ThreatTree

What ThreatTree is

ThreatTree is a browser-based threat-modeling tool that arranges work into forests containing Data Flow Diagrams and Attack Trees. It scores risks by likelihood and impact, then creates a ranked risk register across the trees in a forest. Threats can be tagged with STRIDE, LINDDUN, OWASP Top 10, CAPEC, and MITRE ATT&CK, while mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2. The product supports owner, editor, and viewer roles for invited collaborators, PDF reports, and JSON and STIX 2.1 exports. Optional per-forest AES-256-GCM encryption is available on every plan. The Free plan costs nothing and allows up to three forests, three DFDs per forest, and five Attack Trees per DFD. Pro costs $29 a month per user, billed monthly. Enterprise pricing is by quote. ThreatTree says it is not currently SOC 2 or ISO 27001 certified.