IriusRisk pricing
IriusRisk pricing and what it adds up to
Enterprise is quoted by model capacity, with an AWS Marketplace listing at US$35,000 for 12 months and five threat models.
- check_circleYour data in a database you own
- check_circleOpen source, no lock-in
- check_circleBuilt and run by Enterprise DNA
The plans
What IriusRisk charges
IriusRisk Enterprise is quoted privately according to the number of threat models you need, and includes unlimited users. A vendor-sold AWS Marketplace listing shows US$35,000 for a 12-month contract with five threat models, but that is not a verified New Zealand or Australian customer invoice.
Community
Free
Community offers a free starting point for an individual.
Enterprise
Quoted privately
The quote is based on the threat model capacity you need and includes unlimited users.
How the bill is built
Threat model capacity
Enterprise is priced around the threat model capacity you need. The public listing figure covers five models, so the number of models your programme needs is the clearest stated factor behind the quote.
Team participation
Enterprise includes unlimited users. The price is not presented as a charge for each reviewer, so a larger team does not mean multiplying a per-seat rate. The stated pricing basis is the model capacity you need.
Platform features
IriusRisk includes threat and countermeasure libraries, configuration options, interactive diagrams, model exports and reporting. These are part of the managed platform you are choosing, alongside its modelling capacity, rather than separately priced amounts in the public information.
Connections and support
Issue tracker connections, configuration and onboarding are also part of the platform choice. The information does not give separate prices for these items, so ask what your Enterprise quote includes for the systems and support your team needs.
A year of IriusRisk
What a year can cost
IriusRisk Enterprise is quoted privately, so you cannot use the listing as a confirmed local renewal price. A vendor-sold AWS Marketplace listing is US$35,000 for a 12-month platform contract including five threat models. Enterprise pricing is based on model capacity, not seats, and includes unlimited users. Your quoted cost depends on the capacity your programme needs.
Underneath the bill
What you are really paying for
Capacity for models
Enterprise buys capacity for the threat models your programme needs. That is the stated basis of the private quote, while the AWS Marketplace listing specifies five threat models. Users are unlimited, so seat count is not the underlying pricing unit.
Modelling platform
You are paying for a managed platform with threat and countermeasure libraries, configuration options and interactive diagrams. Those tools support modelling work beyond keeping a list of risks, and are part of what you choose with IriusRisk.
Reporting and connections
The platform choice also includes model exports and reporting, plus issue tracker connections, configuration and onboarding. The public information does not give separate prices for these items, so they form part of the scope to clarify in your quote.
The owned alternative
A version your business owns
Threat Modelling for Claude Code keeps the same modelling records in a database your business owns, and you work with them in plain language using Claude Code. Enterprise DNA builds a version around how your business works, brings your IriusRisk data across and runs it for you. The arrangement is one setup fee followed by a monthly retainer, with no per-seat plan. There is also a free version you can run yourself.
Threat Modelling for Claude Code
One setup fee, then a monthly retainer. No per-seat plans, no tiers, and the system is yours.
Make it yours
Design your own IriusRisk replacement
Everything starts from the open-source base. Then it gets your name, the parts you run, your rules and your data from IriusRisk. Try it here, and we build the real one.
2. What it runs
3. Make it fit
4. Your colour
Answered from your own database
Good morning. Here is what needs you today.
We build it from the open-source base, bring your IriusRisk data across and run it for you.
Questions
IriusRisk pricing, answered
What should you budget for an IriusRisk renewal? expand_more
IriusRisk Enterprise is quoted privately based on the model capacity you need. A vendor-sold AWS Marketplace listing shows US$35,000 for a 12-month contract including five threat models. It is not a verified New Zealand or Australian customer invoice, so treat it as a listing, not your confirmed renewal price.
Does IriusRisk charge for each person on your team? expand_more
Enterprise includes unlimited users, so its stated pricing basis is not a charge for every reviewer. The quote is based on the threat model capacity you need. Community is a free starting point for an individual, while Enterprise supports a larger programme.
Can you move your existing IriusRisk models? expand_more
Yes, IriusRisk Enterprise users can make a documented full-model export. The import can bring across design elements and referenced threats and safeguards where present, and keeps the full original. Diagram-only exports are different, so check the export type and model contents before switching.
Stop paying IriusRisk every month
30 minutes with Sam. Bring your last IriusRisk bill. We show you what your own version looks like, and if it is a fit, we build it and bring your data across.
Get your version builtDone paying for IriusRisk?
Get your version built