Threat Tiger - Threat Modeling With A Bite

1. Session Meta & Context

Scope: Not Defined

Participants:

2. Diagram Component Palette

Click elements to instantiate them onto the architecture canvas window.

Process / Service

Data Store

External Entity

Trust Boundary Zone

Trust Boundary Line

Step Activity

Comment Textbox

Canvas Headline

Custom Image / Icon

Infrastructure Node

Swimlane Grid Layout

Process (Rectangle)

Decision (Diamond)

Terminator (Oval)

Data / I-O

Document

Manual Input

Preparation (Hexagon)

Connector (Circle)

Stored Data

Database (Cylinder)

Controls Index

Select Component: Left-click directly onto a shape.
Move Component: Drag items across grid quadrants.
Pan Workspace: Right-click canvas and hold to drag.

100%

Select an element on the canvas to inspect its properties.

Properties

Transit Node Routing Matrix

Source Endpoint

Destination Endpoint

Target Infrastructure Ports Context

Curve Rendering Style

Bi-directional Communication Stream

Dashed Line Communication Track

Line Thickness: 2px

Line Display Color

Flowchart Shape Style

Fill Color

Stroke Color

Border Line Width: 2px

Label

Architectural Scope Notes

Threat Templates:

Sort Templates

Select a process, data store, communication track, or infrastructure component to view Threat Templates.

ID	STRIDE Metric	Title Scenario Profile Description	Associated Component	Severity	Risk Rating	Status	Actions

Date & Time	Operator Profile	Event Action	Operational Mutation Context Description Log

Threat Context Title / Scenario Definition

STRIDE Category Vector Mapping

Detailed Technical Description & Notes Context

Linked Architecture Target Component

Remediation Status Evaluation Tracker

Mitigation Explanation

Exploitation Likelihood Metric (1-5)

Business Impact Rating Scope (1-5)

1. Core Threat Modeling Engineering Methodology

This architecture threat modeling tool facilitates highly structured, continuous secure-by-design architectural audits. Threat identification protocols follow the strict **STRIDE matrix standard framework** to thoroughly evaluate structural security postures:

Spoofing (Authentication): Validating entity endpoints against configuration impersonation vectors or weak identity claims signatures.
Tampering (Integrity): Protecting memory, operational parameter registries, configurations, and communication transit segments from malicious injection loops.
Repudiation (Non-repudiation): Guaranteeing robust, unalterable administrative logs tracking every privilege shift or high-value record modification.
Information Disclosure (Confidentiality): Restricting raw process snapshots, debugging exceptions stack traces, or cleartext keys from falling outside trusted layers.
Denial of Service (Availability): Shielding microservice processing pools from algorithmic complexity attacks or unchecked allocation exhaustion locks.
Elevation of Privilege (Authorization): Preventing untrusted context deserialization gates from subverting sandbox permissions parameters.

2. Open Source License & Feedback

LICENSE: MIT License
Copyright © 2026 Johan Zetterström

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

FEEDBACK & SUPPORT:
For bug reports, feature requests, or any other feedback, please visit the project's GitHub page at https://github.com/jozeta/threat-tiger or contact the developer via email at johan.zetterstrom@protonmail.com.