IriusRisk alternatives
IriusRisk alternatives for NZ and Australian businesses
IriusRisk: Enterprise is quoted by model capacity, with an AWS Marketplace listing at US$35,000 for 12 months and five threat models.
- check_circleYour data in a database you own
- check_circleOpen source, no lock-in
- check_circleBuilt and run by Enterprise DNA
The options
What people compare IriusRisk with
IriusRisk Enterprise pricing is quoted privately for the threat-model capacity you need, with unlimited users. You may be looking for an alternative because you want your own records and review workflow rather than relying on a managed modelling platform.
Yours to own
Threat Modelling for Claude Code
The open-source threat modelling desk that is just a database and Claude Code. Built around your business, with your IriusRisk data brought across.
See how it worksHow to choose
How to choose a IriusRisk alternative
- 1
What drives the bill
IriusRisk Enterprise pricing is based on the threat-model capacity you need, while unlimited users are included. Compare that with the parts your team uses, including libraries, diagrams, reports, integrations and support. An owned version is arranged as one setup fee followed by a monthly retainer, with scope agreed before work starts.
- 2
Where your records live
Ask where live designs, reports and exports sit, who can access them, and who controls backups. The free version can run with a trusted operator accessing its database, with reports and exports kept private. For a team version, agree hosting, backups and access controls before importing live designs.
- 3
Fit with your own rules
Check whether the system can reflect your fields, review rules and decision process, rather than forcing your team into a standard workflow. An owned version can be built around the risks you record, the safeguards you verify, and the internal references your reviewers use.
- 4
What the switch involves
Check which IriusRisk export you can provide, what it contains and which fields need mapping. A full-model export can include design elements and referenced threats and safeguards. Diagram-only exports are different. Before switching, check the export type and counts, and review the records after import.
The option that fits
Own a version shaped around your business
Your own threat-modelling system can be shaped around how your business reviews designs, records risks and makes decisions. Enterprise DNA brings your IriusRisk data across, checks the export and maps fields that need attention, then builds and operates your version. Your records live in a database you own, and your team can work in plain language. Enterprise DNA charges one setup fee, then a monthly retainer. The free version is available if you want to run it yourself.
- check Bring across full-model exports and retain the original.
- check Keep proposed safeguards separate from verified evidence.
- check Run the free version yourself or use Enterprise DNA.
Make it yours
Design your own IriusRisk replacement
Everything starts from the open-source base. Then it gets your name, the parts you run, your rules and your data from IriusRisk. Try it here, and we build the real one.
2. What it runs
3. Make it fit
4. Your colour
Answered from your own database
Good morning. Here is what needs you today.
We build it from the open-source base, bring your IriusRisk data across and run it for you.
Questions
IriusRisk alternatives, answered
Does IriusRisk charge per user? expand_more
No. Enterprise includes unlimited users. Its pricing is quoted privately and based on the threat-model capacity you need, so the comparison is not a per-seat calculation. Consider model capacity and the platform features your team relies on, then compare them with an owned system arranged as one setup fee and a monthly retainer.
Can you bring existing IriusRisk models across? expand_more
Yes, using the documented full-model export available to IriusRisk Enterprise users. It can include design elements and referenced threats and safeguards, with the full original kept. Diagram-only exports are different. Enterprise DNA checks the export type and counts, then reviews fields that need mapping before the switch.
Will an owned version replace every IriusRisk feature? expand_more
Not automatically. The free version covers design review records, threat assessments, mitigation work, verification evidence and risk decisions. IriusRisk also provides maintained threat libraries, automatic threat generation and interactive diagrams. Agree the scope with your reviewers, including the connections and screens your version needs.
What does the free version cost to run? expand_more
The software has no licence charge. Hosting, backups, agent subscriptions and your team’s time are separate. You can run it yourself, or Enterprise DNA can customise and operate it for one setup fee followed by a monthly retainer, with the scope agreed before work starts.
Done comparing? Own the one that fits.
30 minutes with Sam. Bring what IriusRisk costs you a year and how you run. We show you what your own version looks like, and if it is a fit, we build it and bring your data across.
Get your version builtDone paying for IriusRisk?
Get your version built