Threagile
6.0#14 in threat modeling softwareFree planFree planWebAPILinuxSelf-hosted
VisitThreagile vs ThreatTree
ThreatTree
6.6#4 in threat modeling softwareFrom $29 a monthFree planWebAPI
VisitWhat both publish
| Fact | Threagile | ThreatTree |
|---|---|---|
| Headquarters | Cologne, Germany | United Kingdom |
| Intended users | The maker describes Threagile as developer-friendly threat modeling for agile projects and DevSecOps workflows. | ThreatTree describes itself as a browser-based tool for security teams ranging from solo consultants to CISO organizations. |
| Purpose | Threagile is an open-source toolkit for agile threat modeling that models architecture and assets in YAML and checks models against risk rules. | ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees. |
| Support | The repository invites users to create a GitHub discussion or issue, where contributors may respond. | The pricing page lists priority support with Pro and dedicated support and an SLA with Enterprise. |
Threagile plans
- ThreagileFree
ThreatTree plans
- FreeFree
- Pro$29 a month
- EnterprisePriced on request
Pick Threagile if…
Threagile suits developers and DevSecOps teams modeling architecture and risks in agile projects. It fits teams comfortable working with YAML models, Git, and command-line, Docker, or REST-server execution.
Pick ThreatTree if…
ThreatTree is intended for security teams ranging from solo consultants to CISO organizations. It may suit teams that need structured threat models, risk prioritization, and collaborative review.