Resource library

Security insight for teams that build with intent.

Whitepapers, guides, research, and case studies on modern threat modeling, secure-by-design programs, and AI-powered security.

All resources

Showing
1
of
12
Button Text
MAESTRO Threat Modeling: A Framework for Securing Agentic AI

Blog

MAESTRO Threat Modeling: A Framework for Securing Agentic AI

MAESTRO is a threat modeling framework built for agentic AI. Learn its seven layers, the threats it covers, and how to apply it in ThreatModeler.

Read More
Introducing NexusAI: Your agentic partner for threat modeling

Introducing NexusAI: Your agentic partner for threat modeling

NexusAI is the agentic threat modeling experience inside ThreatModeler Nexus. It builds models from the context you already have, focuses attention on the risks that apply, and keeps models aligned as software changes.

Read More
Trike Threat Modeling Methodology

Blog

Trike Threat Modeling Methodology

Trike is an open-source, risk-based threat modeling methodology built on a requirements model and a data flow diagram. See how it works, plus pros and cons.

Read More
PASTA Threat Modeling Methodology

Blog

PASTA Threat Modeling Methodology

PASTA is a risk-centric, 7-step threat modeling methodology that ties technical risk to business impact and compliance.

Read More
Beyond the sandbox: Threat modeling the OpenAI and Hugging Face incident

Blog

Beyond the sandbox: Threat modeling the OpenAI and Hugging Face incident

We explored the initial sandbox escape in the OpenAI and Hugging Face incident. Here’s what it reveals about trust boundaries, connected services, and secure design in an agentic era.

Read More
OCTAVE Threat Modeling Methodology

Blog

OCTAVE Threat Modeling Methodology

OCTAVE threat modeling is a risk assessment methodology for organizational cybersecurity risk. See how OCTAVE, OCTAVE-S, OCTAVE Allegro, and OCTAVE FORTE work.

Read More
Threat modeling as the foundation for CRA compliance

White papers

Threat modeling as the foundation for CRA compliance

A regulatory brief on the EU Cyber Resilience Act

Read More
From Prompt to Proof

White papers

From Prompt to Proof

The Trust Gap in AI-driven Threat Modeling

Read More
A Critical Security Practice

White papers

A Critical Security Practice

Threat Modeling and Regulatory Compliance

Read More
Operationalizing AI in Threat Modeling

White papers

Operationalizing AI in Threat Modeling

Turning generative insight into governed, repeatable, defensible security outcomes

Read More
Ten Architectural Flaws Worth Finding

White papers

Ten Architectural Flaws Worth Finding

The design-level risks that live in your architecture, not in your code, and the ones code-level tools tend to miss

Read More
Threat Modeling for the CISO and Team

White papers

Threat Modeling for the CISO and Team

What each stakeholder gets from agentic, governed threat modeling, and the answer the CISO can take to the board

Read More
Threat Modeling Maturity Model

White papers

Threat Modeling Maturity Model

A practical framework for advancing Secure by Design

Read More
Build vs. Buy vs. AI

White papers

Build vs. Buy vs. AI

Navigating threat modeling in the AI era

Read More
2026 Buyer's Guide

White papers

2026 Buyer's Guide

Choosing a Threat Modeling Solution: how to evaluate a modern platform across maturity, scope, and approach.

Read More
ThreatModeler Nexus Technical Data Sheet

Data sheets

ThreatModeler Nexus Technical Data Sheet

An agentic platform for secure design.

Read More