17.2
Dethernety is an open-source threat modeling platform that represents architecture as a graph.
Free planOpen sourceWebAPISelf-hosted
Alternatives to EnCo SOX ATA
26.7
ThreatModeler Nexus is a platform for secure design and governed threat modeling across applications, cloud and hybrid architectures, devices, and operational technology.
Free planWebAPISelf-hosted
36.7
ThreatOpus combines threat modelling with security checks for pull requests, returning PASS, WARN, or FAIL decisions in a CI pipeline.
Free planWebAPI
- 4
ThreatTree
ThreatTree is a browser-based threat-modeling tool that arranges work into forests containing Data Flow Diagrams and Attack Trees.
Free planWebAPI6.6From $29 a month - 5
OWASP Threat Dragon
OWASP Threat Dragon is a threat-modeling tool for developers and defenders.
Free planWebLinuxmacOSSelf-hosted6.4Free plan - 6
CAIRIS
CAIRIS is a free, open-source platform for eliciting, specifying, and validating systems with security and usability in view.
Free planWebAPILinuxmacOS6.3Free plan - 7
ThreatForge
ThreatForge is an open-source desktop app for creating threat models with diagrams, automated STRIDE analysis, and AI-assisted threat discovery.
Free planWebLinuxmacOSWindows6.3Free plan - 8
ThreatZ
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers handling vehicle security and supply-chain evidence.
WebAPISelf-hosted6.2From $100 a year - 9
IriusRisk
IriusRisk is an AI threat modeling tool for secure software design.
Free planWebAPISelf-hosted6.1Free plan - 10
AWS Threat Composer
AWS Threat Composer is a threat-modeling project for identifying security issues and developing strategies to address them.
WebAPIExtensionLinux6.0 - 11
CYMETRIS
CYMETRIS is a cyber risk analysis platform for carrying out TARA across a product lifecycle.
WebAPISelf-hosted6.0From €99 a month - 12
KAVACH
KAVACH is an automotive cybersecurity engineering workspace that connects vehicle architecture to cybersecurity evidence across ISO/SAE 21434 lifecycle workflows.
Windows6.0 - 13
pytm
pytm is a Python framework for creating threat models from an architectural description.
Free planLinuxmacOSWindows6.0Free plan - 14
Threagile
Threagile is a free, open-source toolkit for agile threat modeling.
Free planWebAPILinuxSelf-hosted6.0Free plan - 15
SD Elements
SD Elements helps organizations turn application architecture and regulatory context into security requirements and audit evidence.
WebAPISelf-hosted5.9From $75,000 a year - 16
itemis SECURE
itemis SECURE is a model-based tool for threat analysis and risk assessment of technical systems throughout their lifecycle.
WebWindows5.4 - 17
ADTool
ADTool is a free application for modeling and analyzing attack-defense scenarios with attack-defense trees and terms.
5.3 - 18
AutoSec TARA Suite
AutoSec TARA Suite is a pilot automotive threat-modelling and risk-management platform for analyst-led TARA workflows aligned with ISO/SAE 21434 and…
WebSelf-hosted5.3 - 19
DevArmor
DevArmor automates threat modeling, security design reviews, and security controls in software development workflows.
WebAPIExtensionSelf-hosted5.3 - 20
TSpec
TSpec is a TypeScript-first testing framework designed for testing TypeScript applications.
5.1 - 214.7
- 224.5