"The problem we wanted to solve was getting a holistic view of security risks across our products, and quantifying those risks in a consistent and accurate way. We want to identify security requirements as early on as possible in the software development lifecycle with a view that remediating them early on is much easier and much less expensive. We were evaluating other tools in the space, and based on our criteria and requirements, IriusRisk came out on top. That was predominantly because it had the flexibility for us to define our own custom risk libraries and an API where we could integrate our existing security testing."