The cheapest security flaw to fix is the one you find before it is built. Threat modeling is a structured way to ask how a product or system could be attacked, and to design the answer in from the start.
Who it is for
Developers, architects, product managers and security teams. No security background is needed for the core modules.
Format
1 to 5 days, on-site or online, for up to 10 people. We can run the course on one of your own products or systems, so your team leaves with a real threat model as well as the skill.
Modules
- What threat modeling is and when to do it
- Mapping a system’s data flows and trust boundaries
- Finding threats with STRIDE and attack trees
- Using threat intelligence to focus on likely attackers
- Rating and prioritizing threats
- Turning threats into design decisions and tests
- Making threat modeling part of how your team builds
What you will be able to do
- Map a product or system and find where it could be attacked
- Prioritize threats by real risk, not by gut feeling
- Turn the results into design changes your developers can act on
- Run threat modeling sessions without outside help
Pricing
- Priced per team
- From £1,750 a day for up to 4 people
- From £2,750 a day for up to 10 people1
- Prices exclude VAT
- See pricing for every option
-
Discounts: 15% off for businesses based on the Isle of Man and 10% off for retainer clients, up to 25% combined. Micro businesses with 4 or fewer employees get heavily discounted pricing, so contact us for details. See the terms. ↩︎