Threat Modeling: A Practical Guide for Development Teams
A book by Izar Tarandach and Matthew J. Coles
About this site
This site is maintained by Izar Tarandach and Matthew J. Coles, co-authors of Threat Modeling: A Practical Guide for Development Teams (O’Reilly, 2020).
It exists as a home for the book, and as an ongoing place to write about threat modeling: practice, tools, methodology, and how the discipline is changing as AI and LLMs get pulled into development workflows.
The authors
Izar Tarandach (@izar_t on LinkedIn) is a security architect and threat modeling practitioner, maintainer of pyTM and Continuous Threat Modeling.
Matthew J. Coles (LinkedIn) is a security architect and threat modeling practitioner.