> 🎯
To enable secure software architectures by democratising threat modeling through open-source, community engagement and AI advancements with clean, vetted and reliable data.
Welcome to the first, open-sourced, structured, peer-reviewed threat modeling dataset. By generating this open-source curated dataset of real-world threat models, we aim to:
OWASP Threat Dragon to support OWASP Threat Model Library Schema export by end of the year! With also the fact that threat models in the OWASP Threat Model Cookbook are imported as examples in Threat Dragon, this will help produce more threat models to push to the library!
Project was presented at the OWASP Global AppSec in Barcelona on 29th of May 2025, along with the v1.0 release of the schema!
Thank you to our sponsors from DevArmor!
Contributions will be used for organising hackathons and community engagement.
Register interest for a hackathon here.
Thank you to the CycloneDX TM-BOM workgroup - including:
Project Resources
Project Leaders
wears funny conference t-shirts
the community
Chair of Ecma TC54
Security Leader at ServiceNow
ized access
data corruption
backups
Julian Mehnle
Project Leader
Project Information
Incubator Project
Classification
Other
Language
Python
Contributors
12
GitHub Stars
430
Downloads
0
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.