Can someone provide any independent comparison of threat modeling solutions?

Here are some of the most popular Threat Modeling solutions available on the market and their independent features:

• Microsoft Threat Modeling Tool is free and enables you to identify and mitigate application security risks. The tool has various features like attack trees, threat modeling templates, and risk assessment.


• ThreatModeler is a commercial tool that helps you to create threat models for your applications. It includes features like the ones mentioned above: risk assessment, threat modeling templates, and attack trees.


• OWASP Threat Dragon is a tool that helps users create threat models for web applications. It is open source, and like the previous solutions mentioned above, it has features such as attack trees, risk assessment, and threat modeling templates.

Remember to consider these factors when deciding on a Threat Modeling solution:

• Your budget


• The size of your team


• The features you need


• Your technical expertise