2026-02 – Present
ThreatForge
An open-source threat modeling tool with models you can review in Git.
I designed and built ThreatForge, a desktop tool for data-flow diagrams and STRIDE threat analysis.
A model the team can review
Models are saved as readable YAML, so changes can live beside the system’s code and appear in pull requests. An importer converts existing Microsoft Threat Modeling Tool files.
Rules first, AI for context
A Rust engine handles deterministic STRIDE analysis. Optional AI helps explain threats and draft mitigations, using the user’s own provider key. React handles the canvas; Rust owns files, validation, and desktop key storage.
I owned product direction, implementation, and releases for macOS, Windows, and Linux. The project is open source under Apache-2.0.