Toronto company developing SD Elements, software that generates security and compliance requirements for developers and AI coding agents and tracks their implementation, alongside the Devici threat-modelling tool and hands-on application security training.
Canadian innovation builds a brighter tomorrow.
Toronto company developing SD Elements, software that generates security and compliance requirements for developers and AI coding agents and tracks their implementation, alongside the Devici threat-modelling tool and hands-on application security training.
Acquired Devici, a diagram-based threat-modelling platform founded by Chris Romeo, announced June 3, 2025; the release says it followed the 2024 acquisition of training product Kontra. financialpost.com
States it is certified to ISO/IEC 27001 and AICPA SOC. securitycompass.com
Its July 2024 release describes the company as a solution provider to financial and technology organizations, the U.S. Department of Defense and government agencies. securitycompass.com
Products Security Compass publishes on its own site. Each card links to the page it was taken from.
Security requirements
Generates security and compliance requirements tied to an organization's architecture and policies, delivers them into Jira, GitHub, IDEs and AI-assisted development tools, and tracks them through validation for audit.
Learn more SourceThreat modeling
Visual, drag-and-drop threat modelling of components, data flows and trust boundaries; identified threats feed into SD Elements as security requirements.
Learn more SourceAnnounced rounds only, newest first. Undisclosed amounts are shown as undisclosed.
Jan 16, 2020
Investors: FTV Capital
Jan 16, 2020
Investors: CIBC Innovation Banking
Publicly announced partnerships.
General availability of an SD Elements integration with ZeroPath's AI-native scanning; ZeroPath scans code against SD Elements requirements. Sold and supported by Security Compass (2026).
Integration partnership (March 2024) bringing SD Elements threat modeling into Checkmarx One and Checkmarx SAST.
Partnership (2021) to incorporate ISASecure / ISA/IEC 62443 standards into SD Elements; Security Compass joined the ISA Security Compliance Institute as a voting technical member.
Government support actually received. Unpublished amounts are left out.
Industrial Research Assistance Program (IRAP Contributions to Firms), National Research Council Canada — contribution
National Research Council Canada, R&D project support to SD Elements Inc. — contribution
National Research Council Canada, R&D project support to Security Compass Inc. — contribution
National Research Council Canada, R&D project support to Security Compass Inc. — contribution
Security Compass announced general availability of an integration with ZeroPath's code-scanning platform: SD Elements generates requirements before code is written and ZeroPath scans pull requests and repositories against them, writing results back to SD Elements. ZeroPath is sold and supported by Security Compass.
Security Compass released SD Elements for Agentic AI Workflow, which feeds predefined security, compliance and policy requirements into AI-agent development and validates their implementation, producing audit evidence whether code is written by a developer or an agent.
Security Compass announced it acquired Devici, a threat-modelling platform, to complement SD Elements. Devici founder Chris Romeo joins Security Compass as Vice President, Devici. The release notes the deal follows the 2024 acquisition of Kontra.
Terms the company uses about its own work.
Other companies in Cybersecurity.
Discover companies, track funding, explore career opportunities and stay informed about Canada’s growing tech ecosystem.
