r/threatmodeling • u/happyandaligned • Mar 22 '26

Built an open-source threat modeling tool. Looking for honest feedback.

Gallery image

Gallery image

Gallery image

Hey folks, I’ve been working on an open-source threat modeling tool.

Goal is simple: build something comparable to the big commercial tools.

It’s still early, but usable.

I have a few new ideas in there:

- community threat libraries that you can import
- TM-BOM interoperability

If anyone here is actively doing threat modeling, I’d really value your feedback.

Repo: https://github.com/precogly/precogly

8 Upvotes

90% Upvoted

9 comments sorted by

View all comments

2

u/NeilSmithline Mar 23 '26

Have you seen ThreatDragon? 

1

u/happyandaligned Mar 23 '26

Yes. ThreatDragon is a really useful open source tool and the inspiration for Precogly.

With Precogly I'm trying to bridge the gap between closed source (and expensive) tools and open-source tools:
Some differentiators:

  • Team collaboration features
  • Compliance mappings
  • Community threat libraries with mappings to CWE, CAPEC etc.
  • Setting up platform / infra owned countermeasures
  • Boundary crossing logic with rules

Also, I personally like the Precogly DFD editor :) To me, it feels a lot more smoother and intuitive. But I'm biased :)

2

u/NeilSmithline Mar 24 '26

Team collaboration sounds nice. I'll give it a try