OWASP Threat Modeling Project

OWASP is well-known for providing quality and comprehensive information to developers and others worldwide. Our goal as leaders of the Threat Modeling Project is to build a functional “umbrella” project in which differing views on threat modeling can coexist, drawing on and supporting the threat modeling community with clear, consistent, practical guidance and capabilities.

We wish to foster a community that enables people to learn, share, and create content that serves both OWASP members and those of the broader community. We want to ensure that the content made available through this project is both comprehensive and practically oriented. The community's direction will build on the foundational work of the past and provide sufficiently clear guidance to ensure OWASP’s threat modeling resources remain cohesive.

We’re getting together to figure out things like defining a set of community activities, including calls, and an open process for defining a charter, and plan to have some of that practical stuff by mid-December 2025.

We look forward to revitalizing the OWASP Threat Modeling Project and bringing consistency to the threat-modeling practices and guidance that support OWASP’s mission to be a gold-standard resource for development efforts. We also hope you will be active partners in further building this community.

The easiest way to get in contact with the OWASP Threat Model community is through the OWASP Slack Threat Model channel #threat-modeling.

You can subscribe if you are not yet a member of the OWASP Slack community.