stride-gpt

Why we included this project

STRIDE is the classic way to work through a system's threats, but doing it properly by hand is slow, which is where this tool earns its keep. Give it the basics about your application, like what type it is, how users authenticate, and whether it sits on the internet or handles sensitive data, and it produces threat models and attack trees instead of leaving you staring at a blank page. Beyond single prompts, an agentic mode can work through a whole codebase on its own, and there's specialized analysis for agentic AI and GenAI stacks aligned with the OWASP ASI and LLM Top 10 lists. Output is flexible too: terminal users get a full CLI with an interactive REPL, while a Streamlit web UI covers everyone else, and each threat can carry MITRE ATT&CK and ATLAS technique identifiers so findings drop into existing security reporting without extra wrangling.