# Meet ThreatPad!

**URL:** https://threatmodelingconnect.discourse.group/t/meet-threatpad/741
**Category:** Techniques & Tooling
**Created:** [December 31, 2024, 7:41pm UTC](https://threatmodelingconnect.discourse.group/t/meet-threatpad/741 "2024-12-31T19:41:12Z")
**Posts on this page:** 1
**Showing post:** 24

<div class="post-metadata">

### Author: ![hewerlin](https://sea2.discourse-cdn.com/flex002/user_avatar/threatmodelingconnect.discourse.group/hewerlin/32/67_2.png) [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)
#### Post date: [October 14, 2025, 7:33pm UTC](https://threatmodelingconnect.discourse.group/t/meet-threatpad/741/24 "2025-10-14T19:33:58Z")

</div>

# Should I add Effective / Expensive feature?

I’m experimenting with effective / expensive widgets when editing mitigations:

 ![Effective / Expensive editors when editing mitigations](https://us1.discourse-cdn.com/flex002/uploads/threatmodelingconnect1/original/1X/1b8661e59fb486515a4363d31fb9d1ed9df758fb.png)

Effective has ? 🤷🏼‍♂️ / low 🛡 / medium 🛡🛡 / high 🛡🛡🛡. (What’s better emojis? I started with 💪 but it requires skin colors…)  
Expensive has ? 🤷🏼‍♂️ / low 💰 / medium 💰💰 / high 💰💰💰. (Also not the perfect emoji, because not all expense is money…)

Pro: Educates that feasibility and costs matter.

Pro: Educates that not all protection is 100%.

Pro: Educates that some mitigations have good ROI.

Contra: With the words of Github, “Anything added dilutes everything else.”

❓ **Should I merge the feature?**

## Context

- Threatpad already has a style for threats and mitigation which can be ✅ done / ⭐ favorite / normal style / 🗑 rejected. This educates about [propose-then-choose flow](https://threatmodelingconnect.discourse.group/t/meet-threatpad/741/6) and that only done mitigation really counts. It’s only visible when editing.
- Threatpad already has “How likely?” / “How bad?” which can be ? 🤷🏼‍♂️ / low 😴 / medium 😐😐 / high 😱😱😱. This educates about qualitative risk assessment. It is already shown in the threat view.
- All the select features are designed so that they don’t annoy you when you don’t use them.

---

_[View the full topic](https://threatmodelingconnect.discourse.group/t/meet-threatpad/741)._