OWASP/threat-dragon

threat-dragon

✅ Recently maintained

An open source threat modeling tool from OWASP

1,677Stars
413Forks
+157-day stars

JavaScript · Apache-2.0 · Last push 2026-10-28

Official repository & installation ↗

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2025-09-292026-11-03
View historical data
DateStars
2026-10-051,619
2026-10-061,623
2026-10-071,627
2026-10-081,634
2026-10-091,635
2026-10-101,638
2026-10-111,639
2026-10-121,640
2026-10-131,643
2026-10-141,650
2026-10-151,653
2026-10-161,653
2026-10-171,653
2026-10-181,655
2026-10-191,656
2026-10-201,657
2026-10-211,658
2026-10-221,658
2026-10-231,660
2026-10-241,661
2026-10-251,662
2026-10-261,662
2026-10-271,663
2026-10-281,666
2026-10-291,670
2026-10-301,671
2026-10-311,674
2026-11-011,675
2026-11-021,676
2026-11-031,677

Get the project

git clone https://github.com/OWASP/threat-dragon.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.