ThreatModeler launches NexusAI to automate threat modeling and track changes

ThreatModeler has announced the launch of NexusAI, a new artificial intelligence-powered feature within its ThreatModeler Nexus platform. According to Help Net Security, this release introduces an agentic automation tool designed to assist enterprises in managing threat modeling workflows more efficiently without increasing manual labor for security teams.

The new system helps organizations handle the growing pressure to assess applications as development cycles accelerate. NexusAI automates significant portions of the work required to create, analyze, and maintain threat models. This allows security professionals to scale their impact across more systems while keeping critical decision-making authority in human hands.

How NexusAI Works

NexusAI brings agentic automation to the threat modeling process by understanding application architecture and analyzing security requirements. Rather than generating a static, one-time model, the tool operates within the broader ThreatModeler Nexus platform. It combines AI-driven automation with connected organizational security knowledge and development workflows to maintain relevance over time.

Kevin Gallagher, CEO of ThreatModeler, emphasized that generating a model is only the initial step. He stated that the real opportunity lies in making that intelligence useful long after the first model is created. By connecting threat modeling to development processes, the tool aims to make security smarter and more consistent as organizations build on existing knowledge.

Key Capabilities and Automation

NexusAI introduces intelligent automation across three specific areas of the security lifecycle. First, it simplifies threat model creation by allowing users to generate and explore models using natural language, diagrams, documentation, and existing application context. This reduces the barrier to entry for creating initial security assessments.

Second, the tool accelerates security analysis by identifying relevant threats, security requirements, and risks. It provides AI-powered analysis and recommendations to help teams prioritize their efforts. Third, it helps teams keep pace with development by identifying architectural changes and proposing threat model updates for human review, which reduces ongoing maintenance burdens.

Impact on Security Teams

As AI accelerates application development, security teams face increasing pressure to manage risk without slowing innovation. ThreatModeler states that NexusAI addresses this challenge by taking on the heavy lifting of threat modeling. This enables organizations to bring security into the flow of development while ensuring that security experts remain in control of critical decisions.

The platform connects threat modeling with organizational security knowledge and development workflows. This integration ensures that the threat models remain aligned with current application states and enterprise governance standards. The result is a system that builds on security knowledge organizations already have, making the process more valuable over time.

What should you do?

Security leaders should evaluate how their current threat modeling processes align with rapid development cycles. Teams can assess whether manual maintenance of threat models is becoming a bottleneck. Organizations should look for tools that integrate with existing development workflows to reduce friction.

What to do and how to stay safe: ThreatModeler

• Review current threat modeling workflows to identify manual tasks that could be automated.
• Evaluate if existing tools integrate with development pipelines to track architectural changes.
• Ensure that any AI-assisted security tool keeps human experts in control of final decisions.
• Monitor vendor announcements for updates on AI capabilities in security platforms.

Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What is ThreatModeler NexusAI?

NexusAI is an AI-powered threat modeling partner within the ThreatModeler Nexus platform that automates the creation, analysis, and maintenance of threat models.

How does NexusAI handle architectural changes?

The tool identifies architectural changes in applications and proposes updates to threat models for human review, reducing ongoing maintenance efforts.

Who benefits from NexusAI?

Enterprises and security teams that face pressure to assess more applications and manage risk without slowing down application development innovation.