The First-Ever State of Threat Modeling Report is Here

Announcements
1

We’re thrilled to share the release of the inaugural State of Threat Modeling Report – the first vendor-independent study dedicated entirely to how organizations are practicing threat modeling today.

Inside, you’ll find insights on:

  • How companies of different sizes and industries approach threat modeling
  • The top challenges teams face in threat modeling
  • The most aligned methodology and the current state of tooling

:backhand_index_pointing_right: Learn more or download the full report here

:backhand_index_pointing_right: Watch back the release webinar

A huge shoutout to the authors and our community!

The report was authored by @Dave and @rewtd, our very own community members, and made possible by all of you who participated in the SOTM survey this spring (yes…that 50+ question survey that probably took you an hour to finish!). Your contributions helped make history - threat modeling finally has its own independent industry report.

And now…we’d love to hear your thoughts:

  • What findings resonate most with your experience?
  • Did anything surprise you?
  • How do you see these trends influencing your work?

Use this thread to share your takeaways, start a discussion, and connect with others who are shaping the future of threat modeling.

6 Likes
2

Congratulations, @Dave, @rewtd and @shuning on launching the report! :partying_face:

Seems like there’s a lot of insights in there and I will need some time to understand them.

I like how you highlight the learnings and key takeaways.

Also, looks beautiful! :heart_eyes:

I think 73 complete responses is good given that the poll was quite extensive. I think there is some selection bias in there, when the participants were mostly recruited from TMC followers. It’s interesting to see how everyone threat models!

Thank you for your work!

1 Like
3

So impressed by the effort of Dave and Grant to pull this together. It looked like a lot of data to peruse and repurpose into meaningful, and easy-to-understand visuals. Kudos Shuning and all. I hope this is beneficial, especially for those who are new to threat modeling and want to read a round up! :partying_face:

1 Like
4

A big thank you to the authors for putting together such a comprehensive and community-driven report! The diverse approaches and challenges highlighted in the survey can definitely serve as valuable pointers for those looking to mature their own practices or for those looking to start one.

Do we have a recording from the session held today on 9/4?

1 Like
5

Thank you so much @hewerlin @ClaireAA @Sukanya_Sukhavasi for the kind words! Nothing makes us happier than hearing the report was valuable to you! :raising_hands:

@Sukanya_Sukhavasi - Yes! The recording has just been published, check it out here Recap: State of Threat Modeling 2024-2025 Release Webinar

1 Like