Company profile
ThreatModeler
Enterprise threat modeling, now merged with former rival IriusRisk: the Nexus platform's Secure Design Graph links architecture, threats, requirements, mitigations and past security decisions, and the new NexusAI…
- Status
- PrivateListed on CyberMerge Startup Radar (private vendors), snapshot Oct 20, 2026
- Valuation
- Undisclosed
- Latest funding
- Undisclosed
- HQ
- New Jersey / US-Spain (Startup Radar)
- Last updated
Categories
Funding & valuation
Funding: Undisclosed — no round recorded in the CyberMerge Funding Tracker.
Latest signals
- Startup Radar · Application Security · snapshot Oct 20, 2026 20 Oct 2026: launched NexusAI inside ThreatModeler Nexus, its agentic step after the IriusRisk combination and July's unified platform; CEO Kevin Gallagher, 14 patents (PR Newswire). Ownership: majority-owned by growth investor Invictus Growth Partners since 2024; the IriusRisk deal (closed end-2025) was reported at over $100M, with combined ARR around $50M and about 300 customers, mostly Fortune 1000 (Fortune). Source
Competitors
Same-category peers from CyberMerge Research maps, Startup Radar and What's The Use tags.
- ArmadinPrivateAI-native offensive security: autonomous agent swarms chain low-severity weaknesses into validated kill…
- OX SecurityPrivateAI-native AppSec from prompt to runtime: ASPM/PBOM, VibeSec for AI-generated code, plus OX Cloud CNAPP with…
- HadrianPrivateAgentic offensive security: Atlas continuously maps the external attack surface and uses AI agents to…
- SnykPrivateDeveloper-first AppSec platform: code (SAST), open-source dependency (SCA), container and IaC scanning, now…
- Aikido SecurityPrivateUnified developer AppSec suite (SAST/SCA/secrets/cloud/runtime) with autofix; European unicorn.
- ApiiroPrivateDeep-code ASPM with Risk Graph, design-phase AI threat modeling, AutoFix.
- ArmorCodePrivateUnified exposure / ASPM orchestration across AppSec, cloud, and AI findings.
- BlackwallPrivateWeb traffic security sold through hosting, cloud and managed service providers (formerly BotGuard): bot…
- ChainguardPrivateSafe-source open-source: zero-CVE container images, libraries, and supply-chain factory.
- CodeWallPrivateAutonomous AI offensive security: multiple specialized agents start with no credentials or inside knowledge,…
- Fleuret AIPrivateAgentic continuous pentesting: two AI agents (Emile and Champollion) map exposed apps, APIs and…
- GitGuardianPrivateSecrets detection + non-human identity / AI-agent credential governance across SDLC.
Figures appear only as recorded in CyberMerge data, with source and date. “Undisclosed” means no published figure in our data. Editorial, not investment advice. Last updated . Spot an error? Tell the desk.