OWASP pytm

pytm is a Pythonic framework for threat modeling.

Define your system in Python using the elements and properties described in the pytm framework. Based on your definition, pytm can generate, a Data Flow Diagram (DFD), a Sequence Diagram and most important of all, threats to your system.

About OWASP pytm

pytm is a Pythonic framework for threat modeling.

Project Resources

Project Leaders

Izar Tarandach

Matthew Coles

Project Information

Production Project

Classification

Code

Language

Python

License

MIT

Latest Version

1.4.0

Contributors

GitHub Stars

1200

Corporate Supporters

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

Quick Links

Awards Chapters Community Contact Corporate Supporters Events Impact Report 2025 News Projects Staff Strategic Plan 2026 Visit Store

Legal & Governance

About OWASP Board Board EU Finance & Governance Finance (all documents)Legal

Socials

Bluesky GitHub LinkedIn Mastodon Slack X YouTube

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.