How we threat model

This post details the process and benefits of threat modeling at GitHub. It explains what threat modeling is, outlines the process (deciding when to threat model, building the model using tools like Microsoft's Threat Modeling Tool or OWASP's Threat Dragon, and reviewing the model using frameworks like STRIDE), and highlights key learnings such as system-wide security improvements, proactive design guidance, and improved communication between security and engineering teams. It emphasizes merging threat modeling into existing development lifecycle processes, ensuring preparedness, using defined mechanisms for risk assessment, and leaving with specific action items.