Download
OWASP Threat Dragon is a threat modeling application that helps development and security teams identify potential risks in software systems. It provides a graphical editor for creating data flow diagrams that represent applications, processes, data stores, and trust boundaries. Users can associate threats with individual diagram elements and document their possible security consequences. The application helps teams evaluate risks and record mitigations or countermeasures. Its interface is designed to make threat modeling accessible throughout the software development lifecycle. The web edition can store models locally or integrate with GitHub, GitLab, and Bitbucket repositories. Desktop editions save threat models to the local filesystem. Threat Dragon also supports self-hosted web deployment through Docker and provides desktop applications for Windows, macOS, and Linux.
Features
- Visual data flow diagram creation for modeling application components and trust boundaries
- Threat identification and documentation associated with individual diagram elements
- Security risk assessment with mitigation and countermeasure tracking
- Local threat model storage with GitHub, GitLab, and Bitbucket web integrations
- Cross-platform desktop applications for Windows, macOS, and Linux systems
- Self-hosted web deployment through Docker with browser-based threat modeling
Project Samples
