Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Devici is a platform that helps teams move from inconsistent, document-based threat modeling to a clearer, more structured approach. It centers the work on a diagram, so AppSec and DevSecOps teams can map system behavior, add relevant attributes, and let the tool surface likely threats and recommended mitigations. This reduces the time spent interpreting static drawings or spreadsheets and gives teams a shared source of truth they can update as designs change. The workspace supports simultaneous editing, patterns for common system components, and templates that speed up modeling for recurring architectures. Security practitioners can define reusable elements, while developers can contribute without needing deep expertise in threat modeling tools. Devici also provides a maintained threat library, status tracking for each finding, and the option to integrate with issue trackers when teams need to push mitigation work into existing workflows. It offers a straightforward way to standardize threat modeling practices without introducing the overhead of heavier enterprise platforms, making it a practical option for organizations that need something accessible, collaborative, and easy to maintain.

Description

IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more. IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform. Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

AWS CloudFormation No 
Amazon Web Services (AWS) No 
Azure DevOps No 
CA Flowdock No 
Cucumber No 
CucumberStudio No 
FortifyData No 
GitHub No 
JUnit No 
Jira No 
Jira Service Management No 
Lucidchart No 
Microsoft Visio No 
OAuth No 
OWASP ZAP No 
Redmine No 
Serenity BDD No 
ServiceNow No 
Terraform No 
ThreadFix No 

Integrations

AWS CloudFormation Yes 
Amazon Web Services (AWS) Yes 
Azure DevOps Yes 
CA Flowdock Yes 
Cucumber Yes 
CucumberStudio Yes 
FortifyData Yes 
GitHub Yes 
JUnit Yes 
Jira Yes 
Jira Service Management Yes 
Lucidchart Yes 
Microsoft Visio Yes 
OAuth Yes 
OWASP ZAP Yes 
Redmine Yes 
Serenity BDD Yes 
ServiceNow Yes 
Terraform Yes 
ThreadFix Yes 

Pricing Details

Free
Free Trial Yes 
Free Version Yes 

Pricing Details

Enterprise licences can vary depending on integrations and threat modeling requirements. Please do contact us for a more detailed breakdown. Pricing is done by threat model and not by user to keep costs manageable and predictable.
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Security Compass

Founded

2004

Country

Canada

Website

www.securitycompass.com/devici/

Vendor Details

Company Name

IriusRisk

Country

Spain

Website

www.iriusrisk.com/

Product Features

Product Features

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management No 
Mobile Access No 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management No 
Response Management No 
Risk Assessment Yes 

Alternatives

Alternatives

Devici Reviews

Devici

Security Compass
SD Elements Reviews

SD Elements

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity