Practice Hub / Tools / Threat Modeling Workbench
The tender assistant before it is approved
Threat-model a proposed Sales agent that reads Salesforce and SharePoint and can create records and send email: who reaches it, what it acts as, and what content from outside can make it do.
Included with any paid plan
Open this scenario with any paid plan
Threat-model a system from its data flow diagram: assets, trust boundaries and entry points, threats by STRIDE, mitigations and residual risk, and an attack tree that breaks as mitigations land.
Your work saves to your account as you go, and downloads as files you keep.
From the course
Every course opens with a free module you can read in full, no account needed.