Scope
Define the system, business purpose, trust boundaries, evidence sources, review roles, and assessment questions.
Threat Blueprints
Keep architecture decisions connected to current evidence.
Threat Blueprints combines versioned architecture, reviewed proposals and pinned asset context. The managed assessment service models trust boundaries, components, and flows; applies deterministic STRIDE review and TFRM recommendations and optional advisory AI narrative; analyzes scoped attack paths; and delivers a point-in-time customer assessment.
Assessment boundary
Scope and control remain visible.
The Threat Blueprints service delivers reviewed architecture assessments, not penetration tests, breach predictions, or autonomous design changes. STRIDE remains deterministic; AI-assisted guidance remains advisory.
Discuss the operating boundaryPublished Threat Blueprint
Model
Build or import components, zones, typed data and access flows, and the architecture context required for review.
Analyze
Run the reproducible STRIDE baseline, review deterministic TFRM recommendations and optional advisory AI narrative, and enumerate scoped attack-path findings.
Review and remediate
Review every current finding, assign owners, document mitigations, and link supporting operational evidence.
Publish
Approve the current architecture model and deliver a customer-safe point-in-time snapshot of the model, paths, findings, and recommendations.
Customer outcome
Evidence that can move into the next decision.
The service retains the agreed scope, review state, ownership, limitations, and follow-through instead of ending at an isolated deliverable.
Reviewable architecture model
Trust boundaries, components, differentiated flows, provenance, and current architecture state.
Resilience finding register
Reviewed STRIDE, resilience, attack-path, owner, remediation, due-date, and evidence context.
Published assessment
A customer-safe point-in-time snapshot separated from the editable analyst workspace.
Blueprint context
Keep the architecture behind the decision.
Model components, trust boundaries and flows. Preserve the exact architecture and asset revisions used in a review.
- Immutable topology revisions and reviewed change proposals
- Classified detection, telemetry, architecture and control gaps
- Deterministic STRIDE and TFRM analysis; advisory AI narrative
Threat Blueprint canvas
Architecture Modernization
Turn architecture evidence into a clear next step.
Review an application snapshot, see resources and identities together, and turn evidence gaps into focused investigation and modernization work.
See the system behind the decision.
Explore resources, application and execution roles, and configuration relationships. Keep missing evidence visible beside the model.
Explore current architectureKnow what to investigate next.
Generate deterministic hunt suggestions with scope, investigation steps and telemetry requirements. Start without an AI request.
Explore guided investigationsReview the path to a proposed change.
Use optional Forge assistance to compare proposed targets and transition stages, with implementation, validation and rollback guidance.
Explore modernization planningStart with the workflow
Discuss a Threat Blueprint assessment.
Bring the system boundary, architecture evidence, reviewers, and resilience questions. We will map the modeling, review, remediation, and publication scope.