Welcome to our Blog

Threat modeling is proactive, addressing security during development, while vulnerability management is reactive, focusing on fixing existing issues.

This article explores the importance of threat modeling in the context of the Log4j case, emphasizing the need for proactive security practices in software design and development. It discusses the differences between design flaws and implementation issues and highlights the four key questions in threat modeling.

We are excited to announce the release of IriusRisk 4.12 which includes these new enhancements and features:

Automotive manufacturers have to demonstrate they use processes within an effective Cyber Security Management System, that perform threat & risk assessment

The article highlights the need to consider threat models in SBOM for supply chain security and suggests future inclusion of threat models in SBOM standards. It emphasizes the importance of performing threat modeling for secure software development alongside using SBOMs.

All the categories of the Hierarchy of Needs for Threat Modeling limits you to see and reason what is the best way to scale Threat Modeling. Except when you are Self-Actualized.

We are excited to announce the release of IriusRisk 4.11 which includes these new enhancements and features:

We are excited to announce the release of IriusRisk 4.14 which includes these new enhancements and features:

Need to better understand threat modeling terminology and acronyms? Check out the IriusRisk Blog for a summary.