Dethernety
7.2#1 in threat modeling softwareFree planFree planWebAPISelf-hosted
VisitDethernety vs ThreatTree
ThreatTree
6.6#4 in threat modeling softwareFrom $29 a monthFree planWebAPI
VisitWhat both publish
| Fact | Dethernety | ThreatTree |
|---|---|---|
| Integrations | Issue modules can connect with external trackers and sync remediation issues bidirectionally. | The Enterprise plan lists custom Jira and ServiceNow ticketing, Terraform/OpenAPI architecture import, Splunk and Microsoft Sentinel feeds, GRC platform sync, and Confluence/Notion embeds. |
| Intended users | The maker describes the GUI for security teams and the CLI for DevOps teams, with the CLI supporting CI/CD automation and threat-model-as-code. | ThreatTree describes itself as a browser-based tool for security teams ranging from solo consultants to CISO organizations. |
| Purpose | Dethernety is a graph-native threat modeling platform for building and analyzing architecture models. | ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees. |
| Risk analysis | It analyzes attack paths, blast radius, and residual risk using the context of the full architecture graph. | Likelihood-by-impact scoring automatically generates a ranked risk register across trees in a forest. |
Dethernety plans
- Open SourceFree
- BYODtPriced on request
- BYODt Team — 5 or 20 seatsPriced on request
- EnterprisePriced on request
- Hosted SaaSPriced on request
ThreatTree plans
- FreeFree
- Pro$29 a month
- EnterprisePriced on request
Pick Dethernety if…
Dethernety suits security teams modeling system architecture and DevOps teams using threat-model-as-code or CI/CD automation. It is a fit for organizations prepared to host their own graph database and infrastructure.
Pick ThreatTree if…
ThreatTree is intended for security teams ranging from solo consultants to CISO organizations. It may suit teams that need structured threat models, risk prioritization, and collaborative review.