🧩 Threat Modeling

Threat Modeling Tool — STRIDE & DREAD

Add system components, identify STRIDE threats, score with DREAD, map to MITRE ATT&CK. Model auto-saves in your browser.

Add Threat

Component / Asset

Threat Description

STRIDE Category (select all that apply)

S — Spoofing

T — Tampering

R — Repudiation

I — Info Disclosure

D — Denial of Service

E — Elev. of Privilege

MITRE ATT&CK (optional)

DREAD Score

Damage 5

Reproducibility 5

Exploitability 5

Affected Users 5

Discoverability 5

Score: 25/50 — Medium

Spoofing — Impersonation — identity attacks, credential theft

T1078, T1566

Tampering — Data or code modification — integrity attacks

T1565, T1491

Repudiation — Covering tracks — log deletion, audit bypass

T1070, T1562

Info Disclosure — Data exposure — confidentiality breaches

T1552, T1530

Denial of Service — Availability attacks — resource exhaustion

T1498, T1499

Elevation of Privilege — Privilege escalation — access control bypass

T1068, T1548