Quantios Strengthens Secure Software Development Through Threat Modelling with Bridewell

The Challenge 

AI is accelerating software development while increasing the pace and ease with which attackers can target software providers. For Quantios, this reinforced the need to understand threats to its SaaS products before development begins. 

The business already had an established development lifecycle and internal security expertise. However, it wanted clearer visibility of its existing controls, where those controls needed strengthening and how its risk exposure was changing. 

Threat modelling needed to produce meaningful, actionable findings that would help teams focus remediation where it mattered most. Quantios also wanted to build its understanding of the process so it could establish consistent procedures across its product portfolio. 

Alongside this, the business recognised the value of external oversight to support longer-term security planning and identify areas requiring further investment. 

The Solution 

Bridewell built on its understanding of Quantios’s business and technology environment to guide the team through the threat modelling process. 

The partnership had initially focused on application penetration testing, helping Quantios strengthen application security. Bridewell subsequently supported the implementation of its ISO 27001 programme, helping the business demonstrate the robustness of its security controls to customers. 

The relationship expanded to include a managed detection and response service, providing 24/7 security monitoring and response capabilities. This broader engagement gave Bridewell a foundation for supporting Quantios’s more strategic security objectives. 

For the threat modelling engagement, Bridewell worked with Quantios to develop a detailed threat model for one application within its portfolio. The team provided guidance throughout the process, helping Quantios understand the methodology and establish an approach it could repeat across other products. 

Quantios then built an agentic threat modeller to generate new threat models on demand. Bridewell supported this work by reviewing the tool’s outputs against a selection of pilot products, bringing specialist expertise to the assessment of its findings. 

The Outcomes 

The engagement gave Quantios a detailed application threat model and a foundation for extending threat modelling across its software portfolio. 

With a stronger understanding of the process, Quantios was able to develop its own procedures and build a tool that provides continuous threat model updates based on the code its teams have written. This supports its ambition to make threat assessment a repeatable part of secure software development. 

The wider partnership has also helped Quantios take a longer-term view of its security posture. External expertise complements its internal security team, supporting plans to address weaknesses and strengthen defences as the business develops.