Free threat modeling templates
No signup, no email gate. Download a Data Flow Diagram or Attack Tree template as an open drawio file, or a Risk Register as a plain CSV, and start using it today in whatever tool you already have open.
Data Flow Diagram Template
A worked example with external entities, processes, data stores, and a trust boundary already laid out — replace the labels with your own system.
Get the template → .drawio — free, no signupAttack Tree Template
A goal, AND/OR gates, and leaf-level attack steps mapped to CAPEC — the full anatomy of an attack tree, ready to relabel.
Get the template → .csv — free, no signupRisk Register Template
Twelve columns covering STRIDE category, Likelihood x Impact scoring, mitigation, and ownership, with six worked example rows.
Get the template →Industry templates
A full worked example for your industry -- a DFD, attack tree, and risk register already threaded together for a representative system, not just a generic pattern. Included with the Pro and Enterprise plans.
Fintech Payment Flow
A tokenized card-payment DFD scoped around a PCI DSS cardholder data environment, an attack tree covering account takeover and forged webhooks, and a ten-row risk register.
See fintech threat modeling →Or download the files instead:
Healthcare EHR
An EHR DFD built around a HIPAA covered-entity boundary and a clinical-access chokepoint, an attack tree covering insider snooping and interface-engine compromise, and a ten-row risk register.
See healthcare threat modeling →Or download the files instead:
AI Agent Pipeline
An agentic-AI DFD centered on the prompt/context-window trust boundary, an attack tree covering prompt injection and over-privileged tool access, and a ten-row risk register.
See AI/ML threat modeling →Or download the files instead:
Get new templates and threat-modeling guides by email as they're published — no more than one a week.