ThreatForge

7.0easy start · #5 of 22
in Threat Modeling Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on Linux, Mac, Web, Windows.

ThreatForge is ranked #5 of 22 in threat modeling software on The Geeks Club. It runs on Linux, macOS, Web, Windows. There is a free plan.

ThreatForge plans and pricing

All plans

Threat Forge Free Free and open source under Apache 2.0 · no account required · full application available to everyone exitzerolabs.com · 7 Oct 2026

Compared on threat modeling software

Free plan: Yes
Templates and frameworks: Yes
Modeling methods: stride
Deployment: cloud

Best ThreatForge alternatives

See all 20

ThreatOpus 0 of 4 in the starter kit Lesson 17.7 CAIRIS 0 of 4 in the starter kit Lesson 27.3 OWASP Threat Dragon 0 of 4 in the starter kit Lesson 37.3 ThreatModeler Nexus 0 of 4 in the starter kit Lesson 47.1 ThreatTree 0 of 4 in the starter kit Lesson 66.9 AWS Threat Composer 0 of 4 in the starter kit Lesson 76.8

The record

Product: Threat Forge is an open-source desktop app for threat modeling with visual diagrams, automated STRIDE analysis, and AI-assisted threat discovery.
Diagrams: Its drag-and-drop canvas has 44 typed components across 10 categories, with trust boundaries, text annotations, and automatically routed connections.
STRIDE: The built-in rule engine generates threats from element types and data-flow patterns and works fully offline.
AI analysis: The app supports chatting with Claude or GPT about a threat model and can suggest threats, propose mitigations, and answer security questions; it uses BYOK.
File format: Threat models use human-readable, git-diffable YAML files that can be reviewed in pull requests and versioned over time.
Templates: Six templates cover Cloud Microservices, E-Commerce, Mobile Banking, SaaS Platform, IoT Smart Building, and Healthcare System.
Platforms: The desktop app runs on macOS, Windows, and Linux.
Privacy: The maker says there is no telemetry and threat models stay on the user's machine.
Account: No account is required to get started.
License: The application is released under the Apache 2.0 license, with no freemium upsells or enterprise-only features.
Download size: The maker describes the download as approximately 10 MB.
Intended users: The maker positions Threat Forge as a developer-friendly alternative for teams seeking threat modeling without an enterprise procurement cycle.
Price from: Free

Where it ranks on The Geeks Club

Best Threat Modeling Software in 2026#5 of 22

Is ThreatForge yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThreatForge

Sources

exitzerolabs.com/products/threat-forge· checked 7 Oct 2026