An open source, online threat modelling tool from OWASP
☆482Jul 18, 2025Updated last year
Alternatives and similar repositories for owasp-threat-dragon
Users that are interested in owasp-threat-dragon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An installable desktop variant of OWASP Threat Dragon☆591Jan 29, 2026Updated 6 months ago
- Application Security Automation☆526Sep 5, 2023Updated 2 years ago
- SeaSponge is an accessible threat modelling tool from Mozilla☆284Apr 16, 2018Updated 8 years ago
- SAMM stands for Software Assurance Maturity Model.☆401May 17, 2022Updated 4 years ago
- This project is about creating and publishing threat model examples.☆429Nov 10, 2021Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Pythonic framework for threat modeling☆1,153Updated this week
- OWASP Threat Dragon core files☆12Jan 26, 2026Updated 6 months ago
- threatspec - continuous threat modeling, through code☆391Dec 30, 2020Updated 5 years ago
- OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development☆191Aug 28, 2025Updated 11 months ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆281Feb 17, 2026Updated 6 months ago
- Microsoft Threat Modeling Template files☆210Nov 28, 2022Updated 3 years ago
- Draw.io libraries for threat modeling diagrams☆800Nov 12, 2020Updated 5 years ago
- Security Knowledge Framework (SKF) Python Flask / Angular project☆830Mar 12, 2024Updated 2 years ago
- Security Champions Playbook v 2.1☆394Sep 25, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to www.threadfix.it for up-to-d…☆338Dec 16, 2022Updated 3 years ago
- OWASP Threat Dragon with Gitlab Integration☆27Nov 6, 2017Updated 8 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆177Dec 7, 2018Updated 7 years ago
- Repo to hold the markdown-ified metadata on AppSec tools that are automation-friendly☆12Jun 13, 2016Updated 10 years ago
- An application to assist in the organization and prioritization of software security activities.☆139Jun 10, 2021Updated 5 years ago
- A Continuous Threat Modeling methodology☆328Jun 24, 2022Updated 4 years ago
- goSDL☆522Nov 3, 2025Updated 9 months ago
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆194Aug 27, 2018Updated 7 years ago
- Agile Threat Modeling Toolkit☆779Apr 8, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Open-Source Unified Vulnerability Management, DevSecOps & ASPM☆4,908Updated this week
- ☆56Jun 17, 2020Updated 6 years ago
- Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.☆740Mar 18, 2024Updated 2 years ago
- Application Security Verification Standard☆3,563Aug 13, 2026Updated last week
- OWASP Foundation Web Respository☆28Dec 22, 2025Updated 8 months ago
- Open-source pentesting management and automation platform by Salesforce Product Security☆600Feb 12, 2022Updated 4 years ago
- Run DependencyCheck Against Your Orgs GitHub Repos.☆14Jan 5, 2018Updated 8 years ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,795Aug 2, 2024Updated 2 years ago
- BDD Automated Security Tests for Web Applications☆572Nov 16, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Content for OWASP Summit 2017 site☆129Nov 12, 2020Updated 5 years ago
- Open Security Summit 2019☆26Nov 16, 2020Updated 5 years ago
- A place to gather and organize information about using threat modeling frameworks to deal with social conflict in online systems☆57Jun 19, 2025Updated last year
- Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.☆4,371Feb 11, 2021Updated 5 years ago
- ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.☆2,470Jun 11, 2025Updated last year
- VSAQ is an interactive questionnaire application to assess the security programs of third parties.☆858Jan 11, 2021Updated 5 years ago
- The Elevation of Privilege Threat Modeling Game☆360Jun 20, 2024Updated 2 years ago