ADTool

Free plan

What ADTool is

ADTool is a free application for modeling and analyzing attack-defense scenarios using attack-defense trees and terms. It supports the attack-defense tree approach developed within the ATREES, TREsPASS, and ADT2P projects. Users can create and edit attack-defense trees and sequential attack trees, then perform quantitative bottom-up analysis. A modular display helps represent large real-life scenarios.

For some attribute domains, ADTool can rank possible attacks; it also supports attack-path analysis and risk prioritization. Users can save models, print them, export them to various formats, and customize their layouts. The maker page offers a new version in beta alongside an earlier stable version. The new version requires JDK 7 or later. The stable version is available as a jar with dependencies included, around 6.6 MB, or as a lighter package without dependencies, around 1100 kB. A standalone user manual is available for the previous stable version, and source code is linked for the new and previous versions. The maker page lists the Security and Trust of Software Systems address in Esch-sur-Alzette, Luxembourg.

Who it suits

It suits security practitioners or researchers who need to build attack-defense scenarios and analyze possible attacks. Its tree-editing and export features may also help people documenting or prioritizing risks.

What it does well

Free tool for attack-defense scenario modeling.
Supports attack-defense and sequential attack trees.
Quantitative bottom-up scenario analysis is available.
Can rank possible attacks for certain attribute domains.
Models can be saved, printed, and exported.

What to know first

The new version is listed as beta.
The new version requires JDK 7 or later.
The user manual listed is for the previous stable version.

Getting started

Open the ADTool page from the University of Luxembourg.
Choose the new beta version or the previous stable version.
For the new version, ensure JDK 7 or later is available.
Download either the stable jar with dependencies or the lighter package.
Use the standalone manual for the previous stable version if needed.

Verdict

ADTool provides tree-based modeling and quantitative analysis for attack-defense scenarios, with options to rank attacks and export models. Users choosing a version should note the beta status of the new release and its JDK requirement.

Questions

Is ADTool free?

Yes. ADTool is listed as free, with a free plan.

What does ADTool do?

It models and analyzes attack-defense scenarios using attack-defense trees and terms. It supports quantitative bottom-up analysis, attack ranking for certain attribute domains, attack-path analysis, and risk prioritization.

What versions are available?

The maker page offers a new beta version and a previous stable version.

What does the new version require?

The maker page says the new version requires JDK 7 or later.

Is ADTool open source?

The maker page links source code for the new version on GitHub and offers source code for the previous version.

Who makes ADTool?

The page lists the Security and Trust of Software Systems at the University of Luxembourg in Esch-sur-Alzette, Luxembourg.

Facts from ADTool's own pages

Analysis: It supports quantitative bottom-up analysis of attack-defense scenarios. · satoss.uni.lu, 8 Oct 2026
Attack ranking: It can rank possible attacks for certain attribute domains. · satoss.uni.lu, 8 Oct 2026
Availability: The maker lists a new version in beta and a previous stable version, with downloadable JARs and source code. · satoss.uni.lu, 8 Oct 2026
Contact: The contact page lists Piotr Kordy at the University of Luxembourg in Esch-sur-Alzette, Luxembourg. · satoss.uni.lu, 8 Oct 2026
Contact location: The page gives the Security and Trust of Software Systems address as Belval Campus, Maison du Nombre, 6 avenue de la Fonte, L-4364 Esch-sur-Alzette, Luxembourg. · satoss.uni.lu, 7 Oct 2026
Documentation: A standalone user manual is available for download for the previous stable version. · satoss.uni.lu, 7 Oct 2026
Export and layout: It supports printing, exporting to various formats, saving models, and customizing layouts. · satoss.uni.lu, 8 Oct 2026
Headquarters: Esch-sur-Alzette, Luxembourg · satoss.uni.lu, 28 Sept 2026
Large models: Its modular display supports modeling large real-life scenarios. · satoss.uni.lu, 8 Oct 2026
Large scenarios: Modular display allows users to model large real-life scenarios. · satoss.uni.lu, 7 Oct 2026
Methodology: The tool supports the attack-defense tree methodology developed within the ATREES, TREsPASS, and ADT2P projects. · satoss.uni.lu, 7 Oct 2026
Project methodology: The tool supports attack-defense tree methodology developed within the ATREES, TREsPASS, and ADT2P projects. · satoss.uni.lu, 8 Oct 2026
Purpose: ADTool models and analyzes attack-defense scenarios represented as attack-defense trees and attack-defense terms. · satoss.uni.lu, 8 Oct 2026
Research context: The maker describes attack trees as a systematic approach to security assessment and the project as extending them to include defenders and countermeasures. · satoss.uni.lu, 8 Oct 2026
Runtime requirement: The maker says the new version requires JDK 7 or later. · satoss.uni.lu, 8 Oct 2026
Source code: The maker page links source code for the new version on GitHub and offers source code for the previous version. · satoss.uni.lu, 7 Oct 2026
Source repository: The maker links the source code to the public tahti/ADTool2 GitHub repository. · satoss.uni.lu, 8 Oct 2026
Stable package sizes: The stable version is offered as a jar with dependencies included, around 6.6 MB, or a light version without dependencies, around 1100 kB. · satoss.uni.lu, 7 Oct 2026
Tree editing: It supports creating and editing attack-defense trees and sequential attack trees. · satoss.uni.lu, 8 Oct 2026

Where ADTool stands on Freedom251

Threat Modeling Software#10 of 23