Best Threat Modeling Software in 2026
Updated
Teams evaluating system security risks can use threat modeling tools to structure analysis and review. Compare modeling methods, templates and frameworks, and risk prioritization, along with attack-path analysis and collaborative review. Deployment options and project limits may shape how a tool fits your team’s process; check free-plan availability and paid-from pricing as well. ThreatModeler Nexus, ThreatOpus, and ThreatTree are among the entries to weigh. The listed criteria help you compare approaches and workflow support against the way your team identifies and discusses threats.
Threat Modeling Software, one module each.A lit port is something its maker publishes; 11 of 11 with a known API signal have a public API.
- 01 ThreatModeler Nexus API yesFREE yesDOCS 7.3$333.33/mo
- 02 ThreatOpus API yesFREE yesDOCS 7.3£129.99/mo
- 03 ThreatTree API yesFREE yesDOCS 7.3$29/mo
- 04 CAIRIS API yesFREE yesDOCS 7.2Free
- 05 IriusRisk API yesFREE yesDOCS 7.2Free
- 06 Threagile API yesFREE yesDOCS 7.2Free
- 07 AWS Threat Composer API yesDOCS 6.9
- 08 CYMETRIS API yesFREE noDOCS 6.7€99/mo
- 09 SD Elements API yesFREE noDOCS 6.7$6,250/mo
- 10 ThreatZ API yesFREE noDOCS 6.7$8.33/mo
- 11 DevArmor API yesDOCS 6.6
- 12 Dethernety FREE yesDOCS 5.8Free
- 13 OWASP Threat Dragon FREE yesDOCS 5.8Free
- 14 pytm FREE yesDOCS 5.8Free
- 15 ThreatForge FREE yesDOCS 5.8Free
- 16 ADTool DOCS 5.5
- 17 EnCo SOX ATA DOCS 5.5
- 18 AutoSec TARA Suite DOCS 5.4
- 19 itemis SECURE DOCS 5.4
- 20 KAVACH DOCS 5.4
- 21 TSpec DOCS 5.4
- 22 Microsoft Threat Modeling Tool DOCS 5.1
Compare all 22 in a table
| # | Platform | Score | Free plan | From | Free plan | Paid from | Project limit | Attack-path analysis |
|---|---|---|---|---|---|---|---|---|
| 1 | ThreatModeler Nexus | 7.3 | Free plan | $333.33/mo | Yes | Yes | ||
| 2 | ThreatOpus | 7.3 | Free plan | £129.99/mo | Yes | Yes | ||
| 3 | ThreatTree | 7.3 | Free plan | $29/mo | Yes | Yes | ||
| 4 | CAIRIS | 7.2 | Free plan | Free | Yes | Yes | ||
| 5 | IriusRisk | 7.2 | Free plan | Free | Yes | |||
| 6 | Threagile | 7.2 | Free plan | Free | ||||
| 7 | AWS Threat Composer | 6.9 | Yes | |||||
| 8 | CYMETRIS | 6.7 | No | €99/mo | No | 5 projects | Yes | |
| 9 | SD Elements | 6.7 | No | $6,250/mo | No | |||
| 10 | ThreatZ | 6.7 | No | $8.33/mo | No | 3 projects | Yes | |
| 11 | DevArmor | 6.6 | No | |||||
| 12 | Dethernety | 5.8 | Free plan | Free | Yes | |||
| 13 | OWASP Threat Dragon | 5.8 | Free plan | Free | Yes | |||
| 14 | pytm | 5.8 | Free plan | Free | ||||
| 15 | ThreatForge | 5.8 | Free plan | Free | Yes | |||
| 16 | ADTool | 5.5 | Yes | Yes | ||||
| 17 | EnCo SOX ATA | 5.5 | Yes | |||||
| 18 | AutoSec TARA Suite | 5.4 | No | |||||
| 19 | itemis SECURE | 5.4 | Yes | |||||
| 20 | KAVACH | 5.4 | No | Yes | ||||
| 21 | TSpec | 5.4 | Yes | |||||
| 22 | Microsoft Threat Modeling Tool | 5.1 | Yes |
Is your platform on this list?
Numbered spots on this list can be sponsored, and a sponsored row is labelled as paid.