ThreatTree

6.9easy start · #5 of 22
in Threat Modeling Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, Web. Paid plans from $29/mo.

ThreatTree is ranked #5 of 22 in threat modeling software on The Geeks Club. It runs on API, Web. There is a free plan. Paid plans start at $29/mo.

ThreatTree plans and pricing

All plans

Free Free Up to 3 forests · Up to 3 DFDs per forest · Up to 5 Attack Trees per DFD threattree.com · 30 Sept 2026

Pro $29/mo per user, monthly Unlimited forests & trees · Team collaboration · Full report generation · Priority support threattree.com · 30 Sept 2026

Enterprise Not published Quote on request; pricing depends on org size & requirements SSO/SAML · Custom roles and data retention · Multi-org management · Custom integrations · Dedicated/VPC deployment option · Dedicated support & SLA threattree.com · 30 Sept 2026

Compared on threat modeling software

Free plan: Yes
Attack-path analysis: Yes
Risk prioritization: Yes
Collaborative review: Yes
Templates and frameworks: Yes
Modeling methods: multiple
Deployment: cloud

Best ThreatTree alternatives

See all 12

ThreatOpus 0 of 4 in the starter kit Lesson 17.7 CAIRIS 0 of 4 in the starter kit Lesson 27.3 OWASP Threat Dragon 0 of 4 in the starter kit Lesson 37.3 ThreatModeler Nexus 0 of 4 in the starter kit Lesson 47.1 AWS Threat Composer 0 of 4 in the starter kit Lesson 66.8 IriusRisk 0 of 4 in the starter kit Lesson 76.8

The record

Purpose: ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees.
Risk analysis: Likelihood-by-impact scoring automatically generates a ranked risk register across trees in a forest.
Frameworks: Threats can be tagged with STRIDE, LINDDUN, OWASP Top 10, CAPEC, and MITRE ATT&CK.
Controls: Mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2.
Reports and exports: ThreatTree offers PDF reports and supports JSON and STIX 2.1 exports.
Collaboration: The product supports owner, editor, and viewer roles for invited team members.
Encryption: Optional per-forest AES-256-GCM encryption is available on every plan, including Free.
Hosting and transport: ThreatTree says data is stored on UK servers and connections use TLS 1.2 or higher.
Backups: Database backups are taken daily, retained for 30 days, encrypted, and stored separately from the primary data store.
Certification: ThreatTree says it is not currently SOC 2 or ISO 27001 certified and that formal certification is on its roadmap.
Integrations: The Enterprise plan lists custom Jira and ServiceNow ticketing, Terraform/OpenAPI architecture import, Splunk and Microsoft Sentinel feeds, GRC platform sync, and Confluence/Notion embeds.
Support: The pricing page lists priority support with Pro and dedicated support and an SLA with Enterprise.
Intended users: ThreatTree describes itself as a browser-based tool for security teams ranging from solo consultants to CISO organizations.
Maker location: The maker says its team is based in the United Kingdom.
Price from: $29/mo

Where it ranks on The Geeks Club

Best Threat Modeling Software in 2026#5 of 22

Is ThreatTree yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThreatTree

Sources

threattree.com· checked 30 Sept 2026
threattree.com/security· checked 30 Sept 2026
threattree.com/app/membership· checked 30 Sept 2026
threattree.com/about· checked 30 Sept 2026