OWASP Threat Dragon
6.4#5 in threat modeling softwareFree planFree planWebLinuxmacOSSelf-hosted
VisitOWASP Threat Dragon vs ThreatModeler Nexus
ThreatModeler Nexus
6.7#2 in threat modeling softwareFrom $4,000 a yearFree planWebAPISelf-hosted
VisitWhat both publish
| Fact | OWASP Threat Dragon | ThreatModeler Nexus |
|---|---|---|
| Purpose | Threat Dragon creates threat model diagrams and lists threats for diagram elements as part of a secure development lifecycle. | ThreatModeler Nexus is an agentic platform for secure design and governed threat modeling across applications, cloud, hybrid architectures, devices, and operational technology. |
OWASP Threat Dragon plans
- FreeFree
ThreatModeler Nexus plans
- Community EditionFree
- ThreatModeler license$4,000 a year
Pick OWASP Threat Dragon if…
Threat Dragon is intended for developers and defenders, including both experienced threat modelers and beginners. It suits teams that want to create threat diagrams and use supported threat categories and suggestions.
Pick ThreatModeler Nexus if…
ThreatModeler Nexus is aimed at enterprise security, architecture, development, compliance, and risk teams working across large portfolios. It may suit teams that need threat modeling tied to development workflows and compliance frameworks.