Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 30 Sept 2026

ThreatTree

Ch 076.9of 22 Threat Modeling Software
  1. 1Runs onAPI, Web
  2. 2CostsFree plan · paid from $29/mo
  3. 3Attack-path analysisYes
  4. 4Risk prioritizationYes
  5. 5Collaborative reviewYes
  6. 6Templates and frameworksYes
  7. 7Modeling methodsmultiple
  8. 8Deploymentcloud
8 lines stated Written from the maker's own pages: threattree.com
Visit site Alternatives
The ThreatTree homepage

Overview

ThreatTree is ranked #7 of 22 in threat modeling software on Specifiction. It runs on API, Web. There is a free plan. Paid plans start at $29/mo.

ThreatTree plans and pricing

All plans
Free Free Up to 3 forests · Up to 3 DFDs per forest · Up to 5 Attack Trees per DFD threattree.com · 30 Sept 2026
Pro $29/mo per user, monthly Unlimited forests & trees · Team collaboration · Full report generation · Priority support threattree.com · 30 Sept 2026
Enterprise Not published Quote on request; pricing depends on org size & requirements SSO/SAML · Custom roles and data retention · Multi-org management · Custom integrations · Dedicated/VPC deployment option · Dedicated support & SLA threattree.com · 30 Sept 2026

Compared on threat modeling software

Free plan
Yesthreattree.com
Attack-path analysis
Yesthreattree.com
Risk prioritization
Yesthreattree.com
Collaborative review
Yesthreattree.com
Templates and frameworks
Yesthreattree.com
Modeling methods
multiplethreattree.com
Deployment
cloudthreattree.com

Facts

Purpose
ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees.threattree.com · 30 Sept 2026
Risk analysis
Likelihood-by-impact scoring automatically generates a ranked risk register across trees in a forest.threattree.com · 30 Sept 2026
Frameworks
Threats can be tagged with STRIDE, LINDDUN, OWASP Top 10, CAPEC, and MITRE ATT&CK.threattree.com · 30 Sept 2026
Controls
Mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2.threattree.com · 30 Sept 2026
Reports and exports
ThreatTree offers PDF reports and supports JSON and STIX 2.1 exports.threattree.com · 30 Sept 2026
Collaboration
The product supports owner, editor, and viewer roles for invited team members.threattree.com · 30 Sept 2026
Encryption
Optional per-forest AES-256-GCM encryption is available on every plan, including Free.threattree.com · 30 Sept 2026
Hosting and transport
ThreatTree says data is stored on UK servers and connections use TLS 1.2 or higher.threattree.com · 30 Sept 2026
Backups
Database backups are taken daily, retained for 30 days, encrypted, and stored separately from the primary data store.threattree.com · 30 Sept 2026
Certification
ThreatTree says it is not currently SOC 2 or ISO 27001 certified and that formal certification is on its roadmap.threattree.com · 30 Sept 2026
Integrations
The Enterprise plan lists custom Jira and ServiceNow ticketing, Terraform/OpenAPI architecture import, Splunk and Microsoft Sentinel feeds, GRC platform sync, and Confluence/Notion embeds.threattree.com · 30 Sept 2026
Support
The pricing page lists priority support with Pro and dedicated support and an SLA with Enterprise.threattree.com · 30 Sept 2026
Intended users
ThreatTree describes itself as a browser-based tool for security teams ranging from solo consultants to CISO organizations.threattree.com · 30 Sept 2026
Maker location
The maker says its team is based in the United Kingdom.threattree.com · 30 Sept 2026

Company

Headquarters
United Kingdomthreattree.com · 28 Sept 2026

Best ThreatTree alternatives

See all 20
All accessCh 01 CAIRIS Free planAPILinux Free to start7.5 All accessCh 02 OWASP Threat Dragon Free planLinuxMac Free to start7.4 All accessCh 03 ThreatOpus Free planFree trialAPI from £129.99/mo7.4 All accessCh 04 AWS Threat Composer APIBrowser 7.2 All accessCh 05 ThreatForge Free planLinuxMac Free to start7.2 All accessCh 06 ThreatModeler Nexus Free planAPIself-hosted from $333.33/mo7.1

Where it ranks on Specifiction

Is ThreatTree yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThreatTree

Sources