Service

Microsoft Threat Modeling Tool

Readiness Level
Advanced

CISA does not endorse any commercial product or service. CISA does not attest to the suitability or effectiveness of these services and resources for any particular use case. Any reference to specific commercial products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply their endorsement, recommendation, or favoring by CISA.

Description

This tool is designed to make threat modeling easier for developers through a standard notation for visualizing system components, data flows, and security boundaries.

Learn about CISA's CPGs