A tool to help improve your threat modeling
summary
A lightweight open-source web app called threat-composer helps generate context-rich threat statements by combining attacker, prerequisites, action, impact, asset and goal fields, offers STRIDE-tagged examples, and shows live sentence output as inputs change. Data stays browser-only storage by default, can export as JSON for repo or CI/CD, and an AWS CDK deployable version adds optional hosting. The demo proves the composer speeds brainstorming and produces consistent, actionable threat statements.
AI-written summary · about
chapters (10)
- 0:00Introduction to threat modeling
- 0:37Why threat model
- 1:10Threat modeling methodology
- 2:59Challenges in identifying threats
- 4:47Components of a useful threat
- 7:38Introducing threat composer
- 8:13Threat composer demo
- 17:14Tool features and deployment
- 18:41Roadmap and future developments
- 19:35Call to action
related talks
34mThreat Model-as-Code
01h 01mImprove your threat modelling through the science of simplicity
30mAgile Threat Modeling with Open-Source Tools
53mThreat Modeling: uncover vulnerabilities without looking at code
01h 00mThreat Modeling for Secure Software Design
46mThreat modeling is on the rise
22mEmpowering Developers through Threat Modeling Excellence
49mThreat Modeling Toolkit