ThreatModeler Appoints Kevin Gallagher as CEO to Lead Post-Merger Growth and Define the Standard for Enterprise Threat Modeling
Cybersecurity / Leadership & Executive Moves | 4 min read
ThreatModeler, the leader in AI-driven threat modeling, has appointed Kevin Gallagher as Chief Executive Officer. Gallagher steps into the role at a defining moment for the company — following its landmark acquisition of IriusRisk, which united the top two enterprise threat modeling platforms and cemented ThreatModeler's position as the global leader in a surging $30 billion application security market. He will lead the company's strategy, go-to-market execution, and post-merger integration as it accelerates into its next phase of growth.
A Leader Who Has Built and Exited Cybersecurity Platforms Before
Gallagher brings more than two decades of experience scaling enterprise cybersecurity SaaS businesses through growth, consolidation, and successful exits. He most recently served as President of Invicti Security, where he led the operational and commercial integration of competing application security products into a unified enterprise platform. He had previously served as Invicti's Chief Revenue Officer — joining when the company operated as two separate platforms — where he unified go-to-market efforts, drove significant ARR growth, and helped lead the business through an exit valued at over $1 billion.
Between his two tenures at Invicti, Gallagher served as CEO of Endpoint Protector by CoSoSys, a PE-backed data loss prevention platform. There, he implemented a metrics-driven operating model, repositioned the company upmarket, and delivered a successful exit — a track record that mirrors precisely the mandate he now carries at ThreatModeler.
"Kevin has a proven track record of scaling cybersecurity platforms into category leaders and delivering strong outcomes for customers and investors. He knows how to integrate and grow at scale, brings immediate credibility with enterprise buyers and CISOs, and is exactly the leader ThreatModeler needs for this next growth phase."
— John DeLoche, Co-Founder and Managing Partner, Invictus Growth Partners
Why This Appointment Matters — AI Is Expanding the Attack Surface
The timing of Gallagher's appointment is deliberate. AI-driven development is fundamentally reshaping how software is built — and in doing so, is rapidly expanding the attack surface that enterprises must defend. Traditional security approaches are struggling to keep pace with the speed and scale of AI-generated code, and threat modeling — the discipline of identifying security risks at the design stage before they become vulnerabilities — is emerging as a critical line of defence. ThreatModeler's platform addresses this challenge directly, offering enterprises a way to remain secure by design at the speed of modern development, with documented results of up to 10x productivity gains and 50% cost savings for enterprise customers.
"ThreatModeler brings together the leading platform, the deepest dataset, and the scale of two best-in-class teams. AI is fundamentally changing how software is built — and expanding the attack surface in the process. Our mission is to help enterprises stay secure by design at scale and to define the standard for modern threat modeling."
— Kevin Gallagher, CEO, ThreatModeler
The IriusRisk Acquisition — Category Leadership at Scale
The acquisition of IriusRisk marked a transformative moment for the threat modeling space — bringing together the two dominant enterprise platforms under a single organisation. The combined entity now commands the industry's largest proprietary threat modeling dataset and serves Fortune 1000 companies across financial services, pharmaceutical, technology, and critical industrial manufacturing sectors in North America, EMEA, and Asia. The deal did not simply consolidate market share — it created a platform with unmatched data depth, enterprise capabilities, and global reach that no competitor can easily replicate.
Gallagher's appointment brings the post-merger integration into sharp focus. With a demonstrated ability to unify competing products, align go-to-market motions, and drive revenue growth in precisely this type of consolidation scenario, he is well suited to realise the full value of what the IriusRisk acquisition created.
"We've built ThreatModeler around a culture of delivering real results for our customers. Kevin brings a proven ability to scale that mindset — turning strong platforms into category leaders while staying deeply focused on customer outcomes. Together, we're focused on accelerating that impact and raising the standard for what enterprise threat modeling delivers."
— Archie Agarwal, Founder and Chief Innovation Officer, ThreatModeler
Key Takeaways
- • ThreatModeler, the AI-driven threat modeling category leader, has appointed Kevin Gallagher as CEO to lead strategy, go-to-market execution, and post-merger integration following its acquisition of IriusRisk — which created the dominant player in a $30 billion application security market.
- • Gallagher brings 20+ years of enterprise cybersecurity SaaS leadership. Previously President at Invicti Security (unified competing appsec platforms; led a $1B+ exit) and CEO of Endpoint Protector by CoSoSys (metrics-driven repositioning; successful PE exit).
- • The strategic context: AI-driven development is rapidly expanding enterprise attack surfaces, making secure-by-design practices a critical priority. ThreatModeler's platform delivers up to 10x productivity gains and 50% cost savings for enterprise customers, enabling security to scale with development velocity.
- • The IriusRisk acquisition united the top two enterprise threat modeling platforms, giving ThreatModeler the industry's largest proprietary threat modeling dataset and Fortune 1000 customers across financial services, pharma, technology, and critical industrial manufacturing in North America, EMEA, and Asia.
- • Gallagher's mission: realise the full value of the combined entity, drive the post-merger integration, and define the global standard for modern enterprise threat modeling at a moment when AI is transforming both software development and the security challenges that come with it.