owasp

Threat Dagon is an open source threat modeling tool and is an official OWASP project. It is used to draw threat modeling diagrams and to list threats for elements in the diagram

A polyglot tool and a library for generating various Bill of Materials in CycloneDX specification.