Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Fork is a SaaS platform designed for threat modeling that enables both security and product teams to conduct ongoing, risk-oriented assessments of applications by utilizing the established PASTA (Process for Attack Simulation and Threat Analysis) framework. This allows teams to swiftly identify the most probable and significant risks in less than two hours while ensuring that security measures are aligned with business objectives. By merging specialized threat libraries with current vulnerability information and threat intelligence, Fork accurately quantifies residual risks and aids in conducting business impact analyses. The platform also implements quality controls throughout the threat modeling process to enhance overall effectiveness. Additionally, Fork features a consolidated security insights dashboard that links threats directly to the attack surface of your application, while incorporating recognized frameworks and taxonomies like MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS, which facilitates focused mitigation strategies and practical outcomes. This comprehensive approach not only enhances security posture but also fosters collaboration between technical and business teams.

Description

IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more. IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform. Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

ServiceNow Yes 
AWS CloudFormation No 
CA Flowdock No 
CucumberStudio No 
FortifyData No 
GitHub No 
JUnit No 
Jira Service Management No 
Lucidchart No 
Microsoft Threat Modeling Tool No 
Microsoft Visio No 
OAuth No 
OWASP ZAP No 
OpenCTI Yes 
Redmine No 
Serenity BDD No 
Tavily Yes 
Terraform No 
ThreadFix No 
Veracode Yes 

Integrations

ServiceNow Yes 
AWS CloudFormation Yes 
CA Flowdock Yes 
CucumberStudio Yes 
FortifyData Yes 
GitHub Yes 
JUnit Yes 
Jira Service Management Yes 
Lucidchart Yes 
Microsoft Threat Modeling Tool Yes 
Microsoft Visio Yes 
OAuth Yes 
OWASP ZAP Yes 
OpenCTI No 
Redmine Yes 
Serenity BDD Yes 
Tavily No 
Terraform Yes 
ThreadFix Yes 
Veracode No 

Pricing Details

$75,000/yr
Starting at $75,000/year

Up to $150,000/year for 500–2,000 threat models
Free Trial No 
Free Version Yes 

Pricing Details

Enterprise licences can vary depending on integrations and threat modeling requirements. Please do contact us for a more detailed breakdown. Pricing is done by threat model and not by user to keep costs manageable and predictable.
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

VerSprite Cybersecurity

Founded

2007

Country

United States

Website

forktm.com

Vendor Details

Company Name

IriusRisk

Country

Spain

Website

www.iriusrisk.com/

Product Features

Product Features

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management No 
Mobile Access No 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management No 
Response Management No 
Risk Assessment Yes 

Alternatives

Alternatives

Devici Reviews

Devici

Security Compass
SD Elements Reviews

SD Elements

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity