TrustStencil: Threat Model

TrustStencil is a private threat-modeling workbench for software teams, security engineers, architects, students, and technical reviewers who need structure without an enterprise platform. Model actors, services, processes, stores, assets, trust zones, and directed data flows. TrustStencil derives focused prompts from recorded boundary crossings, ranks threats with visible likelihood and impact, traces directed paths from external actors to critical nodes, and keeps mitigation, owner, disposition, and evidence together. KEY FEATURES - Native trust-boundary and data-flow map - Actor, process, service, store, and external-system nodes - STRIDE threat register with visible risk score - Architecture-derived authentication, encryption, and availability prompts - Directed attack-path screen to critical assets - Mitigation, owner, status, evidence, assumptions, and scope - Local PDF and JSON export - Complete hardware-free review model - 340 original offline security architecture plates - No account, ads, analytics, tracking, IAP, or subscription TrustStencil structures threat-model evidence; it does not prove a system secure. Validate architecture, assets, assumptions, controls, test evidence, and residual risk with the accountable security team.