Threat Designer

Threat Designer: AI-powered threat modeling for secure system design

**Threat Designer** is an AI-driven agent that automates and streamlines the threat modeling process for secure system design. Harnessing the power of large language models (LLMs), it analyzes system architectures, identifies potential security threats, and generates detailed threat models—empowering developers and security professionals to incorporate security from the earliest stages of development.

---

Quick Links

• 📖 Read the AWS Blog Post
• ⭐ Star this repo to support the project
• 📚 Getting started Guide
• 💻 CLI Quick Start — no deployment needed, runs fully local

---

CLI — No Deployment Required

Want to run threat modeling without deploying any AWS infrastructure? The **Threat Designer CLI** lets you generate STRIDE-based threat models entirely on your local machine, using only your existing Amazon Bedrock or OpenAI credentials.

pip install ./cli
threat-designer

See the [CLI Quick Start guide](./cli/README.md) to get up and running in minutes.

---

Features

• Architecture Analysis - Submit architecture diagrams and analyze for threats
• Interactive Editing - Update threat modeling results via the user interface
• Iterative Refinement - Replay threat modeling based on your edits and additional input
• Multiple Export Formats - Export results in PDF, DOCX, or JSON format
• AI Assistant (Sentry) - Interact with a built-in assistant to dive deep into threat models
• Spaces - Attach a knowledge base of your own documents (runbooks, policies, diagrams) to enrich threat modeling with organization-specific context
• Threat Catalog - Explore and ma