Threat Modeling Python Packages

tmtool

A python widget to assist Microsoft Threat Modeling Tool

argus-agent

Agentic threat modeling workflow using Google ADK to turn PRDs, design docs, and RFCs into STRIDE-categorized, OWASP-rated threat model reports.

sovereign-fastapi

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-core

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-ledger

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sensor

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

attacktree

Modeling, analyzing and rendering attack trees.

sovereign-sieve

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

threatmap

IaC threat modeler with STRIDE, MITRE ATT&CK, and PASTA frameworks. REST API, GraphQL, and Docker support for Terraform, CloudFormation, and Kubernetes.

threat-modeling

experimental threat modeling tools

emet

A small external witness for AI source and view consistency: re-derive the bytes and get MATCH, DRIFT, or UNVERIFIABLE, never TRUSTED. Four independent implementations (Python, Rust, Node, Go) pass the same frozen conformance vectors. Zero dependencies.

sovereign-sdk-sieve

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

secopstm

A STRIDE threat analysis framework with MITRE ATT&CK integration.

sovereign-sdk-core

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

sovereign-sdk-fastapi

Local-first AI WAF, compliance gate, and cryptographic provenance engine for agentic workflows. Intercepts payloads, slashes token spend via Prose-Tax minimization, and mints tamper-evident audit chains on local silicon.

repello-agent-wiz

Generate agentic workflows visualizations & threat modelling reports for your agentic projects.

ai-risk-extractor

A new package designed to facilitate the extraction of structured insights from user prompts related to the domain of autonomous AI agents and their potential vulnerabilities. Given an input text desc

threatware

Simplifies the review and management of threat models in documents

tmac

Agile Threat Modeling as Code

threatprism

Multi-framework threat intelligence MCP server — STRIDE, DREAD, LINDDUN, and PASTA analysis for AI coding agents

threatlens

Multi-framework threat intelligence MCP server — STRIDE, DREAD, LINDDUN, and PASTA analysis for AI coding agents