Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Threat modeling serves as a fundamental aspect of the Microsoft Security Development Lifecycle (SDL), acting as an engineering strategy aimed at uncovering potential threats, attacks, vulnerabilities, and countermeasures that may impact your application. This technique not only aids in the identification of risks but also influences the design of your application, aligns with your organization's security goals, and mitigates potential hazards. The Microsoft Threat Modeling Tool simplifies the process for developers by utilizing a standardized notation that helps visualize system components, data flows, and security boundaries. Additionally, it assists those involved in threat modeling by highlighting various classes of threats to consider, depending on the architectural design of their software. Crafted with the needs of non-security professionals in mind, this tool enhances accessibility for all developers, offering straightforward guidance on the creation and evaluation of threat models, ultimately fostering a more secure software development practice. By integrating threat modeling into their workflow, developers can proactively address security concerns before they escalate into serious issues.

Description

Open source, multi-cloud platform to scan, map, and rank vulnerabilities in containers, images hosts, repositories, and running containers. ThreatMapper detects threats to your applications in production across clouds, Kubernetes and serverless. You cannot secure what you can't see. ThreatMapper automatically discovers your production infrastructure. It can identify and interrogate cloud instances, Kubernetes nodes and serverless resources. This allows you to discover the applications and containers, and map their topology in real time. ThreatMapper allows you to visualize and discover the external and internal attack surfaces for your applications and infrastructure. Bad actors can gain access to your infrastructure by exploiting vulnerabilities in common dependencies. ThreatMapper scans hosts and containers for known vulnerable dependencies. It also takes threat feeds from more than 50 sources.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

AWS Fargate No 
Amazon EKS No 
Amazon Elastic Container Registry (ECR) No 
Amazon Web Services (AWS) No 
CircleCI No 
Docker No 
GitHub No 
Google Cloud Platform No 
IBM Cloud Private No 
IriusRisk Yes 
JFrog Artifactory No 
Jira No 
Kubernetes No 
Microsoft Azure No 
OpenShift Cloud Functions No 
Oracle Cloud Infrastructure No 
PagerDuty No 
Slack No 
Splunk Cloud Platform No 
VMware Tanzu No 

Integrations

AWS Fargate Yes 
Amazon EKS Yes 
Amazon Elastic Container Registry (ECR) Yes 
Amazon Web Services (AWS) Yes 
CircleCI Yes 
Docker Yes 
GitHub Yes 
Google Cloud Platform Yes 
IBM Cloud Private Yes 
IriusRisk No 
JFrog Artifactory Yes 
Jira Yes 
Kubernetes Yes 
Microsoft Azure Yes 
OpenShift Cloud Functions Yes 
Oracle Cloud Infrastructure Yes 
PagerDuty Yes 
Slack Yes 
Splunk Cloud Platform Yes 
VMware Tanzu Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Microsoft

Founded

1975

Country

United States

Website

www.microsoft.com/en-us/securityengineering/sdl/threatmodeling

Vendor Details

Company Name

Deepfence

Country

United States

Website

deepfence.io/threatmapper/

Product Features

Product Features

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives

Fork Reviews

Fork

VerSprite Cybersecurity

Alternatives

Bytesafe Reviews

Bytesafe

Bitfront
ThreatStryker Reviews

ThreatStryker

Deepfence