OWASP/threat-dragon
An open source threat modeling tool from OWASP
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
No releases in the last 90 days; the most recent was 177 days ago, with 94 contributors on GitHub.
Use Cases & Benefits
- Provides a free, open-source, cross-platform tool for creating threat modeling diagrams and managing associated threats.
- Offers an intuitive, accessible interface with integration options for GitHub, Bitbucket, and GitLab, enhancing collaboration and flexibility.
- Use for designing data flow diagrams and identifying security threats during software development lifecycle planning.
- Use for teams needing to document and mitigate security risks in applications with version control integration.
- Use for security professionals seeking a community-supported tool aligned with OWASP standards for threat modeling and risk assessment.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
Apache 2.0
Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
OWASP Threat Dragon is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source community project that provides an intuitive and accessible way to model threats.
Threat Dragon is designed to be accessible for various types of teams, with an emphasis on flexibility and simplicity. The Project has OWASP Production status and follows the values and principles of the threat modeling manifesto.
This program is free software: you can redistribute it and/or modify it under the terms of the Apache 2.0 License.
Access the latest version of Threat Dragon on the demo website and refer to the documentation pages.
Also well worth watching the video provided by the OWASP Spotlight series.
The github release area contains Threat Dragon from version 1.3 to the latest versions 2.x. Previous releases are from Mike Goodwin's original repository.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
413+20
Open issues
102-6
Compared with peers in Web
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| pingdotgg/t3code | 48.4K | +16.6K | 40 | today |
| pbakaus/impeccable | 104.0K | +8.7K | 54 | 10 days ago |
| HunYiSage/dsh-purge | 19.2K | +6.2K | 13 | today |
| Renhuai123/ziwei-doushu | 16.2K | +6.1K | 44 | 21 days ago |
| paperclipai/paperclip | 111.5K | +2.8K | 59 | 13 days ago |
| OWASP/threat-dragon | 1.7K | — | 55 | 177 days ago |
| Category median | 48.4K | +6.2K | 44 | — |
Also by OWASP
Other repositories from this maintainer that GStars tracks
- JavaScript33.9K stars
CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
- Python5.7K stars
Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
- Python470 stars
Nest
Your gateway to OWASP. Discover, engage, and help shape the future!
Discover Repositories
Search across tracked repositories by name or description