Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

OWASP Threat Dragon serves as a modeling tool designed for creating diagrams that represent potential threats within a secure development lifecycle. Adhering to the principles of the threat modeling manifesto, Threat Dragon enables users to document potential threats and determine appropriate mitigation strategies, while also providing a visual representation of the various components and surfaces related to the threat model. This versatile tool is available as both a web-based application and a desktop version. The Open Web Application Security Project (OWASP) is a nonprofit organization dedicated to enhancing software security, and all of its projects, tools, documents, forums, and chapters are accessible for free to anyone eager to improve application security practices. By facilitating collaboration and knowledge sharing, OWASP encourages a community-focused approach to achieving higher security standards in software development.

Description

SD Elements helps AppSec teams cope with fast-growing development demands by spelling out which security controls each project needs at the design stage. It follows a Security by Design approach, meaning it looks at architecture, data use, and compliance needs early, identifies relevant risks, and turns them into concrete requirements while changes are still cheap and low-friction. Many teams see security review time drop by 30–50% and fewer late surprises before release. The platform generates project-specific requirements mapped to standards such as NIST, OWASP, PCI, and ISO, and pairs them with concise implementation guidance developers can act on. This lets small AppSec groups support security for portfolios of 100+ applications without adding headcount, while driving consistent, policy-aligned expectations across teams and products instead of ad hoc checklists. SD Elements connects to Jira, CI/CD pipelines, and other engineering tools so security work is delivered and tracked in the same systems developers already use. Traceability is a core capability: every requirement is linked to its underlying risk, relevant standards, and evidence of implementation. AppSec leaders and directors get clear views of coverage, posture, and progress across applications, making it easier to reduce risk, support audits, and report meaningful security metrics to senior leadership.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Pris IP Manager
Archer
Bizzy
Checkmarx
CycloneDX
GitLab
HCL Domino
IBM AIX
Jenkins
Jira Service Management
Kovair QuickSync
Nessus
OpenText Content Management (Extended ECM)
SecureFlag
ShieldForce
SonarQube Server
Tenable AI Exposure
ThreadFix
Veracode
fAST Dynamic

Integrations

Pris IP Manager
Archer
Bizzy
Checkmarx
CycloneDX
GitLab
HCL Domino
IBM AIX
Jenkins
Jira Service Management
Kovair QuickSync
Nessus
OpenText Content Management (Extended ECM)
SecureFlag
ShieldForce
SonarQube Server
Tenable AI Exposure
ThreadFix
Veracode
fAST Dynamic

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

OWASP

Founded

2001

Country

United States

Website

owasp.org/www-project-threat-dragon/

Vendor Details

Company Name

Security Compass

Founded

2004

Country

Canada

Website

www.securitycompass.com/sdelements/

Product Features

Product Features

Risk Management

Alerts/Notifications
Auditing
Business Process Control
Compliance Management
Corrective Actions (CAPA)
Dashboard
Exceptions Management
IT Risk Management
Internal Controls Management
Legal Risk Management
Mobile Access
Operational Risk Management
Predictive Analytics
Reputation Risk Management
Response Management
Risk Assessment

Alternatives

Devici Reviews

Devici

Security Compass

Alternatives

Devici Reviews

Devici

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity