Threat_Model_Examples: Browse Threat Modeling References

Overview

Threat_Model_Examples is a categorized directory of external threat models, analyses, and guidance. It addresses a practical gap for security professionals, developers, and researchers: seeing concrete examples of threat modeling outcomes rather than relying only on general methodologies.

Use it to find a starting point or compare how different technologies and domains approach security risks. The repository links to resources maintained elsewhere; it is a reference collection, not a threat modeling tool or a single, consistent model.

Key Features

• Groups references by areas including web and API, cloud and containers, mobile and IoT, enterprise, and specialized systems.
• Includes examples covering technologies such as OAuth 2.0, Kubernetes, Docker, and cloud storage.
• Provides references for AI and generative AI security, including workload and agentic AI resources.
• Links to different kinds of material, including threat models, threat analyses, hardening guidance, checklists, and diagrams.
• Includes examples for specialized environments such as medical devices, connected cars, and EV charging infrastructure.
• Invites community contributions through pull requests.

Use Cases

• A developer preparing a threat model can find examples for a similar technology before documenting system-specific risks.
• A security professional can compare references across cloud, container, or identity systems when reviewing a design.
• A researcher or educator can use the collection to find case studies and discussion material across security domains.
• A team assessing an AI, IoT, or specialized system can locate relevant external guidance to inform its own analysis.

Getting Started

Browse the repository README and follow the links for the technology or domain you are investigating. No installation is described.

Alternatives

• awesome-threat-modelling: It catalogs threat modeling books, courses, tools, and other learning resources, while Threat_Model_Examples focuses on example threat models and guidance.

Considerations

• The examples are external resources, so their format, scope, quality, and availability may vary.
• The collection is illustrative. Its entries are not a substitute for modeling the specific assets, architecture, and risks of your own system.
• The README does not describe a unified methodology or indicate that every listed resource is maintained by this repository.
• The README states that the repository is licensed under MIT; check individual linked resources for their own terms.