- Home
- Threat Modeling Software
- Threagile
Threagile
Cologne, Germany
What it is
Threagile is an open-source toolkit for agile threat modeling. It represents architecture and assets in YAML, then checks those models against risk rules. Its reports identify potential risks and recommend mitigation actions; the YAML model can also track mitigation progress so reports show the current state. Threagile creates data-flow diagrams and supports exports such as Excel and JSON.
Teams can run it from the command line, in a Docker container, or as a REST server. Developers can edit models in their IDEs and track changes in Git. Custom risk rules can be written as YAML scripts without compiling Go code. A web playground analyzes YAML models and links to schema and API resources, while a GitHub Action can run Threagile against a repository model file. It is free under the MIT License and supports API, Linux, self-hosted, and web use. The repository says UI efforts are ongoing and current attempts are not ready.
For and against
For
- Tracks mitigation progress in the YAML model
- Creates data-flow diagrams and exports Excel and JSON
- Custom risk rules use YAML scripts
- Provides a GitHub Action for repository models
Against
- Current UI attempts are not ready
- Support responses from contributors are not guaranteed
The verdict
Threagile combines YAML-based architecture modeling with risk checks, reports, and mitigation tracking. It is a free option for teams comfortable working with its command-line, server, or self-hosted setup.
Who it suits
Threagile suits developers working on agile projects or DevSecOps workflows who want to model architecture and track risks in YAML. Its command-line, Docker, REST server, and GitHub Action options support different ways to run it.
Plans and prices
Threagile
Open-source toolkit · MIT License
Read 8 Oct 2026 · github.com
On the record
- Custom rules
- Custom risk rules can be written as YAML scripts without compiling Go code.github.com · read 8 Oct 2026
- Diagrams and exports
- It automatically creates data-flow diagrams and supports output formats including Excel and JSON.threagile.io · read 8 Oct 2026
- Execution options
- Threagile can run from the command line, in a Docker container, or as a REST server.threagile.io · read 8 Oct 2026
- Integration
- The project provides a GitHub Action for running Threagile against a repository model file.github.com · read 8 Oct 2026
- Intended users
- The maker describes Threagile as developer-friendly threat modeling for agile projects and DevSecOps workflows.threagile.io · read 8 Oct 2026
- License
- The repository identifies the software as open source under the MIT License.github.com · read 8 Oct 2026
- Model editing
- Models are editable in developer IDEs and diffable in Git, and the playground provides YAML model analysis and links to schema and API resources.threagile.io · read 8 Oct 2026
- Purpose
- Threagile is an open-source toolkit for agile threat modeling that models architecture and assets in YAML and checks models against risk rules.github.com · read 8 Oct 2026
- Risk reports
- It can generate reports with potential risks and recommended mitigation actions.threagile.io · read 8 Oct 2026
- Risk tracking
- Risk tracking can be recorded in the YAML model so the current mitigation state is reported.threagile.io · read 8 Oct 2026
- Support
- The repository invites users to create a GitHub discussion or issue, where contributors may respond.github.com · read 8 Oct 2026
- UI status
- The repository says UI efforts are ongoing and current attempts are not ready.github.com · read 8 Oct 2026
