO of ThreatModeler, stated, "With the addition of IriusRisk, we're building the global leader in the threat modeling market to meet rapidly expanding demand." The union is designed to accelerate innovation and provide more scalable solutions, making proactive security a continuous practice. Archie Agarwal, Founder and Chief Innovation Officer of ThreatModeler, emphasized the strategic advantage: "This milestone accelerates our vision to protect customers with an AI-native platform powered by the industry's largest proprietary dataset."
The demand for scalable threat modeling solutions is intensifying as cybersecurity becomes an arms race accelerated by AI. The combined strengths of ThreatModeler's AI-driven platform for security architects and IriusRisk's deep developer engagement create a comprehensive offering. Stephen de Vries, CEO of IriusRisk, highlighted the shared mission, saying, "This is an exciting leap forward for the industry, as both our companies share a passion for helping enterprises start left with their secure by design approach." John DeLoche of Invictus Growth Partners noted the critical timing: "Cybersecurity is a nonstop arms race, now accelerated by AI. Threat modeling is essential for teams that want to proactively protect enterprise systems and applications."
Together, the platforms offer complementary capabilities that embed threat modeling across the entire software development lifecycle. The integration promises intelligent automation that has already helped customers build threat models twice as fast and scale adoption more than tenfold. This enables organizations to virtually expand their security and development teams, proactively identifying risks and mitigating threats with greater speed and precision.
The acquisition marks a pivotal consolidation in the application security market, creating a single, powerful entity equipped to help enterprises build security into the foundation of their AI and cloud initiatives through automated, data-driven threat modeling.
About ThreatModeler
ThreatModeler revolutionizes application and cloud security by making threat modeling a sustainable, high-velocity, and continuous practice. Designed to support the modern enterprise, their intelligent platform enables teams to proactively identify risks, mitigate threats, ensure compliance, and embed secure-by-design principles across apps, infrastructure, and code—with unprecedented speed, precision, and scale.
About IriusRisk
IriusRisk is a leading provider of threat modeling solutions, offering an AI-enhanced platform that enables organizations to build security into their software development lifecycle from the earliest stages. The platform combines automated threat detection, compliance monitoring, and collaborative security design to help enterprises deliver secure products faster.
About Invictus Growth Partners
Invictus Growth Partners is a middle-market growth equity firm with over $1 billion in assets under management, investing in bootstrapped and capital-efficient cloud software, cybersecurity, and fintech companies. The firm is deploying more than $600 million from recently closed funds and provides portfolio companies exclusive access to DIANE, its AI-driven value-creation platform, which has delivered a significant increase in direct sales conversion and can provide access to thousands of warm customer introductions. Invictus makes majority investments with $30 million to $100+ million equity checks.
About Paladin Capital Group
Paladin Capital Group was founded in 2001 and has offices in Washington DC, New York, London, Luxembourg, and Silicon Valley. As a multi-stage investor, Paladin's core strength is identifying, supporting, and investing in innovative companies that develop promising, early-stage technologies to address the critical cyber and advanced technological needs of both commercial and government customers. Combining proven investment experience with deep expertise in global security, cyber technology, and cutting-edge research, Paladin has invested in more than 80 companies since 2008 and has been a trusted partner to investors, entrepreneurs, and governments for over two decades.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones—and thrive on the tech pulse.