SecondPen.ai

Templates · Engineering & architecture

Threat model (STRIDE) template

Origin: Microsoft SDL; STRIDE by Loren Kohnfelder and Praerit Garg.

Start from this templateFree, no account needed. The blank is written with guidance in each section, ready to fill in.

Sections

  1. System description & data-flow diagram
  2. Trust boundaries
  3. Threats by STRIDE category
  4. Mitigations
  5. Residual risk

How a tough reader scores it

When you score a draft against this format, the Critic evaluates this threat model. The weights add up to 100; the fixes for the weakest criteria arrive as cards in the editor.

CriterionWeight
DFD and trust boundaries are complete and accurate20
All STRIDE categories considered per component20
Threats are specific, not generic20
Mitigations are concrete and owned20
Risk rating is consistent10
Residual risk explicitly accepted10

How it works in SecondPen.ai

Open the template and the editor writes the blank once, with a line of guidance under each heading that you delete as you fill it in. Write your abstract and the editor names the format it reads like. Ask for a document with a slash command and it offers to start from the matching format. When the draft is ready, the Critic scores it against the criteria above, the way this format's toughest reader would, and the three highest-leverage fixes become Editor cards.

More in Engineering & architecture