TMC’s Top 5 Threat Modeling Resources of 2025
Our community is passionate about sharing knowledge, exchanging best practices, and helping each other grow. In 2025, we collectively published over 100 resources– from talks and reports to threat models– all created by practitioners on the front lines and grounded in real-world experience.
Here’s a look at the top five community favorites that were viewed, downloaded, or watched the most:
State of Threat Modeling Report 2024-25
The first-ever community-led, vendor-independent State of Threat Modeling (SOTM) report is here! Authored by two incredible leaders in our community, Dave Soldera and Grant Ongers, it provides a real-world view of threat modeling practices, challenges, and emerging trends, based on the insights from 60 organizations worldwide, offering a data-driven benchmark that never existed before.
Want to shape the next report? The SOTM 2025-26 survey is open–share your experience and help guide the next edition.
TMC Hackathon 2025 Winning Threat Model
Every spring, the TMC Global Threat Modeling Hackathon brings together threat modeling pros worldwide for a three-week challenge. This year, 55 teams collaborated to model the risks of an autonomous electric vehicle (EV). The winning team excelled at analyzing critical components like Autonomous Driving Systems, Backend Cloud Infrastructure, and customer data privacy.
Check out the champion model →
Threat Modeling Lab 'Security Threat Modeling Workshop'
How do you teach threat modeling at scale? This hands-on workshop by Chris Romeo, walks participants through real-world exercises: reviewing data flow diagrams, identifying threats, proposing mitigations, and sharing results. Perfect for security teams, CISOs, or anyone looking to build threat modeling skills across their organization.
Developing a ‘Threat Modeling Mindset’ Workshop
Threat modeling is a way of thinking about what can go wrong and how to prevent it. In this session, Robert Hurlbut, Principal Product Security Architect at Toreon, teaches practical strategies to develop a Threat Modeling Mindset in four steps based on the classic four-question framework by Adam Shostack.
Threat Modeling & AI: Create advanced attack trees with this AI-powered threat modeling tool
Explore a new AI-powered threat modeling tool built by community member Audrey Long, a senior security engineer at Microsoft. Audrey’s tool streamlines identifying and analyzing threats using advanced language processing and integrates with Azure services to deliver comprehensive threat models One highlight: it generates advanced attack trees, which Audrey showcased at the TMC Hackathon last year. Judges called it ‘the best attack tree ever seen in decades of threat modeling.’