ThreatTree

No phone app

7.1No. 5 of 22
in Threat Modeling Software

Recognised40% of the score50
Phone app26% of the score0
Documented20% of the score97
Free plan14% of the score100

Free plan: Yes
Paid plans from: $29/mo
Runs on: api, Web

Summary

ThreatTree is ranked #5 of 22 in threat modeling software on Samsung Mobile US Press. It runs on API, Web. There is a free plan. Paid plans start at $29/mo.

ThreatTree plans and pricing

All plans

Free Free Up to 3 forests · Up to 3 DFDs per forest · Up to 5 Attack Trees per DFD threattree.com · 30 Sept 2026

Pro $29/mo per user, monthly Unlimited forests & trees · Team collaboration · Full report generation · Priority support threattree.com · 30 Sept 2026

Enterprise Not published Quote on request; pricing depends on org size & requirements SSO/SAML · Custom roles and data retention · Multi-org management · Custom integrations · Dedicated/VPC deployment option · Dedicated support & SLA threattree.com · 30 Sept 2026

Compared on threat modeling software

Free plan: Yesthreattree.com
Attack-path analysis: Yesthreattree.com
Risk prioritization: Yesthreattree.com
Collaborative review: Yesthreattree.com
Templates and frameworks: Yesthreattree.com
Modeling methods: multiplethreattree.com
Deployment: cloudthreattree.com

Facts

Purpose: ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees.threattree.com · 30 Sept 2026
Risk analysis: Likelihood-by-impact scoring automatically generates a ranked risk register across trees in a forest.threattree.com · 30 Sept 2026
Frameworks: Threats can be tagged with STRIDE, LINDDUN, OWASP Top 10, CAPEC, and MITRE ATT&CK.threattree.com · 30 Sept 2026
Controls: Mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2.threattree.com · 30 Sept 2026
Reports and exports: ThreatTree offers PDF reports and supports JSON and STIX 2.1 exports.threattree.com · 30 Sept 2026
Collaboration: The product supports owner, editor, and viewer roles for invited team members.threattree.com · 30 Sept 2026
Encryption: Optional per-forest AES-256-GCM encryption is available on every plan, including Free.threattree.com · 30 Sept 2026
Hosting and transport: ThreatTree says data is stored on UK servers and connections use TLS 1.2 or higher.threattree.com · 30 Sept 2026
Backups: Database backups are taken daily, retained for 30 days, encrypted, and stored separately from the primary data store.threattree.com · 30 Sept 2026
Certification: ThreatTree says it is not currently SOC 2 or ISO 27001 certified and that formal certification is on its roadmap.threattree.com · 30 Sept 2026
Integrations: The Enterprise plan lists custom Jira and ServiceNow ticketing, Terraform/OpenAPI architecture import, Splunk and Microsoft Sentinel feeds, GRC platform sync, and Confluence/Notion embeds.threattree.com · 30 Sept 2026
Support: The pricing page lists priority support with Pro and dedicated support and an SLA with Enterprise.threattree.com · 30 Sept 2026
Intended users: ThreatTree describes itself as a browser-based tool for security teams ranging from solo consultants to CISO organizations.threattree.com · 30 Sept 2026
Maker location: The maker says its team is based in the United Kingdom.threattree.com · 30 Sept 2026