threat-modelling

This project is about creating and publishing threat model examples.

AI-powered threat modeling that turns architecture diagrams and business context into actionable threats

This directory focuses exclusively on Threat Modeling Tools—software, code, libraries, or services that automate, guide, or support the design-time threat modeling process.

The Secure by Design (SbD) Artefact Library provides a centralised repository of proven solutions to common cyber security problems, supporting the implementation of Secure By Design across UK government.

Simplifies the review and management of threat models in documents

Guidelines and tools for deploying Starlink into high-threat environments

C5-DEC: Common Criteria for Cybersecurity, Cryptography, Clouds – Design, Evaluation and Certification. LLM-enabled toolkit for secure system design, development and evaluation via Common Criteria, SSDLC, SpecEngine/DocEngine, CRA, SBOM, threat modelling + risk assessment, and cryptography (incl. post-quantum), CLI/TUI/GUI

Visualize Kubernetes attack paths and neutralize risks. Maps cluster relationships against CIS Benchmarks & MITRE ATT&CK to identify and fix critical choke points.

An interactive web application for creating cyber security threat models.

A playbook for self-serve, continuous threat modelling.

Hands-on AI security research — LLM threat models, prompt injection testing, and offensive AI techniques. Lab work from HTB COAE and beyond.

Securing a self-hosted Hermes agent's Signal messaging gateway: least-privilege toolset, threat model, and safe outbound messaging.

The technology and threat catalogue powering ThreatModelling.io.

Green team

A rigorous cybersecurity project portfolio on fictional clients covering NIST, audits, Linux, SQL, assets, threats, vulnerabilities, detection, incident response, escalation, Wireshark, tcpdump, IDS (Suricata), SIEM (Splunk, Chronicle), and Python automation.

This Security Repo is where I upload Security Designs and Documentation to help both individuals and companies increase security.

DevOps Threat Modelling as Code

A demo and visualisation tool for showing the real-world consequences of cyber-attacks on smart grid infrastructure. Built for presentations, internal demos, and boardroom-level explanations of infamous OT/ICS threats.

Portable Markdown skill for AI vibe coding with security: security audits, threat modelling, web security testing, application security, API security, and remediation workflows.

Qualitative cyber risk assessment and treatment plan for an aged-care provider adopting AI tools and BYOD (individual report).