threat-modeling

There are 25 repositories under threat-modeling topic.

veeral-patel / how-to-secure-anything
How to systematically secure anything: a repository about security engineering
secure-design secure-systems security security-architecture security-assurance security-engineering threat-modeling
10180
Security-101
microsoft / Security-101
8 Lessons, Kick-start Your Cybersecurity Learning.
appsec cia-triad data-protection data-security iam identity risk-management secops security threat-modeling zero-trust
Language:HTML 5858
awesome-threat-modelling
hysnsec / awesome-threat-modelling
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
appsec awesome awesome-list devsecops devsecops-university practical-devsecops security-review threat-modeling
Language:Dockerfile 1659
OWASP / threat-dragon
An open source threat modeling tool from OWASP
threat-modeling sdlc owasp owasp-threat-dragon threat-dragon
Language:JavaScript 1201
OWASP / pytm
A Pythonic framework for threat modeling
data-flow-diagram sequence-diagram dfd pythonic-framework threats threat-modeling threat-modeling-from-code secure-development diagram dataflow
Language:Python 1058
michenriksen / drawio-threatmodeling
Draw.io libraries for threat modeling diagrams
drawio threat-modeling data-flow-diagram attack-trees diagramming sdl dfd
777
threagile
Threagile / threagile
Agile Threat Modeling Toolkit
devsecops agile security architecture infosec threagile cicd risk-analysis risk-management threat-modeling
Language:Go 708
awslabs / threat-composer
A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
threat-modeling threatmodeling threatmodelling threat-modeling-tool threat-modelling-tool vscode-extension
Language:TypeScript 635
TalEliyahu / Threat_Model_Examples
A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.
risk-assessment threat threat-analysis threat-modeling cybersecurity
461
OWASP / threat-model-cookbook
This project is about creating and publishing threat model examples.
appsec threat-model threat-modeling threat-modelling threat-models
Language:Python 427
Autodesk / continuous-threat-modeling
A Continuous Threat Modeling methodology
application-security secure-development threat-modeling
327
gram
klarna-incubator / gram
Gram is Klarna's own threat model diagramming tool
appsec cybersecurity infosec threat-modeling
Language:TypeScript 325
sapphirex00 / Threat-Hunting
Personal compilation of APT malware from whitepaper releases, documents and own research
threat-hunting threat-intelligence threat-sharing threat-modeling collection malware malware-analysis malware-research yara-rules malware-detection
265
Agent-Wiz
Repello-AI / Agent-Wiz
A CLI tool for threat modeling and visualizing AI agents built using popular frameworks like LangGraph, AutoGen, CrewAI, and more.
agent agentic-ai ai ai-agents autogen crewai langraph llama-index n8n openai openai-agents-sdk pydantic security-tools swarm threat-modeling hacktoberfest hacktoberfest2025
Language:Python 254
iriusrisk / OpenThreatModel
The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
cyber-security cybersecurity open-source opensource threat-modeling
177
0xsha / sweetie-data
This repo contains logstash of various honeypots
data-science dataset honeypot logstash malware-research samples threat-intelligence threat-modeling threatintel
174
AzureArchitecture / threat-model-templates
Templates for the Microsoft Threat Modeling Tool
threat-model threat-modeling stride security sdl attack cybersecurity fabric mitre mitre-attack purview
172
cairis-platform / cairis
Computer Aided Integration of Requirements and Information Security - Server
security usability usability-usable-security personas requirements requirements-management risk-analysis risk-models architectural-patterns architecture cairis ux python mysql graphviz threat-modeling attack-patterns
Language:Python 165
awslabs / threat-designer
Threat Designer is a GenerativeAI application designed to automate and streamline the threat modeling process for secure system design.
cybersecurity generativeai threat-modeling agentic-ai appsec devsecops threatmodeling threat-modeling-tool threatmodelling
Language:JavaScript 158
yevh / TaaC-AI
AI-driven Threat modeling-as-a-Code (TaaC-AI)
ai application-security claude-3 devsecops gpt gpt-3 gpt-4 llm-security mistral-7b secure-development taac threat threat-modeling threat-modeling-from-code threat-modeling-tool threat-models
Language:HTML 151
dehydr8 / elevation-of-privilege
An online multiplayer version of the Elevation of Privilege (EoP) threat modeling card game
threat-modeling stride boardgame-io threat-dragon eop card-game
Language:JavaScript 147
Karneades / awesome-security-card-games
A curated list of security card games.
application-security awesome awesome-list card-game cryptography education educational-game incident-response threat-modeling
139
redshiftzero / awesome-threat-modeling
a curated list of useful threat modeling resources
threat-modeling security risk-assessment
139
ThreatIntel-Reports
mthcht / ThreatIntel-Reports
Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports
apt cti cyber-threat-intelligence malware-analysis malware-analysis-reports malware-research threat-analysis threat-hunting threat-intelligence threat-modeling threatintel
Language:Python 137
Kwangsa19 / Ketmanto-Cybersecurity-Portfolio
I developed a rigorous cybersecurity project portfolio on mock clients covering NIST, audits, Linux, SQL, assets, threats, vulnerabilities, detection, incident response, escalation, Wireshark, tcpdump, IDS (Suricata), SIEM (Splunk, Chronicle), and Python automation.
cybersecurity incident-response linux python security security-audit security-automation sql threat-modeling chronicle splunk suricata tcpdump wireshark escalation nist playbook siem pasta ids
Language:Jupyter Notebook 124
nutonomy / AVCDL
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
avcdl development-lifecycle cybersecurity autonomous-vehicles automotive-security fuzz-testing penetration-testing threat-modeling attack-surface-analysis iso-24089 iso-sae-21434 threat-prioritization un-r155 un-r156
112
tidalcyber / cyber-threat-profiling
A library of reference materials, tools, and other resources to aid threat profiling, threat quantification, and cyber adversary defense
adversarial-attacks cybersecurity purpleteam ransomware risk threat-intelligence threat-modeling
98
paulveillard / cybersecurity-red-team
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Red Team (Offensive) in Cybersecurity.
red-team red-teaming blue-team red-teams cybersecurity security-tools security-vulnerability-assessment technical-analysis penetration-testing penetration-resistance-modeling threat-intelligence threat-modeling
97
3CORESec / S2AN
S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator
mitre-attack sigma sigma-rules suricata suricata-rules threat-hunting threat-modeling
Language:C# 89
CloudDefenseAI / falco_extended_rules
Curating Falco rules with MITRE ATT&CK Matrix
cloudsecurity devops devsecops kuberentes security cnapp cspm security-tools threat-analysis vulnerability-detection vulnerability-scanners falco malware threat threat-modeling container-security kubernetes-security malware-analysis workload-security zero-day
Language:Python 84
OWASP / cornucopia
The source files and tools needed to build the OWASP Cornucopia decks in various languages
gamification threat-modeling appsec card-games cardgame games gameserver owasp requirements-analysis
Language:Elixir 82
TNG / elevation-of-privilege
An online multiplayer version of the threat modeling card games: Elevation of Privilege (EoP), OWASP Cornucopia, OWASP Cumulus, and Elevation of MLsec.
cornucopia cumulus elevation-of-privilege eop mlsec owasp security security-tools threat-modeling
Language:TypeScript 79
OWASP / threat-dragon-desktop
Desktop variant of OWASP Threat Dragon
threat-modeling sdlc owasp owasp-threat-dragon threat-dragon
78
mllamazares / STRIDE-vs-ASVS
🖇️ STRIDE vs. ASVS equivalence table
asvs security-requirements stride threat-modeling cybersecurity owasp security
76
nxenon / DevSecOps
♾️ Collection of DevSecOps Notes + Resources + Courses + Tools
devsecops devsecops-best-practices sdlc secure-development devsecops-notes devsecops-resources iast sast sbom secret-management secure-coding software-bill-of-material software-composition-analysis threat-model threat-modeling static-analysis-security-testing defectdojo dependency-track
Language:Python 69
rusakovichma / TicTaaC
Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used
threat-modeling threat-modeling-tool application-security threat-models threat-modeling-from-code threat-model threat secure-development appsec devsecops
Language:Java 66

