Threat Model Workshop
Build a local system model, review type-aware STRIDE prompts, and track risks and mitigations. Nothing is uploaded.
Workshop aid, not certification: prompts and completeness checks are heuristic and cannot establish that a design is secure or that every threat has been found. Validate with qualified reviewers and current system evidence.
System model
Data flow
Elements
Flows
Suggested STRIDE prompts
Accept a prompt to add it to the register, dismiss it for this model, or write a custom threat. Suggestions depend on element/flow type.
Risk register
Likelihood and impact are ordinal rankings (1 lowest, 5 highest). Their product is only a qualitative workshop priority score, not a calibrated probability or assurance measure.
Optional system view
Generated from the accessible forms; dragging is not required.
Completeness checks
Import / export
Work remains in memory unless you explicitly download or copy it. Import replaces the current in-memory workshop only after validation.