OWASP Threat Dragon Reviews

You can import or enter a wide variety of security, usability and requirements data to gain new insights. These include information about assets, countermeasures, personas, requirements, and architectural components. A single view cannot capture a complex system. Therefore, automatically generate 12 views of your emerging design, from different perspectives, including people, risks and requirements, architecture, physical location, and even physical locations. As your design develops, automatically generate threat models such Data Flow Diagrams. Open source intelligence about possible attacks and candidate security architectures can be used to assess your attack surface. Showcase all security, usability, design, and risk factors associated with your product.

Resurface is a runtime API security tool. Resurface continuous API scanning allows you to detect and respond in real time to API threats and risks. Resurface is a purpose-built tool for API data. It captures all request and response payloads, including GraphQL, to instantly see potential threats and failures. Receive alerts about data breaches for zero-day detection. Resurface is mapped to OWASP Top10 and alerts on threats with complete security patterns. Resurface is self-hosted and all data is first-party. Resurface is the only API security system that can be used to perform deep inspections at scale. Resurface detects active attacks and alerts them by processing millions of API calls. Machine learning models detect anomalies and identify low-and slow attack patterns.