Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Criminal IP Reviews & Ratings
    457 Ratings
    Company Website
  • Criminal IP ASM Reviews & Ratings
    21 Ratings
    Company Website
  • ThreatLocker Reviews & Ratings
    700 Ratings
    Company Website
  • SOCRadar Extended Threat Intelligence Reviews & Ratings
    115 Ratings
    Company Website
  • ESET PROTECT Advanced Reviews & Ratings
    2,304 Ratings
    Company Website
  • PowerDMARC Reviews & Ratings
    266 Ratings
    Company Website
  • ManageEngine EventLog Analyzer Reviews & Ratings
    211 Ratings
    Company Website
  • Veeam Data Platform Reviews & Ratings
    1,265 Ratings
    Company Website
  • Omnilert Reviews & Ratings
    26 Ratings
    Company Website
  • ManageEngine Log360 Reviews & Ratings
    190 Ratings
    Company Website

What is OWASP Threat Dragon?

OWASP Threat Dragon is a modeling tool specifically designed to create diagrams that illustrate potential threats throughout a secure development lifecycle. Following the guidelines set forth in the threat modeling manifesto, Threat Dragon allows users to document possible threats and devise effective mitigation strategies, while also offering a visual overview of the various components and surfaces related to the threat model. This adaptable tool comes in both a web-based format and a desktop application, catering to different user preferences. The Open Web Application Security Project (OWASP), a nonprofit organization focused on improving software security, makes all its projects, tools, documents, forums, and chapters freely available to anyone interested in enhancing application security practices. By promoting collaboration and the exchange of knowledge, OWASP fosters a community-driven approach that aims to raise security standards in software development. Ultimately, Threat Dragon empowers developers to proactively address security concerns and integrate effective threat modeling into their workflows.

What is IriusRisk?

IriusRisk serves as an accessible Threat Modeling platform suitable for both development and operations teams, even those lacking previous security knowledge. Regardless of whether an organization adheres to a specific framework, we accommodate various threat modeling methodologies including STRIDE, TRIKE, OCTAVE, and PASTA. Our platform supports a diverse range of sectors, including financial services, insurance, industrial automation, healthcare, and the private sector. Recognized as a premier solution for threat modeling and secure design within Application Security, IriusRisk collaborates with enterprise clients that include Fortune 500 companies in banking, payments, and technology. The platform equips security and development teams to integrate security measures from the outset, leveraging its robust threat modeling capabilities. By utilizing IriusRisk, teams can initiate threat modeling practices from the ground up or enhance their existing frameworks, leading to increased efficiency in market delivery, improved teamwork between security and development personnel, and a significant reduction in potential security vulnerabilities. Ultimately, IriusRisk is designed to foster a culture of proactive security across all stages of application development.

Media

Media

Integrations Supported

Amazon CodeWhisperer
Bizzy
CycloneDX
Escape
EthicalCheck
Seconize DeRisk Center
Tenable One AI Exposure

Integrations Supported

AWS CloudFormation
Amazon Web Services (AWS)
Azure DevOps
Cucumber
CucumberStudio
FortifyData
Jira
Lucidchart
Microsoft Visio
Redmine
Serenity BDD
Terraform
ThreadFix

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided

Pricing Information

Enterprise licences can vary depending on integrations and threat modeling requirements. Please do contact us for a more detailed breakdown. Pricing is done by threat model and not by user to keep costs manageable and predictable.
Free Version

Supported Platforms

SaaS

Supported Platforms

SaaS
On-Prem

Customer Service / Support

Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Not specified

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

OWASP

Date Founded

2001

Company Location

United States

Company Website

owasp.org/www-project-threat-dragon/

Company Facts

Organization Name

IriusRisk

Company Location

Spain

Company Website

www.iriusrisk.com/

Categories and Features

Threat Modeling

Not specified

Categories and Features

Cyber Risk Management

Not specified

Risk Management

Alerts/Notifications
Auditing
Business Process Control
Compliance Management
Corrective Actions (CAPA)
Dashboard
Exceptions Management
IT Risk Management
Internal Controls Management
Operational Risk Management
Predictive Analytics
Risk Assessment

Threat Hunting

Not specified

Threat Modeling

Not specified

Popular Alternatives

Fork Reviews & Ratings

Fork

VerSprite Cybersecurity

Popular Alternatives

Devici Reviews & Ratings

Devici

Security Compass
Devici Reviews & Ratings

Devici

Security Compass
Fork Reviews & Ratings

Fork

VerSprite Cybersecurity
SD Elements Reviews & Ratings

SD Elements

Security Compass