Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Threat modeling serves as a fundamental aspect of the Microsoft Security Development Lifecycle (SDL), acting as an engineering strategy aimed at uncovering potential threats, attacks, vulnerabilities, and countermeasures that may impact your application. This technique not only aids in the identification of risks but also influences the design of your application, aligns with your organization's security goals, and mitigates potential hazards. The Microsoft Threat Modeling Tool simplifies the process for developers by utilizing a standardized notation that helps visualize system components, data flows, and security boundaries. Additionally, it assists those involved in threat modeling by highlighting various classes of threats to consider, depending on the architectural design of their software. Crafted with the needs of non-security professionals in mind, this tool enhances accessibility for all developers, offering straightforward guidance on the creation and evaluation of threat models, ultimately fostering a more secure software development practice. By integrating threat modeling into their workflow, developers can proactively address security concerns before they escalate into serious issues.

Description

OWASP Threat Dragon serves as a modeling tool designed for creating diagrams that represent potential threats within a secure development lifecycle. Adhering to the principles of the threat modeling manifesto, Threat Dragon enables users to document potential threats and determine appropriate mitigation strategies, while also providing a visual representation of the various components and surfaces related to the threat model. This versatile tool is available as both a web-based application and a desktop version. The Open Web Application Security Project (OWASP) is a nonprofit organization dedicated to enhancing software security, and all of its projects, tools, documents, forums, and chapters are accessible for free to anyone eager to improve application security practices. By facilitating collaboration and knowledge sharing, OWASP encourages a community-focused approach to achieving higher security standards in software development.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Amazon CodeWhisperer No 
Bizzy No 
CycloneDX No 
Escape No 
EthicalCheck No 
IriusRisk Yes 
Jit No 
Kiuwan Code Security No 
Seconize DeRisk Center No 
SecureFlag No 
Seeker Yes 
ShieldForce No 
Tenable One AI Exposure No 
Zinc No 
esChecker No 

Integrations

Amazon CodeWhisperer Yes 
Bizzy Yes 
CycloneDX Yes 
Escape Yes 
EthicalCheck Yes 
IriusRisk No 
Jit Yes 
Kiuwan Code Security Yes 
Seconize DeRisk Center Yes 
SecureFlag Yes 
Seeker No 
ShieldForce Yes 
Tenable One AI Exposure Yes 
Zinc Yes 
esChecker Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Microsoft

Founded

1975

Country

United States

Website

www.microsoft.com/en-us/securityengineering/sdl/threatmodeling

Vendor Details

Company Name

OWASP

Founded

2001

Country

United States

Website

owasp.org/www-project-threat-dragon/

Product Features

Product Features

Alternatives

Fork Reviews

Fork

VerSprite Cybersecurity

Alternatives

Devici Reviews

Devici

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity