Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Fork is a SaaS platform designed for threat modeling that enables both security and product teams to conduct ongoing, risk-oriented assessments of applications by utilizing the established PASTA (Process for Attack Simulation and Threat Analysis) framework. This allows teams to swiftly identify the most probable and significant risks in less than two hours while ensuring that security measures are aligned with business objectives. By merging specialized threat libraries with current vulnerability information and threat intelligence, Fork accurately quantifies residual risks and aids in conducting business impact analyses. The platform also implements quality controls throughout the threat modeling process to enhance overall effectiveness. Additionally, Fork features a consolidated security insights dashboard that links threats directly to the attack surface of your application, while incorporating recognized frameworks and taxonomies like MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS, which facilitates focused mitigation strategies and practical outcomes. This comprehensive approach not only enhances security posture but also fosters collaboration between technical and business teams.

Description

OWASP Threat Dragon serves as a modeling tool designed for creating diagrams that represent potential threats within a secure development lifecycle. Adhering to the principles of the threat modeling manifesto, Threat Dragon enables users to document potential threats and determine appropriate mitigation strategies, while also providing a visual representation of the various components and surfaces related to the threat model. This versatile tool is available as both a web-based application and a desktop version. The Open Web Application Security Project (OWASP) is a nonprofit organization dedicated to enhancing software security, and all of its projects, tools, documents, forums, and chapters are accessible for free to anyone eager to improve application security practices. By facilitating collaboration and knowledge sharing, OWASP encourages a community-focused approach to achieving higher security standards in software development.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Amazon CodeWhisperer No 
Bizzy No 
Checkmarx Yes 
CycloneDX No 
Escape No 
EthicalCheck No 
GitLab Yes 
Jit No 
Kiuwan Code Security No 
OpenAI Yes 
OpenCTI Yes 
Seconize DeRisk Center No 
SecureFlag No 
ServiceNow Yes 
ShieldForce No 
Tavily Yes 
Tenable One AI Exposure No 
Veracode Yes 
Zinc No 
esChecker No 

Integrations

Amazon CodeWhisperer Yes 
Bizzy Yes 
Checkmarx No 
CycloneDX Yes 
Escape Yes 
EthicalCheck Yes 
GitLab No 
Jit Yes 
Kiuwan Code Security Yes 
OpenAI No 
OpenCTI No 
Seconize DeRisk Center Yes 
SecureFlag Yes 
ServiceNow No 
ShieldForce Yes 
Tavily No 
Tenable One AI Exposure Yes 
Veracode No 
Zinc Yes 
esChecker Yes 

Pricing Details

$75,000/yr
Starting at $75,000/year

Up to $150,000/year for 500–2,000 threat models
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

VerSprite Cybersecurity

Founded

2007

Country

United States

Website

forktm.com

Vendor Details

Company Name

OWASP

Founded

2001

Country

United States

Website

owasp.org/www-project-threat-dragon/

Product Features

Product Features

Alternatives

Alternatives

Devici Reviews

Devici

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity