No. 9 of 22 ·Threat Modeling Software

ThreatForge

Web · Windows · Mac · Linux

Freedom report

Two barsScore 5.4

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely4 of 6 device platforms
DocumentedThinly documented

ThreatForge is ranked #9 of 22 in threat modeling software on Freedom251. It runs on Linux, macOS, Web, Windows. There is a free plan.

ThreatForge plans and pricing

All plans

Threat Forge Free Free and open source under Apache 2.0 · no account required · full application available to everyone exitzerolabs.com · 7 Oct 2026

Compared on threat modeling software

Free plan: Yes
Templates and frameworks: Yes
Modeling methods: stride
Deployment: cloud

Best ThreatForge alternatives

See all 20

Two bars CAIRIS Free tier No. 1Free6.6 Two bars OWASP Threat Dragon Free tier No. 2Free6.6 One bar IriusRisk Free tier No. 3Free6.4 One bar ThreatModeler Nexus Free tier No. 4$333.33/mo6.4 One bar ThreatOpus Free tier No. 5£129.99/mo6.4 One bar ThreatTree Free tier No. 6$29/mo6.4

The record

Product: Threat Forge is an open-source desktop app for threat modeling with visual diagrams, automated STRIDE analysis, and AI-assisted threat discovery.
Diagrams: Its drag-and-drop canvas has 44 typed components across 10 categories, with trust boundaries, text annotations, and automatically routed connections.
STRIDE: The built-in rule engine generates threats from element types and data-flow patterns and works fully offline.
AI analysis: The app supports chatting with Claude or GPT about a threat model and can suggest threats, propose mitigations, and answer security questions; it uses BYOK.
File format: Threat models use human-readable, git-diffable YAML files that can be reviewed in pull requests and versioned over time.
Templates: Six templates cover Cloud Microservices, E-Commerce, Mobile Banking, SaaS Platform, IoT Smart Building, and Healthcare System.
Platforms: The desktop app runs on macOS, Windows, and Linux.
Privacy: The maker says there is no telemetry and threat models stay on the user's machine.
Account: No account is required to get started.
License: The application is released under the Apache 2.0 license, with no freemium upsells or enterprise-only features.
Download size: The maker describes the download as approximately 10 MB.
Intended users: The maker positions Threat Forge as a developer-friendly alternative for teams seeking threat modeling without an enterprise procurement cycle.
Price from: Free

Where it ranks on Freedom251

Best Threat Modeling Software in 2026#9 of 22

Is ThreatForge yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThreatForge

Sources

exitzerolabs.com/products/threat-forge· checked 7 Oct 2026