Dethernety
7.2#1 in threat modeling softwareFree planFree planWebAPISelf-hosted
VisitDethernety vs OWASP Threat Dragon
OWASP Threat Dragon
6.4#5 in threat modeling softwareFree planFree planWebLinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | Dethernety | OWASP Threat Dragon |
|---|---|---|
| Intended users | The maker describes the GUI for security teams and the CLI for DevOps teams, with the CLI supporting CI/CD automation and threat-model-as-code. | OWASP describes Threat Dragon as intended for developers and defenders, and says both experienced threat modelers and beginners can use it. |
| License | The public repository is licensed GNU Affero General Public License version 3.0, AGPL-3.0-only. | The OWASP project page lists the license as Apache License 2.0. |
| Purpose | Dethernety is a graph-native threat modeling platform for building and analyzing architecture models. | Threat Dragon creates threat model diagrams and lists threats for diagram elements as part of a secure development lifecycle. |
Dethernety plans
- Open SourceFree
- BYODtPriced on request
- BYODt Team — 5 or 20 seatsPriced on request
- EnterprisePriced on request
- Hosted SaaSPriced on request
OWASP Threat Dragon plans
- FreeFree
Pick Dethernety if…
Dethernety suits security teams modeling system architecture and DevOps teams using threat-model-as-code or CI/CD automation. It is a fit for organizations prepared to host their own graph database and infrastructure.
Pick OWASP Threat Dragon if…
Threat Dragon is intended for developers and defenders, including both experienced threat modelers and beginners. It suits teams that want to create threat diagrams and use supported threat categories and suggestions.