Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Devici is a platform that helps teams move from inconsistent, document-based threat modeling to a clearer, more structured approach. It centers the work on a diagram, so AppSec and DevSecOps teams can map system behavior, add relevant attributes, and let the tool surface likely threats and recommended mitigations. This reduces the time spent interpreting static drawings or spreadsheets and gives teams a shared source of truth they can update as designs change.
The workspace supports simultaneous editing, patterns for common system components, and templates that speed up modeling for recurring architectures. Security practitioners can define reusable elements, while developers can contribute without needing deep expertise in threat modeling tools.
Devici also provides a maintained threat library, status tracking for each finding, and the option to integrate with issue trackers when teams need to push mitigation work into existing workflows. It offers a straightforward way to standardize threat modeling practices without introducing the overhead of heavier enterprise platforms, making it a practical option for organizations that need something accessible, collaborative, and easy to maintain.
Description
IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more.
IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform.
Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.
API Access
Has API
No
API Access
Has API
Yes
Integrations
AWS CloudFormation
No
Amazon Web Services (AWS)
No
Azure DevOps
No
CA Flowdock
No
Cucumber
No
CucumberStudio
No
FortifyData
No
GitHub
No
JUnit
No
Jira
No
Integrations
AWS CloudFormation
Yes
Amazon Web Services (AWS)
Yes
Azure DevOps
Yes
CA Flowdock
Yes
Cucumber
Yes
CucumberStudio
Yes
FortifyData
Yes
GitHub
Yes
JUnit
Yes
Jira
Yes
Pricing Details
Free
Free Trial
Yes
Free Version
Yes
Pricing Details
Enterprise licences can vary depending on integrations and threat modeling requirements. Please do contact us for a more detailed breakdown. Pricing is done by threat model and not by user to keep costs manageable and predictable.
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Security Compass
Founded
2004
Country
Canada
Website
www.securitycompass.com/devici/
Vendor Details
Company Name
IriusRisk
Country
Spain
Website
www.iriusrisk.com/
Product Features
Product Features
Risk Management
Alerts/Notifications
Yes
Auditing
Yes
Business Process Control
Yes
Compliance Management
Yes
Corrective Actions (CAPA)
Yes
Dashboard
Yes
Exceptions Management
Yes
IT Risk Management
Yes
Internal Controls Management
Yes
Legal Risk Management
No
Mobile Access
No
Operational Risk Management
Yes
Predictive Analytics
Yes
Reputation Risk Management
No
Response Management
No
Risk Assessment
Yes