01
SERVICES · THREAT MODELING
Threat Modeling
We examine your system's design before attackers do: map how data moves, identify threats with STRIDE, rank the risks and plan the mitigation.
How it works
Six steps, start to finish
- 01
Design scope and depth
We agree which system, components and level of detail the model will cover.
- 02
Gather data and deconstruct
We collect architecture and data-flow information and break the system into components, trust boundaries and entry points.
- 03
Identify threats
We identify threats against each component using STRIDE.
- 04
Assess and prioritize risks
Each threat is assessed for likelihood and impact and ranked.
- 05
Establish mitigation
We define mitigations for the highest risks and agree owners with your team.
- 06
Validate and document
We validate the model and mitigations and document the result for your team.
What we cover
Scope of the assessment
02
Tampering
03
Repudiation
04
Information Disclosure
05
Denial of Service
06
Elevation of Privilege
What you receive
Deliverables
The executive summary
Verification and test plan
Threat register with ranked risks and mitigation
See how findings, ratings and remediation are presented before you commit.