thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

OWASP Threat Dragon

An open-source OWASP threat modeling tool for creating diagrams and recording threats using STRIDE, LINDDUN, CIA and other methods.

Definition

Threat Dragon runs as a web or desktop application, stores models as JSON that can live in source control and supports several threat classification schemes. It is a common free alternative to the Microsoft Threat Modeling Tool.

Example

A team commits its Threat Dragon model to the same repository as the service code.

Exam tip

Free, open-source and diagram-based; storing models with code supports continuous threat modeling.

Related terms