Dethernety vs ThreatTree
Dethernety
dether.netThreatTree
threattree.comSide by side
| Figure | Dethernety | ThreatTree |
|---|---|---|
| Price from | Free | $29/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 5 | 3 |
| Spec score · Threat Modeling Software | 8.7 (#1) | 7.7 (#9) |
| Integrations | Issue modules can connect with external trackers and sync remediation issues bidirectionally. | The Enterprise plan lists custom Jira and ServiceNow ticketing, Terraform/OpenAPI architecture import, Splunk and Microsoft Sentinel feeds, GRC platform sync, and Confluence/Notion embeds. |
| Intended users | The maker describes the GUI for security teams and the CLI for DevOps teams, with the CLI supporting CI/CD automation and threat-model-as-code. | ThreatTree describes itself as a browser-based tool for security teams ranging from solo consultants to CISO organizations. |
| Purpose | Dethernety is a graph-native threat modeling platform for building and analyzing architecture models. | ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees. |
| Risk analysis | It analyzes attack paths, blast radius, and residual risk using the context of the full architecture graph. | Likelihood-by-impact scoring automatically generates a ranked risk register across trees in a forest. |
| Support | The Enterprise edition includes dedicated support and deployment help. | The pricing page lists priority support with Pro and dedicated support and an SLA with Enterprise. |
Plans
Dethernety
- Open SourceFree
- BYODtPriced on request
- BYODt Team — 5 or 20 seatsPriced on request
- EnterprisePriced on request
- Hosted SaaSPriced on request
In their own words
Dethernety
Dethernety is an open-source threat modeling platform that represents architecture as a graph for building and analyzing system models. Teams can create and explore models in a browser, from code, or from reports. Analysis follows the architecture graph to examine attack paths, blast radius, and residual risk. Exposures map to MITRE ATT&CK techniques and controls to D3FEND countermeasures for coverage-gap analysis. The platform has JavaScript and TypeScript modules for design, analysis, and issues, plus an OPA/Rego policy engine. Issue modules can connect to external trackers and synchronize remediation work in both directions. Users host their own graph database, with Neo4j and Memgraph listed as options. Analysis can use deterministic queries, single-agent AI acceleration, or multi-agent LangGraph workflows. The open-source edition runs on user-controlled infrastructure and can operate fully offline without cloud calls. The maker says models, data, and findings remain on that infrastructure, and that there is no background telemetry or usage-data transmission. The GUI is aimed at security teams; the CLI supports DevOps, CI/CD automation, and threat-model-as-code. Open Source is free; Enterprise is self-hosted with contract pricing and dedicated support.
ThreatTree
ThreatTree is a browser-based tool for organizing threat models into forests of Data Flow Diagrams and Attack Trees. It scores risks by likelihood and impact, then generates a ranked risk register across the trees in a forest. Threats can be tagged with STRIDE, LINDDUN, OWASP Top 10, CAPEC, and MITRE ATT&CK; mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2. Teams can invite members with owner, editor, or viewer roles. Reports are available as PDFs, with JSON and STIX 2.1 exports. Optional per-forest AES-256-GCM encryption is available on every plan, including Free. ThreatTree says data is stored on UK servers, connections use TLS 1.2 or higher, and encrypted database backups are taken daily and retained for 30 days. The Free plan costs nothing and has limits on forests and trees. Pro costs $29 a month per user, billed monthly; Enterprise pricing is by quote.