Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Codemagic Reviews & Ratings
    138 Ratings
    Company Website
  • Crowdin Reviews & Ratings
    929 Ratings
    Company Website
  • Planview Software Product Delivery Reviews & Ratings
    2 Ratings
    Company Website
  • Okyline Reviews & Ratings
    2 Ratings
    Company Website
  • AlsoThere Reviews & Ratings
    1 Rating
    Company Website
  • Planview AdaptiveWork Reviews & Ratings
    714 Ratings
    Company Website
  • TriNet Reviews & Ratings
    1,994 Ratings
    Company Website
  • Safetica Reviews & Ratings
    415 Ratings
    Company Website
  • Infor M3 Reviews & Ratings
    156 Ratings
    Company Website
  • Rocket z/Assure VAP Reviews & Ratings
    1 Rating
    Company Website

What is Threagile?

Threagile provides teams with a straightforward solution for implementing Agile Threat Modeling, effortlessly fitting into DevSecOps processes. This open-source toolkit enables users to outline an architecture and its components in a flexible, declarative style through a YAML file, which can be modified directly within an IDE or any editor compatible with YAML. Upon execution of the Threagile toolkit, it evaluates a set of risk rules that assess the security of the architecture model, producing a detailed report that highlights potential weaknesses and offers recommended mitigation measures. Furthermore, it generates visually engaging data-flow diagrams and supports output in multiple formats, including Excel and JSON, to facilitate further examination. The tool also incorporates continuous risk management within the Threagile YAML model file, allowing teams to effectively monitor their risk mitigation efforts. Threagile can be conveniently run via the command line, and users have the option to utilize a Docker container or configure it as a REST server for enhanced accessibility. This range of deployment options guarantees that teams can select the setup that aligns best with their specific development environment and workflow requirements. By integrating these functionalities, Threagile significantly enhances the overall security posture of development projects.

What is OWASP Threat Dragon?

OWASP Threat Dragon is a modeling tool specifically designed to create diagrams that illustrate potential threats throughout a secure development lifecycle. Following the guidelines set forth in the threat modeling manifesto, Threat Dragon allows users to document possible threats and devise effective mitigation strategies, while also offering a visual overview of the various components and surfaces related to the threat model. This adaptable tool comes in both a web-based format and a desktop application, catering to different user preferences. The Open Web Application Security Project (OWASP), a nonprofit organization focused on improving software security, makes all its projects, tools, documents, forums, and chapters freely available to anyone interested in enhancing application security practices. By promoting collaboration and the exchange of knowledge, OWASP fosters a community-driven approach that aims to raise security standards in software development. Ultimately, Threat Dragon empowers developers to proactively address security concerns and integrate effective threat modeling into their workflows.

Media

Media

Integrations Supported

Docker
JSON
Microsoft Excel

Integrations Supported

Amazon CodeWhisperer
Bizzy
CycloneDX
Escape
EthicalCheck
Jit
Kiuwan Code Security
Seconize DeRisk Center
SecureFlag
ShieldForce
Tenable One AI Exposure
Zinc
esChecker

API Availability

API Availability

Has API

Pricing Information

Free
Free Version

Pricing Information

Pricing not provided

Supported Platforms

SaaS

Supported Platforms

SaaS

Customer Service / Support

Web-Based Support

Customer Service / Support

Web-Based Support

Training Options

Not specified

Training Options

Not specified

Company Facts

Organization Name

Threagile

Company Website

threagile.io

Company Facts

Organization Name

OWASP

Date Founded

2001

Company Location

United States

Company Website

owasp.org/www-project-threat-dragon/

Categories and Features

Threat Modeling

Not specified

Categories and Features

Threat Modeling

Not specified

Popular Alternatives

Popular Alternatives

Fork Reviews & Ratings

Fork

VerSprite Cybersecurity
Fork Reviews & Ratings

Fork

VerSprite Cybersecurity
Devici Reviews & Ratings

Devici

Security Compass
Devici Reviews & Ratings

Devici

Security Compass