Top 11 threat-modeling Open-Source Projects

how-to-secure-anything

6 9,802 1.1

How to systematically secure anything: a repository about security engineering
Security-101

1 3,362 7.9

8 Lessons, Kick-start Your Cybersecurity Learning.

Project mention: Microsoft Security-101: Open-Source curriculum | news.ycombinator.com | 2024-02-29

InfluxDB

www.influxdata.com featured

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
awesome-threat-modelling

2 1,253 0.0 Dockerfile

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
pytm

1 837 6.9 Python

A Pythonic framework for threat modeling
threagile

5 564 9.1 Go

Agile Threat Modeling Toolkit

Project mention: Threagile – Agile Threat Modeling Toolkit | news.ycombinator.com | 2023-11-17

Threat_Model_Examples

1 335 10.0

Collection of Threat Models
continuous-threat-modeling

1 288 0.0

A Continuous Threat Modeling methodology
SaaSHub

www.saashub.com featured

SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
gram

1 226 9.4 TypeScript

Gram is Klarna's own threat model diagramming tool (by klarna-incubator)

Project mention: Show HN: Gram – Self-Hosted Threat Modeling Webapp | news.ycombinator.com | 2024-04-03

OpenThreatModel

2 156 5.1

The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
cairis

1 139 0.0 Python

Computer Aided Integration of Requirements and Information Security - Server
cumulus

1 13 6.2 TeX

Cumulus. Threat modeling the Clouds. (by OWASP)

Project mention: Show HN: Cumulus – Threat Modeling the Clouds | news.ycombinator.com | 2024-01-15

I am excited to share OWASP Cumulus, a threat modeling card game for IT security in DevOps and cloud projects. Taking strong inspiration from the well-known card games "Elevation of Privilege" and "OWASP Cornucopia" we created a game for threat modeling specifically the Ops part of DevOps projects.
It targets DevOps engineering teams, site reliability engineers and security professionals and gives a lightweight start into threat modeling and security by design.
Please check it out at https://owasp.org/www-project-cumulus/ and contribute via https://github.com/OWASP/cumulus. Let's make this a community project!

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

threat-modeling related posts

STRIDE Threat Scenarios

1 project | /r/cybersecurity | 26 Mar 2023
Ask HN: Is there a good security primer for a non-security programmer?

1 project | news.ycombinator.com | 28 Mar 2022
How to secure anything

1 project | /r/hackernews | 22 Feb 2022
How to Secure Anything

1 project | news.ycombinator.com | 22 Feb 2022

Index

What are some of the best open-source threat-modeling projects? This list will help you:

	Project	Stars
1	how-to-secure-anything	9,802
2	Security-101	3,362
3	awesome-threat-modelling	1,253
4	pytm	837
5	threagile	564
6	Threat_Model_Examples	335
7	continuous-threat-modeling	288
8	gram	226
9	OpenThreatModel	156
10	cairis	139
11	cumulus	13