Define: Threat model?
Threat modeling is a process by which potential threats, such as structural vulnerabilities or the absence of appropriate safeguards, can be identified, enumerated, and mitigations can be prioritized. The purpose of threat modeling is to provide defenders with a systematic analysis of what controls or defenses need to be included, given the nature of the system, the probable attacker’s profile, the most likely attack vectors, and the assets most desired by an attacker. Threat modeling answers questions like “Where am I most vulnerable to attack?”, “What are the most relevant threats?”, and “What do I need to do to safeguard against these threats?”.
(Source)
Top Digital Threat Modeling Companies and Solutions
This article showcases Threat.Technology’s top picks for the best Digital Threat Modeling solutions. We selected these companies for exceptional performance in one of these categories:
- Innovation
- Innovative ideas
- Innovative route to market
- Innovative product
- Growth
- Exceptional growth
- Exceptional growth strategy
- Management
- Societal impact
Data sourced from Crunchbase and SemRush.
IriusRisk
Crunchbase | Website | Twitter | Facebook | Linkedin
We are dedicated to building the tools you need to manage the security of your software. Security tools and processes have to be business enablers, not blockers; and they cannot slow down the speed of development.
Our solutions integrate with the normal development workflow, so that security is truly built in from the start.. .
Avocado Systems
Crunchbase | Website | Twitter | Facebook | Linkedin
Next-generation Agentless Application Security & Monitoring for Enterprise
E8 Security
Crunchbase | Website | Twitter | Facebook | Linkedin
E8 Security helps enterprises analyze and detect advanced attacks and malicious insider activities. The company was founded by security experts (Google, Visa, Loglogic) with complementary skills and experience in threat modeling and big data.
The company is backed by top-tier investors and a strong advisory board.. .
Neohapsis
Crunchbase | Website | Twitter | Facebook | Linkedin
Neohapsis provides mobile and cloud security services to enterprises and government agencies. It offers application security services, including application assessment, architecture design assessment, threat modeling, secure software development lifecycle assessment, and product security assessment; and cloud security services, including rapid secure cloud application deployment, cloud application assessments, cloud data compliance, and cloud infrastructure assessment.
It also assists clients with various compliance requirements, including payment card industry data security standard, the U.S. state data protection and data privacy, HIPAA/HITECH, NERC CIP, and DIACAP.
In addition it provides IT risk management and governance, third-party risk management, cloud computing strategy, mobile security, and on-site advisory; mobile application, mobile infrastructure, mobile device security, mobile strategy, policy, and risk management services; and network and endpoint security services, including network archite…. .
ThreatModeler
Crunchbase | Website | Twitter | Facebook | Linkedin
ThreatModeler is an automated threat modeling platform.
Iterasec
Crunchbase | Website | Twitter | Facebook | Linkedin
In 2019 we founded Iterasec with a vision to provide a unique blend of cybersecurity and software engineering expertise, which helps us address product and software security from a much broader perspective. At the moment we are a boutique-style company of 10+ people fully focused on application security and secure engineering processes.
Our key services: Software vulnerability assessment and penetration testing Threat modeling Cloud and containers security checks Smart compliance services (ISO27001, SOC2, TISAX, etc.). .
Intrepidus Group
Crunchbase | Website | Twitter | Facebook | Linkedin
Intrepidus Group provides mobile application and device security services. The company offers assessment services, including mobile application penetration testing, mobile application source code review, mobile application threat modeling, smartphone device testing, telecommunication product review, network and application penetration testing, social engineering, and source code review services.
The company also provides strategic services such as security assurance services, including threat modeling, penetration testing (network and application), architecture reviews, source code reviews, and server configuration reviews; and enterprise mobile security strategy services such as policies and procedures for mobile email access, document repositories, password and device encryption, lost or stolen devices, device deprovisioning, and general device security settings. In addition, Intrepidus Group provides training services, including in-person, online, computer-based iOS, and Android secure coding training.
The company offers its services to detect security flaws in mobile devices, applications, systems, and networks. Intrepidus Group was founded in 2006 and is based in New York, United States..
Practical Threat Analysis
Crunchbase | Website | Twitter | Facebook | Linkedin
PTA Technologies is a division of Eldan Software Systems Ltd. specializing in algorithmic research of Threat Analysis and Threat Risk Assessment models.
The company has developed a unique quantitative technology for analyzing system threats, assessing them in monetary values and creating prioritized risk mitigation plans. Eldan Software System is a privately owned company, based in Israel and provides professional software development services since 1984; its software security division has over 8 years of experience in threat modeling and risk assessment of software projects worldwide..
Bounce Security
Crunchbase | Website | Twitter | Facebook | Linkedin
Bounce Security is a security consulting agency that focuses on bringing software security to where it belongs. Their value-driven security is fit for modern development teams looking to design and implement security features in their software.
They offer services that include security road-mapping, threat modeling workshop, and software security consulting. Bounce Security was founded by Avi Douglen in 2017 and is based in Modi’in, Israel..
Hack2Secure
Crunchbase | Website | Twitter | Facebook | Linkedin
Solutions and services that conserve the security issues of companies of all sizes in all industries. Hack2Secure, the pioneer in the domain of IT security offers industry standard IT security programs, training, services as well as solutions.
With the certified professionals and industry experts in our team, we are available to offer effective and quality service in a timely manner. Vector Independent and Customizable Certification And Training Program In IT Security Security professionals, companies and even students who are looking for guidance on the security knowledge and tools can find an excellent opportunity with our service.
Training courses cover entire aspects across the security domain and facilitate the candidates to become a master in the IT security. The security programs can be customizable based on the requirements and convenience of the candidates.
Notable Features Of The Program We offer worldwide proctored security certification program with the Pearson VUE support Secure SDLC Certification and workshop ensure that the candidate possesses adequate knowledge on the IT security. Number of candidates who received training from us has been exceeded over 15k across the globe.
End -To End Security Service Professional services make the candidates as a warrior against the evolving dangerous security threats. Inspiring the professionals with the following ideas: Secure Software Development Life Cycle.
Secure Application Design. Threat Modeling.
This article was written by Benjamin Skute from Threat.Technology. The editor for this article was Tess Page. If your company is featured in this article and you want to have amendments made please contact us on: [email protected].
Alternatively you may write to us at: Threat.Technology/Fupping Ltd, First Floor, 61-63 Rochester Pl, London NW1 9JU.
