Showcase · Cybersecurity

Threat Model Toolkit

A structured workspace for documenting assets, trust boundaries and mitigations for a small web service, designed to survive review.

Discipline
Cybersecurity
Role
Security engineering
Duration
4 weeks
Year
2026

Problem

Threat models usually live in a document that nobody opens twice. The aim was an artefact that stays current because it is diffable and lives next to the code.

Approach

  1. 01Modelled assets, entry points and trust boundaries as versioned YAML.
  2. 02Generated data-flow diagrams from the model rather than drawing them by hand.
  3. 03Linked every mitigation to a test or a control that can fail in CI.
  4. 04Produced a review checklist automatically from unmitigated threats.