Case Studies

Charles Schwab Transforms Threat Modeling with Automation

Architects and developers drive threat modeling at scale, with security baked into every release at Charles Schwab

Download Case Study
Charles Schwab Transforms Threat Modeling with Automation

Executive Summary

A client-first approach to security Investment services leader

‍

Charles Schwab Corporation offers brokerage, banking, and financial advisory services. The firm is dedicated to a client-centric approach, prioritizing the security of client information by continuously updating its technology, training its people, and refining protocols against emerging threats. Schwab chose ThreatModeler®, an automated threat modeling platform, to roll out a scalable, comprehensive practice that raises the security posture of its applications, platforms, and infrastructure, with architects and developers independently driving the work.

‍

Show more

Resources

View all Resources
Trike Threat Modeling Methodology

Blog

Trike Threat Modeling Methodology

Trike is an open-source, risk-based threat modeling methodology built on a requirements model and a data flow diagram. See how it works, plus pros and cons.

Read More
PASTA Threat Modeling Methodology

Blog

PASTA Threat Modeling Methodology

PASTA is a risk-centric, 7-step threat modeling methodology that ties technical risk to business impact and compliance.

Read More
Beyond the sandbox: Threat modeling the OpenAI and Hugging Face incident

Blog

Beyond the sandbox: Threat modeling the OpenAI and Hugging Face incident

We explored the initial sandbox escape in the OpenAI and Hugging Face incident. Here’s what it reveals about trust boundaries, connected services, and secure design in an agentic era.

Featured

Read More