Note that this repository has been migrated from Mike Goodwin's original , which has the issues and pull requests from October 2015 up to June 2020.

OWASP Threat Dragon

Threat Dragon is a free, open-source, cross-platform threat modelling application including system diagramming and a threat rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project and follows the values and principles of the threat modeling manifesto.

1. A web application (this repo):

2. A desktop application: installers for Windows, Mac OSX and Linux.

End user help is available for both variants

Development

We need contributors for this project, and there are some developer notes that should help.

To get started clone this repo noting that it contains a sub-module for the docs: git clone --recursive [email protected]:OWASP/threat-dragon.git If you cloned the repo with out the recursive flag use command git submodule update --init --recursive to populate the docs directory.

Vulnerability disclosure

If you find a vulnerability in this project please let us know and we will fix it as a priority. For secure disclosure, please see the security policy.

Project leaders

• Mike Goodwin ([email protected])
• Jon Gadsden ([email protected])