threat-modeling

STRIDE (default) or PASTA threat modeling. Decomposes system, identifies trust boundaries, enumerates threats per element systematically (Spoofing / Tampering / Repudiation / Information-disclosure / DoS / Elevation-of-privilege), scores likelihood × impact, maps to mitigations. Optional attack trees. Residual risk accounting. Mermaid diagrams with optional PNG export.