Precogly

Why Precogly

Open-source threat modeling tools lack enterprise features. Commercial tools come with heavy price tags and vendor lock-in.

Precogly bridges this gap and democratizes threat modeling for every org in the world. It is open-source (Apache 2.0) and has all the features that are comparable to some of the best threat modeling tools in the market.

Key Features

• Import and export TM-BOM style JSON files - improves interoperability with other threat modeling platforms

• A threat modeling workspace allows for team collaboration

• An advanced DFD editor (allows for nested components, trust zones with trust boundaries and much more)

• Community library packs with links to taxonomies like MITRE ATT&CK, CAPEC, LINDDUN, STRIDE etc. - allows your team to quickly create high quality threat models

Who is Precogly for?

• Security architects looking to scale threat modeling in their orgs.

• Vibe coding security engineers who need a well-architected CRUD foundation on which they can build their AI threat modeling assistants.

• Threat modeling consultants and trainers looking for a platform that supports reference images, team collaboration, and structured threat modeling programs.

• Compliance professionals looking to link threat modeling with security requirements coming from standards like ASVS or laws like CRA and DORA

Precogly is designed for enterprise workflows, but smaller organizations can also find value in the DFD editor, library packs, and collaborative workspace.

How is Precogly different?

• Compliance-aware — Built-in traceability to DORA, CRA, ASVS, NIST CSF, SOC 2, and more. Every threat and countermeasure maps to compliance requirements.

• Structured library packs — Not just brainstorming. Curated packs with components, threats, countermeasures, and taxonomy links (MITRE ATT&CK, CAPEC, CWE, STRIDE) give your team a structured starting point.

• AI-agent ready architecture — A clean REST API with full OpenAPI docs, designed to be a foundation for AI-powered threat modeling assistants.

• Pack ecosystem — Community and official packs for AWS, Azure, GCP, banking, and compliance frameworks. Extend or create your own.

• Two ways to threat model — either through the DFD Editor or through the threat modeling workspace