AI threat modeling · OT & IT · Australian compliance

See the risk
before it ships.

Metis turns a project into an expert-grade threat model in minutes, then maps it to AESCSF, SOCI and the Essential Eight.

Metis dashboard showing security posture, risk mitigated and compliance scores, with threats, controls and residual risk across 10 scenarios
Built for
  • AESCSF
  • SOCI Act
  • Essential Eight
  • ASD Fortify
  • IEC 62443
  • STRIDE

1–2days

per threat model, down from 5–7

75–80%

accuracy of the AI draft in lab testing

A$12–15K

saved per project in consulting effort

How it works

From architecture to assurance.

01Model

Map the architecture once.

Drag components onto the canvas, place them in trust zones and connect the flows. Or paste a description and let Metis draw it.

  • People, servers, network and OT components
  • Trust zones and boundary crossings
  • Canvas, Mermaid or plain-text input
Metis Threat Modeler canvas with a component palette of people, servers and network devices

02Analyse

AI finds the threats in minutes.

Every threat is classified, scored and paired with a recommended control, grounded in your architecture.

  • STRIDE-classified threats
  • Initial and residual risk
  • AI-recommended controls
Metis threat table listing STRIDE threats with initial risk, residual risk, controls and AI recommendations

03Track

Every project at a glance.

See threats, controls and mitigation progress for each scenario, with a risk heatmap you can read in a second.

  • Risk heatmap per scenario
  • Controls and mitigation progress
  • Residual risk, recalculated on confirmation
Metis scenario cards showing threats, controls, mitigation percentage and a risk heatmap

04Comply

Compliance built in.

Track AESCSF, the SOCI Act, the Essential Eight and ASD Fortify in the same platform as your threat models.

  • AESCSF Security Profiles SP-1 to SP-3
  • Implementation scored by domain
  • Executive report, ready to share
Metis AESCSF compliance tracker with overall implementation score and a bar chart by domain

05 · CISO View

Your board briefing, always ready.

AESCSF, SOCI, Essential Eight, enterprise risk and incident reporting in one view, with a ranked list of what needs attention this week.

Metis CISO View with AESCSF, SOCI, Essential Eight, enterprise risk and incident reporting tiles, a ranked attention list and compliance timelines

Security & trust

Built for operators who can't take chances.

How we protect your data
  • Data in Australia

    Stored in Google Cloud Australian regions, encrypted at rest and in transit.

  • Isolated per organisation

    Access to your data is enforced server-side, with SSO and role-based permissions.

  • Bring your own AI key

    Run analysis on your own AI provider account.

  • People decide

    Risk only drops when a person confirms a real control.

Pricing

Start free. Scale when ready.

Community

Evaluate Metis on a real project.

Free

  • 2 scenarios
  • All threat modeling frameworks
  • All security frameworks
  • Local authentication
Start free

Starter

Formalise your security posture.

$49AUD / mo

  • 8 scenarios
  • Everything in Community
  • Compliance posture management
  • SSO and zone integration
Get started

Enterprise

Risk and security architecture groups.

Custom

  • Unlimited scenarios
  • Everything in Pro
  • All integrations
  • Dedicated support
Talk to sales

Assess your next project
this week.