STRIDE Threat Model Generator
Describe your system and get a structured list of what could go wrong, scored by severity.
What is STRIDE? A framework for systematically identifying security threats in any system. The acronym covers six threat categories: Spoofing (impersonating another user or system), Tampering (modifying data or code), Repudiation (denying an action occurred), Information Disclosure (exposing data to unauthorized parties), Denial of Service (making a system unavailable), and Elevation of Privilege (gaining permissions not intended).
What is DREAD? A scoring system that ranks each threat by Damage potential, Reproducibility, Exploitability, Affected users, and Discoverability. It gives you a number so you can prioritize which threats to address first.
What you get. A threat table covering your specific architecture, each row scored and explained. You can edit status and notes inline, then export the result as a THREAT_MODEL.md file to commit alongside your code.
And then what? A threat model is a set of claims. Every row says a control exists, and every row is unverified until somebody checks. I marked prompt injection as implemented on a real LLM pipeline of mine, and it was not implemented; it was asserted. So I built the eval that could prove me wrong. It found two exploitable holes in my own system prompt. Read what happened →