IriusRisk, which offers companies an automated threat modeling platform, raised a $29M Series B led by Paladin Capital, bringing its total funding to ~$40M
Context & Ripple Effects
IriusRisk's $29M Series B lands two months after Axio's $23M Series B, putting fresh capital behind both sides of the same bet: that companies will buy software to model cyber risk before attacks happen rather than only tools that respond after. The round also marks a return for lead investor Paladin Capital, which previously backed the cyber risk quantification play RiskLens at Series B in 2019.
The raise slots into a busy 2021-2022 stretch for adjacent security categories — Panorays' $42M for third-party risk management, Traceable AI's $60M API protection round, and ThreatX's $30M Series B — with threat modeling positioned as the planning layer above those detection and protection products.
First-order effects
- IriusRisk gains roughly $29M to scale its automated threat modeling platform, with Paladin Capital now holding a lead position in a company whose total funding reaches ~$40M.
- Axio, which raised its own Series B just two months earlier for overlapping risk-modeling territory, now faces a better-funded direct rival competing for the same security teams' budgets.
Second-order effects
- Paladin Capital is now doubling down on the cyber risk modeling category across multiple portfolio bets (RiskLens, IriusRisk), pushing the firm to shape how buyers define and evaluate this software segment.
- Protection-focused vendors like ThreatX and Traceable AI face pressure to integrate or partner with threat modeling platforms, since enterprises allocating budget to pre-attack planning may trim spend on standalone point products.
Third-order effects
- If the pattern holds, security spending structurally shifts toward a quantification-and-modeling layer that sits above detection and response tools — making 'model the risk first' a procurement prerequisite rather than a compliance afterthought.
- Repeat specialist investors like Paladin consolidating positions across the category points toward eventual roll-up pressure among risk modeling vendors, as buyers favor fewer, integrated platforms over point solutions.
The trend: Cybersecurity venture capital is concentrating on risk modeling and quantification platforms as a distinct budget line above point-product security tools.