threat-modeling

veeral-patel / how-to-secure-anything

microsoft / Security-101

hysnsec / awesome-threat-modelling

OWASP / threat-dragon

OWASP / pytm

michenriksen / drawio-threatmodeling

Threagile / threagile

awslabs / threat-composer

TalEliyahu / Threat_Model_Examples

OWASP / threat-model-cookbook

Autodesk / continuous-threat-modeling

klarna-incubator / gram

sapphirex00 / Threat-Hunting

Repello-AI / Agent-Wiz

iriusrisk / OpenThreatModel

0xsha / sweetie-data

AzureArchitecture / threat-model-templates

cairis-platform / cairis

awslabs / threat-designer

yevh / TaaC-AI

dehydr8 / elevation-of-privilege

Karneades / awesome-security-card-games

redshiftzero / awesome-threat-modeling

mthcht / ThreatIntel-Reports

Kwangsa19 / Ketmanto-Cybersecurity-Portfolio

nutonomy / AVCDL

tidalcyber / cyber-threat-profiling

paulveillard / cybersecurity-red-team

3CORESec / S2AN

CloudDefenseAI / falco_extended_rules

OWASP / cornucopia

TNG / elevation-of-privilege

OWASP / threat-dragon-desktop

mllamazares / STRIDE-vs-ASVS

nxenon / DevSecOps

rusakovichma / TicTaaC