Table of Contents
Image of 'Release 4.20' on white background with 3D icons
IriusRisk Team
IriusRisk Team
|
The Threat Modeling Experts
September 28, 2023

Product Update: Release 4.20: Featuring Importing From LucidCharts, Visio & Microsoft

We are excited to announce the release of IriusRisk 4.20

Which includes these new enhancements and features:

  • Create complex threat models by importing nested trustzones for Lucidcharts, Visio, and Microsoft Threat Modeling Tool
  • Enjoy the shiny new user interface for the Reports and Security Classifications sections
  • Threat model more with a ton of new components including SAP, and functional components
  • Plus more!

Import complex diagrams from Visio, Lucidchart and MTMT with support for nested trustzones

You can now import Visio, Lucidchart and MTMT diagrams that contain nested trustzones, whether they’re inside other trustzones or even components. As you can see below, the Visio threat model has a combination of nested trustzones and components.

nested-tzs - feedback demo - Visio

IriusRisk can now parse these, creating for the above threat model this:

nested-tzs - feedback demo - Visio_imported

Preview and manage templates faster with the Template Details view

Similarly to projects, when you open the template list, as you click on each template, a panel with the relevant details of the selected template will appear. This will help you to see and edit key information for each template without opening and closing them.

image-20230907-072253

Get better access to reporting with the new Reports interface

Firstly, access to the reports has been moved from the left navigation bar to the project menu in the top right.

image-20230911-094239

And rather than taking you to a page, taking you away from what you were doing, it now opens up as a modal.

image-20230911-094406

Everything you need to do to create and manage reports from that model. And when you’re done just click the close button or press Escape on your keyboard. Of course this can be done from the Project home page as well as the diagram workspace etc.

Manage security classifications with ease with the new Security Classifications interface

It’s now even easier to create and manage security classifications thanks to the new page design.

image-20230911-094846

From here you can create, search, and filter security classifications including per-column filters and sorting:

image-20230911-094936

Clicking on a row opens up a panel on the right that lets you quickly and easily edit the details.

image-20230911-095120

Security Content

In this release we have a load of new components.


image-20230911-100043

10 new SAP components including:

  • SAP Ariba
  • SAP Cloud Connector
  • SAP Web App Server

7 new components including:

  • Event Streaming Platform
  • HashiCorp Vault
  • Message Broker

And 5 new functional components:

  • Chatbot
  • Cookie Consent Banner
  • Data Export/Import
  • E-commerce Coupon
  • Document Signing

Deprecations

ThreadFix Test Import Notice

From this release, the import test result functionality for ThreadFix will be removed.

Release notes

For more information, see the Version 4.20 Release Notes.

Shape the future of Threat Modeling with us!

Join IriusRisk Horizon

IriusRisk Horizon - Customer Research, Product Discovery, and Early Access. Join today.

Logos of the European Union with text 'Funded by the European Union NextGenerationEU', the Spanish Government Ministry of Economic Affairs and Digital Transformation, red.es, and the Plan de Recuperación, Transformación y Resiliencia.

FAQs

keyboard_arrow_down

keyboard_arrow_down

keyboard_arrow_down

keyboard_arrow_down

keyboard_arrow_down
About the author...

IriusRisk Team

The Threat Modeling Experts
IriusRisk
The IriusRisk Team represents the collective expertise and official voice of the company, driven by security researchers, product managers, and engineering leaders dedicated to the automation of threat modeling. This content is curated by the company's core staff to deliver official news, product roadmaps, and feature updates. The team's mission is to ensure every release and announcement is delivered with transparency, technical accuracy, and strategic alignment with the Secure by Design philosophy.