Blog
Strategy, Risk & Compliance
Threat modeling is also a business tool. This collection is for security leaders who need to connect design risk with strategy, compliance and governance. Topics include regulated industries such as financial services and healthcare, third-party and M&A risk, programs like FedRAMP and how to build a threat modeling practice that scales.
Latest articles
Blog
PASTA Threat Modeling Methodology
PASTA is a risk-centric, 7-step threat modeling methodology that ties technical risk to business impact and compliance.
Blog
OCTAVE Threat Modeling Methodology
OCTAVE threat modeling is a risk assessment methodology for organizational cybersecurity risk. See how OCTAVE, OCTAVE-S, OCTAVE Allegro, and OCTAVE FORTE work.
Blog
ThreatModeler Achieves FedRAMP Moderate Authorization
Bringing continuous, automated threat modeling to federal agencies without slowing down the mission.
Blog
Why Healthcare M&A Requires Threat Modeling: Before the Deal Closes
Healthcare M&A deals inherit far more than revenue — see why threat modeling needs to be a non-negotiable part of due diligence, not an afterthought.
Blog
Start Left At Design: Lessons From a CISO Panel
A CISO panel reveals why most "shift left" efforts still fail — and why real progress starts with design review, not later-stage scanning.
A simple starting point
Ready to see threat modeling in practice?
Walk through what continuous, architecture-aware threat modeling looks like for your environment.
