threat-modelling

This project is about creating and publishing threat model examples.

AI-powered threat modeling that turns architecture diagrams and business context into actionable threats

This directory focuses exclusively on Threat Modeling Tools—software, code, libraries, or services that automate, guide, or support the design-time threat modeling process.

The Secure by Design (SbD) Artefact Library provides a centralised repository of proven solutions to common cyber security problems, supporting the implementation of Secure By Design across UK government.

Simplifies the review and management of threat models in documents

Guidelines and tools for deploying Starlink into high-threat environments

C5-DEC: Common Criteria for Cybersecurity, Cryptography, Clouds – Design, Evaluation and Certification. LLM-enabled toolkit for secure system design, development and evaluation via Common Criteria, SSDLC, SpecEngine/DocEngine, CRA, SBOM, threat modelling + risk assessment, and cryptography (incl. post-quantum), CLI/TUI/GUI

Visualize Kubernetes attack paths and neutralize risks. Maps cluster relationships against CIS Benchmarks & MITRE ATT&CK to identify and fix critical choke points.

A playbook for self-serve, continuous threat modelling.

An interactive web application for creating cyber security threat models.

Securing a self-hosted Hermes agent's Signal messaging gateway: least-privilege toolset, threat model, and safe outbound messaging.

Hands-on AI security research — LLM threat models, prompt injection testing, and offensive AI techniques. Lab work from HTB COAE and beyond.

A rigorous cybersecurity project portfolio on fictional clients covering NIST, audits, Linux, SQL, assets, threats, vulnerabilities, detection, incident response, escalation, Wireshark, tcpdump, IDS (Suricata), SIEM (Splunk, Chronicle), and Python automation.

Green team

This Security Repo is where I upload Security Designs and Documentation to help both individuals and companies increase security.

DevOps Threat Modelling as Code

A demo and visualisation tool for showing the real-world consequences of cyber-attacks on smart grid infrastructure. Built for presentations, internal demos, and boardroom-level explanations of infamous OT/ICS threats.

Portable Markdown skill for AI vibe coding with security: security audits, threat modelling, web security testing, application security, API security, and remediation workflows.

CVSS v3.1 risk assessment tool for embedded systems — threat modelling, control mapping & NIS2 Article 21 compliance gap analysis

Penetration test of HackInOS 1 (file upload bypass, credential extraction, Docker privilege escalation) and STRIDE threat model of a wearable diagnostic system with CVSS scoring and DFD analysis.