Free threat modeling templates
No signup, no email gate. Download a Data Flow Diagram or Attack Tree template as an open drawio file, or a Risk Register as a plain CSV, and start using it today in whatever tool you already have open.
.drawio — free, no signup
Data Flow Diagram Template
A worked example with external entities, processes, data stores, and a trust boundary already laid out — replace the labels with your own system.
Get the template → .drawio — free, no signupAttack Tree Template
A goal, AND/OR gates, and leaf-level attack steps mapped to CAPEC — the full anatomy of an attack tree, ready to relabel.
Get the template → .csv — free, no signupRisk Register Template
Twelve columns covering STRIDE category, Likelihood x Impact scoring, mitigation, and ownership, with six worked example rows.
Get the template →