Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Threat modeling serves as a fundamental aspect of the Microsoft Security Development Lifecycle (SDL), acting as an engineering strategy aimed at uncovering potential threats, attacks, vulnerabilities, and countermeasures that may impact your application. This technique not only aids in the identification of risks but also influences the design of your application, aligns with your organization's security goals, and mitigates potential hazards. The Microsoft Threat Modeling Tool simplifies the process for developers by utilizing a standardized notation that helps visualize system components, data flows, and security boundaries. Additionally, it assists those involved in threat modeling by highlighting various classes of threats to consider, depending on the architectural design of their software. Crafted with the needs of non-security professionals in mind, this tool enhances accessibility for all developers, offering straightforward guidance on the creation and evaluation of threat models, ultimately fostering a more secure software development practice. By integrating threat modeling into their workflow, developers can proactively address security concerns before they escalate into serious issues.

Description

Open source, multi-cloud platform to scan, map, and rank vulnerabilities in containers, images hosts, repositories, and running containers. ThreatMapper detects threats to your applications in production across clouds, Kubernetes and serverless. You cannot secure what you can't see. ThreatMapper automatically discovers your production infrastructure. It can identify and interrogate cloud instances, Kubernetes nodes and serverless resources. This allows you to discover the applications and containers, and map their topology in real time. ThreatMapper allows you to visualize and discover the external and internal attack surfaces for your applications and infrastructure. Bad actors can gain access to your infrastructure by exploiting vulnerabilities in common dependencies. ThreatMapper scans hosts and containers for known vulnerable dependencies. It also takes threat feeds from more than 50 sources.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Amazon EKS
Amazon Elastic Container Registry (ECR)
Amazon Web Services (AWS)
CircleCI
Docker
Elasticsearch
GitLab
Google Cloud Platform
Google Security Operations (SecOps)
IBM Cloud Private
IriusRisk
Jira
Kubernetes
Microsoft Azure
Oracle Cloud Infrastructure
PagerDuty
Seeker
Slack
Splunk Cloud Platform
VMware Tanzu

Integrations

Amazon EKS
Amazon Elastic Container Registry (ECR)
Amazon Web Services (AWS)
CircleCI
Docker
Elasticsearch
GitLab
Google Cloud Platform
Google Security Operations (SecOps)
IBM Cloud Private
IriusRisk
Jira
Kubernetes
Microsoft Azure
Oracle Cloud Infrastructure
PagerDuty
Seeker
Slack
Splunk Cloud Platform
VMware Tanzu

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Microsoft

Founded

1975

Country

United States

Website

www.microsoft.com/en-us/securityengineering/sdl/threatmodeling

Vendor Details

Company Name

Deepfence

Country

United States

Website

deepfence.io/threatmapper/

Product Features

Product Features

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Alternatives

Alternatives

Bytesafe Reviews

Bytesafe

Bitfront
ThreatStryker Reviews

ThreatStryker

Deepfence
Fork Reviews

Fork

VerSprite Cybersecurity