17.2
Dethernety is an open-source threat modeling platform that represents architecture as a graph.
Free planOpen sourceWebAPISelf-hosted
Alternatives to CAIRIS
CAIRIS brings security analysis together with usability and requirements modeling. Teams can track assets, countermeasures, personas, requirements, and architecture, then generate 12 views of an evolving design. It can also produce threat models as a design develops, assess attack surface with attack and architectural patterns, and create documents such as Volere-compliant specifications and GDPR DPIAs. Its API supports custom design apps and connections to existing…
26.7
ThreatModeler Nexus is a platform for secure design and governed threat modeling across applications, cloud and hybrid architectures, devices, and operational technology.
Free planWebAPISelf-hosted
36.7
ThreatOpus combines threat modelling with security checks for pull requests, returning PASS, WARN, or FAIL decisions in a CI pipeline.
Free planWebAPI
- 4
ThreatTree
ThreatTree is a browser-based threat-modeling tool that arranges work into forests containing Data Flow Diagrams and Attack Trees.
Free planWebAPI6.6From $29 a month - 5
OWASP Threat Dragon
OWASP Threat Dragon is a threat-modeling tool for developers and defenders.
Free planWebLinuxmacOSSelf-hosted6.4Free plan - 6
ThreatForge
ThreatForge is an open-source desktop app for creating threat models with diagrams, automated STRIDE analysis, and AI-assisted threat discovery.
Free planWebLinuxmacOSWindows6.3Free plan - 7
ThreatZ
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers handling vehicle security and supply-chain evidence.
WebAPISelf-hosted6.2From $100 a year - 8
IriusRisk
IriusRisk is an AI threat modeling tool for secure software design.
Free planWebAPISelf-hosted6.1Free plan - 9
AWS Threat Composer
AWS Threat Composer is a threat-modeling project for identifying security issues and developing strategies to address them.
WebAPIExtensionLinux6.0 - 10
CYMETRIS
CYMETRIS is a cyber risk analysis platform for carrying out TARA across a product lifecycle.
WebAPISelf-hosted6.0From €99 a month - 11
KAVACH
KAVACH is an automotive cybersecurity engineering workspace that connects vehicle architecture to cybersecurity evidence across ISO/SAE 21434 lifecycle workflows.
Windows6.0 - 12
pytm
pytm is a Python framework for creating threat models from an architectural description.
Free planLinuxmacOSWindows6.0Free plan - 13
Threagile
Threagile is a free, open-source toolkit for agile threat modeling.
Free planWebAPILinuxSelf-hosted6.0Free plan - 14
EnCo SOX ATA
EnCo SOX ATA is an attack tree analysis module within EnCo’s engineering workbench.
WebWindows5.9 - 15
SD Elements
SD Elements helps organizations turn application architecture and regulatory context into security requirements and audit evidence.
WebAPISelf-hosted5.9From $75,000 a year - 16
itemis SECURE
itemis SECURE is a model-based tool for threat analysis and risk assessment of technical systems throughout their lifecycle.
WebWindows5.4 - 17
ADTool
ADTool is a free application for modeling and analyzing attack-defense scenarios with attack-defense trees and terms.
5.3 - 18
AutoSec TARA Suite
AutoSec TARA Suite is a pilot automotive threat-modelling and risk-management platform for analyst-led TARA workflows aligned with ISO/SAE 21434 and…
WebSelf-hosted5.3 - 19
DevArmor
DevArmor automates threat modeling, security design reviews, and security controls in software development workflows.
WebAPIExtensionSelf-hosted5.3 - 20
TSpec
TSpec is a TypeScript-first testing framework designed for testing TypeScript applications.
5.1 - 214.7
- 224.5