Threat Modeling Python Packages

pytm

A Pythonic framework for threat modeling

tmtool

A python widget to assist Microsoft Threat Modeling Tool

stride-gpt

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

emet

Witness verification. Byte-integrity witness for AI source/view consistency. Shipped v1.1.0. Advisory-only verdict lattice. MPL-2.0.

secopstm

OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, severity scoring, SVG/HTML reports & MITRE Navigator layers. DevSecOps & CI/CD ready.

attacktree

Modeling, analyzing and rendering attack trees.

antiflock

Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive actions when the trusted path drops — every decision signed into a local audit log. Go + React, Apache-2.0. Pre-alpha, simulation-first.

threat-modeling-py

A multi-language Threat Modeling as Code library using STRIDE for version-controlled, actionable mitigations.

cybersec-superpowers

Enterprise-grade cybersecurity orchestration platform: STRIDE threat modeling, OWASP secure coding checklists, SAST/secret scanning, red-team pentest plans, NIST incident response playbooks, and SBOM supply-chain security -- all as composable agent skills.

threatmap

IaC threat modeler with STRIDE, MITRE ATT&CK, and PASTA frameworks. REST API, GraphQL, and Docker support for Terraform, CloudFormation, and Kubernetes.

repello-agent-wiz

A CLI tool for threat modeling and visualizing AI agents built using popular frameworks like LangGraph, AutoGen, CrewAI, and more.

threatware

Simplifies the review and management of threat models in documents

tmac

Agile Threat Modeling as Code

ai-risk-extractor

A new package designed to facilitate the extraction of structured insights from user prompts related to the domain of autonomous AI agents and their potential vulnerabilities. Given an input text desc

sovereign-sdk-ledger

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sdk-edge

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sdk-core

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sdk-fastapi

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sdk-sieve

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sdk-airlock

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sdk-sensor

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

threat-modeling

experimental threat modeling tools