Threat Modeling Case Studies
Assets → actors → entry points → trust boundaries → concrete threats → prevention/detection → residual risk. STRIDE supplies prompts; the architecture supplies priorities.
Threat Model: E-Commerce
Accounts, catalog, checkout, payments, inventory and admin tools.
3 assets · 4 entry points · 3 threats
Threat Model: Chat Application
Realtime messages, contacts, sessions and attachments.
3 assets · 4 entry points · 3 threats
Threat Model: Multi-Tenant SaaS
Tenant data, admin roles, API keys, integrations, search and AI retrieval.
3 assets · 4 entry points · 3 threats
Threat Model: Payment System
High-integrity payment intents, provider calls, webhooks, ledger and reconciliation.
3 assets · 4 entry points · 3 threats