Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • SOCRadar Extended Threat Intelligence Reviews & Ratings
    90 Ratings
    Company Website
  • ThreatLocker Reviews & Ratings
    499 Ratings
    Company Website
  • ESET PROTECT Advanced Reviews & Ratings
    2,195 Ratings
    Company Website
  • PowerDMARC Reviews & Ratings
    238 Ratings
    Company Website
  • ConnectWise SIEM Reviews & Ratings
    191 Ratings
    Company Website
  • ManageEngine EventLog Analyzer Reviews & Ratings
    190 Ratings
    Company Website
  • Criminal IP Reviews & Ratings
    15 Ratings
    Company Website
  • Omnilert Reviews & Ratings
    26 Ratings
    Company Website
  • Criminal IP ASM Reviews & Ratings
    16 Ratings
    Company Website
  • A10 Defend Threat Control Reviews & Ratings
    32 Ratings
    Company Website

What is OWASP Threat Dragon?

OWASP Threat Dragon is a modeling tool specifically designed to create diagrams that illustrate potential threats throughout a secure development lifecycle. Following the guidelines set forth in the threat modeling manifesto, Threat Dragon allows users to document possible threats and devise effective mitigation strategies, while also offering a visual overview of the various components and surfaces related to the threat model. This adaptable tool comes in both a web-based format and a desktop application, catering to different user preferences. The Open Web Application Security Project (OWASP), a nonprofit organization focused on improving software security, makes all its projects, tools, documents, forums, and chapters freely available to anyone interested in enhancing application security practices. By promoting collaboration and the exchange of knowledge, OWASP fosters a community-driven approach that aims to raise security standards in software development. Ultimately, Threat Dragon empowers developers to proactively address security concerns and integrate effective threat modeling into their workflows.

What is Fork?

Fork is an innovative SaaS solution tailored for threat modeling, empowering both security and product teams to carry out continuous, risk-focused evaluations of applications by leveraging the proven PASTA (Process for Attack Simulation and Threat Analysis) methodology. This functionality enables teams to quickly pinpoint the most likely and critical risks within a two-hour timeframe, ensuring that security protocols are effectively aligned with organizational goals. By integrating specialized threat libraries alongside up-to-date vulnerability data and threat intelligence, Fork provides precise measurements of residual risks and supports thorough business impact assessments. The platform incorporates stringent quality controls throughout the threat modeling process to boost overall efficacy. Moreover, Fork offers a unified security insights dashboard that connects threats directly to the application's attack surface, while also incorporating well-established frameworks and taxonomies such as MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS, facilitating targeted mitigation strategies and actionable results. This holistic strategy not only strengthens the security posture of organizations but also promotes synergy between technical experts and business stakeholders, leading to enhanced decision-making and risk management. In doing so, Fork transforms threat modeling into a collaborative effort that drives both security and business success.

Media

Media

Integrations Supported

Amazon CodeWhisperer
Archer
Bizzy
CycloneDX
Escape
EthicalCheck
Jit
Kiuwan Code Security
Mandiant Managed Defense
OpenCTI
Qualys Container Security
Seconize DeRisk Center
SecureFlag
ServiceNow
ShieldForce
Tenable AI Exposure
Tenable Cloud Security
Veracode
Zinc
esChecker

Integrations Supported

Amazon CodeWhisperer
Archer
Bizzy
CycloneDX
Escape
EthicalCheck
Jit
Kiuwan Code Security
Mandiant Managed Defense
OpenCTI
Qualys Container Security
Seconize DeRisk Center
SecureFlag
ServiceNow
ShieldForce
Tenable AI Exposure
Tenable Cloud Security
Veracode
Zinc
esChecker

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

OWASP

Date Founded

2001

Company Location

United States

Company Website

owasp.org/www-project-threat-dragon/

Company Facts

Organization Name

VerSprite Cybersecurity

Date Founded

2007

Company Location

United States

Company Website

forktm.com

Categories and Features

Categories and Features

Popular Alternatives

Fork Reviews & Ratings

Fork

VerSprite Cybersecurity

Popular Alternatives

Devici Reviews & Ratings

Devici

Security Compass