Stride Gpt

STRIDE GPT is an AI-powered threat modelling tool that leverages Large Language Models (LLMs) to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application details, such as the application type, authentication methods, and whether the application is internet-facing or processes sensitive data. The model then generates its output based on the provided information.

Table of Contents

• Support the Project
• Features
• Enterprise Deployment
• Talk at Open Security Summit
• Changelog
• Installation
• Repository layout
• Usage
  • Interactive REPL cheat sheet
• Sample output
• Security Best Practices
• Contributing
• License

Support the Project

If you find STRIDE GPT useful, please consider supporting the project:

• ⭐ Star the repository on GitHub to help more people discover the tool
• ☕ Buy me a coffee to support continued development and maintenance

Features

• Agentic codebase analysis: Point the CLI at a codebase and get an autonomous, deep STRIDE threat model — the agent plans, explores, and synthesizes findings across subsystems
• CLI and interactive REPL: Full-featured terminal experience with tab completion, history, and real-time progress — no browser required
• Simple and user-friendly Streamlit web interface
• Generates threat models based on the STRIDE methodology
• Agentic AI support: Specialized threat modeling for agentic AI systems with OWASP Top 10 for Agentic Applications (ASI) integration
• Generative AI support: Threat modeling for GenAI applications with OWASP LLM Top 10 integration
• MITRE ATT&CK & ATLAS mapping: Threats are annotated with standardized adversary technique IDs (MITRE ATT&CK Enterprise for traditional infrastructure attacks, ATLAS for ML/LLM-specific attacks) — surfaced as columns in markdown, linked pills in HTML, and mitre_attack properties in SARIF
• Architectural pattern detection: Automatically detects RAG pipelines, multi-agent systems, code execution environments, tool ecosystems, and more from application descriptions (inspired by CSA MAESTRO)
• Embedded draw.io diagram editor: Create and edit architecture diagrams directly in STRIDE-GPT using the integrated diagrams.net editor — no external tool needed. Diagrams are parsed as XML to extract components, connections, and trust boundaries, providing significantly richer context for threat model generation than image analysis alone. The existing image upload workflow is unchanged. By default the editor loads from the hosted embed.diagrams.net; for self-hosted or air-gapped deployments, point it at your own draw.io via the STRIDE_GPT_DRAWIO_URL environment variable
• Multi-modal: Use architecture diagrams, flowcharts, etc. as inputs for threat modelling across all supported vision-capable models
• Data Flow Diagrams: Generate DFDs from your application description (or parse an uploaded DFD image), edit the Mermaid source live, and feed the confirmed diagram back into the Threat Model and Attack Tree prompts as the authoritative system model