In the example below we have a very simple architecture where a user interacts with a web client, the web client sends HTTP requests to the server and the server makes queries to an SQL database. The Dragon-GPT creates a list of sentences, describes the diagram based on the JSON file created by OWASP THreat Dragon, and uses it as input to the LLM, which can be the ChatGPT or a local LLM.
Project Resources
Project Leaders
Project Information
Incubator Project
Classification
Other
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.