threat-dragon

OWASP Threat Dragon OWASP Threat Dragon is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source community project that provides an intuitiv...

awesome-appsec

Awesome AppSec A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes. Maintained by Paragon Initiative Enterprises with contributions from the application security and developer communities. We also have other...

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways:...

cumulus

OWASP Cumulus - Threat modeling the clouds Cumulus is the easy way to bring security into cloud and devOps teams. As a variant of the card game Elevation of Privilege it follows the idea to threat model a system via gamification. This lightweight and low-barrier approach helps you find threats to...

ws4-secure-design-agentic-systems

CoSAI Workstream 4: Secure Design Patterns for Agentic Systems This repository is for the work of the CoSAI Workstream 4, Secure Design Patterns for Agentic Systems. CoSAI is an OASIS Open Project and an open ecosystem of AI and security experts from industry leading organizations dedicated to...

threatcl

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

threat-modeling-playbook

Intro We aim to improve product and software security with our new threat modeling playbook. We consider threat modeling as a foundational activity to improve your software assurance. We are convinced that a good threat modeling practice will measurably decrease security issues of delivered...

threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with automatic code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threa...

threatspec

threatspec - modelado de amenazas continuo, a través del código Threatspec es un proyecto de código abierto que tiene como objetivo cerrar la brecha entre el desarrollo y la seguridad al incorporar el proceso de modelado de amenazas más profundamente en el proceso de desarrollo. Esto se logra...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

threagile

Threagile Kit de Modelado de Amenazas Ágil Threagile consulte threagile.io para más detalles es un kit de herramientas de código abierto para el modelado de amenazas ágil: Permite modelar una arquitectura con sus activos de manera ágil como un archivo YAML directamente dentro del IDE. Al ejecutar...

Kaspersky_CVE-2024-3094

Security Review: CVE-2024-3094 XZ Utils Backdoor Author: Sushin Ivan Date: March 2026 1. Project Description This repository contains the results of a full security review of the vulnerability CVE-2024-3094 Supply Chain Attack in the XZ Utils library. Objective: Conduct threat analysis Threat...

threat-model-cookbook

Proyecto OWASP Threat Model Cookbook Este proyecto consiste en crear y publicar ejemplos de modelos de amenazas. Pueden ser representaciones en forma de código, gráficas o textuales. Los modelos utilizarán diversas tecnologías, metodologías y técnicas. Puedes aprender de estos modelos, usarlos co...

drawio-threatmodeling

Bibliotecas de Draw.io para el modelado de amenazas Esta es una colección de bibliotecas personalizadas para convertir la aplicación de diagramación gratuita y multiplataforma Draw.io en la herramienta perfecta para el modelado de amenazas. Diagramas de flujo de datos La diagramación de flujo de...

Threat_Model_Examples

Ejemplos de Modelos de Amenazas Este repositorio contiene varios ejemplos de modelos de amenazas para diferentes tecnologías y sistemas. Estos recursos proporcionan ejemplos ilustrativos de modelos de amenazas en distintos dominios, ayudando a profesionales de seguridad, desarrolladores e...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon은 무료 오픈 소스 크로스 플랫폼 위협 모델링 애플리케이션으로, 시스템 다이어그램 작성과 위협/대응을 자동 생성하는 규칙 엔진을 포함합니다. 이는 OWASP Incubator Project입니다. 이 프로젝트는 뛰어난 사용자 경험, 강력한 규칙 엔진, 그리고 다른 개발 수명 주기 도구와의 통합에 중점을 둡니다. OWASP에서 위협 모델링 및 위험 평가에 대한 좋은 개요를 제공하며, Threat Dragon이 달성할 목표는 다음과 같습니다: 데이터 흐름 다이어그램 설계 ...

pytm

pytm: 위협 모델링을 위한 파이썬 기반 프레임워크 소개 전통적인 위협 모델링은 너무 늦게 도입되거나 때로는 전혀 이루어지지 않는 경우가 많습니다. 또한 수동으로 데이터 흐름과 보고서를 작성하는 것은 매우 시간이 많이 소요됩니다. pytm의 목표는 위협 모델링을 개발 초기 단계로 옮겨, 보다 자동화되고 개발자 중심적으로 만드는 것입니다. 기능 아키텍처 설계에 대한 입력과 정의를 기반으로 pytm은 다음 항목을 자동으로 생성할 수 있습니다: 데이터 흐름 다이어그램 DFD 시퀀스 다이어그램 시스템에 관련된 위협 요구 사항...