owasp

Threat Dagon is an open source threat modeling tool and is an official OWASP project. It is used to draw threat modeling diagrams and to list threats for elements in the diagram

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

A polyglot tool and a library for generating various Bill of Materials in CycloneDX specification.