OWASP/pytm

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1156 stars · 228 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

pytm is a Pythonic framework from OWASP for threat modeling systems as code. Developers define their architecture in Python and it automatically generates data flow diagrams, sequence diagrams, and relevant threats.

Use cases

• automate threat modeling for my system architecture
• generate a data flow diagram from code
• find threats in my design before implementation
• shift security threat modeling left in the SDLC
• generate sequence diagrams for my architecture
• do threat modeling as part of CI

When to choose

• you want developer-centric, code-based threat modeling instead of manual diagrams
• you need automated DFD, sequence diagram, and threat report generation
• you want to integrate threat modeling into CI/CD pipelines

When to avoid

• you need a GUI-based visual threat modeling tool
• you work on Windows natively without WSL
• you cannot install Java, Graphviz, and PlantUML dependencies

Facets

framework · maturity active

security developer-tools documentation cli security developer-tools python cli threat-modeling data-flow-diagram sequence-diagram owasp shift-left-security secure-development automation linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="OWASP/pytm")