Some thoughts on threat modeling tooling:
Liked the post.
I wonder: In your mental model, do you distinguish between methods and tools?
A method is a set of steps, each of which is one or more tasks, which is a thing that can be accomplished in one session with defined inputs and outputs.
1 Like
I know the post is mostly about LLMs and tooling, but I think an interesting area that I would like to hear stories from others about is that transition between general purpose, small team and enterprise tooling (without implying the transition is always in that order). I’m curious what the driving factors for change were, and whether the effort to change was worth it.
For security tooling in general I think it is interesting to understand when teams decide they want to transition to enterprise tooling. It’s especially interesting for threat modeling tools as they have different scaling challenges (compared to say SAST tools).
1 Like