An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

Draw.io libraries for threat modeling diagrams

Threat modeling and AI-reasoning vulnerability detection harness for Claude Code — STRIDE + AI + MAESTRO

An open-source modular framework capable of identifying a wide range of TLS vulnerabilities and assessing compliance with multiple guidelines. Its actionable report can assist the user in correctly and easily fixing their configurations.

Attack Tree modeling sheet for Dia

Threat Modeling with ATT&CK defines how to integreate MITRE ATT&CK® into your organization’s existing threat modeling methodology.

Modeling, analyzing and rendering attack trees.

Azure DevOps server supply-chain attack tree (map, Attack surface, threat modeling)

Attack-Defense Tree Designer is a Modelio module developed by Softeam that allows Modelio users to design attack tree diagrams.

Agda formalization of the Attack Tree Linear Logic

A Haskell EDSL for conducting threat analysis using Attack Trees

A Tool that Generates Attack--Defense Trees to Support Threat Modeling Activities

This repository contains my first threat modeling project, focusing on a university financial system. It includes an online DFD, a detailed threat model created using Microsoft Threat Modeling Tool 2016, and an attack tree analysis for a specific identified threat.

Attack Tree to Expert System Conversion Program

Awesome Attack Tree

Live editor for DOT language graphs

Healthcare platform threat model using STRIDE, MITRE ATT&CK, Cyber Kill Chain, attack trees, DREAD risk scoring, and NIST CSF control mapping. 31 threats identified across 6 categories.

AI-powered PASTA threat modeling plugin for Claude Code. 7-stage methodology with STRIDE classification, MITRE ATT&CK mapping, Mermaid DFDs, attack trees, and evidence-anchored threat scenarios.

Implementation of Attack Tree with using object-oriented design patterns. Abstract Factory and Visitor patterns were used for implementation.

Seven threat-modeling worksheets (STRIDE, LINDDUN, PASTA, attack tree, DFD, trust boundary, abuse case) plus five worked examples (web, mobile, ML, IaC, IoT).