Threat Modeling Glossary Definition

Threat Modeling is an application-security concept used to find, prevent, or manage security weaknesses in software and development practices.

Threat Modeling is a DevOps security concept that integrates security, compliance, and risk controls into software delivery and operational workflows.

Threat Modeling appears in secure-development guidance, code reviews, application-security testing, vulnerability reports, and software supply-chain reviews. It is retained here because professionals may encounter the term in NIST guidance, security reviews, or technical documentation and need a concise public explanation.

Security, development, and operations teams use this concept to make security checks continuous instead of treating them as a late-stage review.

Related concepts include DevOps, DevSecOps, Security Automation and Software Supply Chain.

Additional Resource: OWASP DevSecOps Guideline.