OWASP/threat-dragon — An open source threat modeling tool from OWASP

Description and use

OWASP Threat Dragon is a free, open‑source threat‑modeling application that helps security professionals and developers visualize, document, and assess potential threats throughout the software development lifecycle. Built on modern web technologies and integrated with the OWASP Threat Modeling methodology, it enables teams to create data flow diagrams, assign mitigations, and export reports for compliance and risk‑management purposes.

Problem

OWASP/threat-dragon may be useful when its README and activity match a concrete workflow.

Outcome

Early or unclear: treat as research material until maintenance, releases, docs, and issue activity are verified.

Evidence

An open source threat modeling tool from OWASP

Source