https://github.com/iriusrisk/startleft

StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different sources such as IaC files, diagrams or projects exported from Threat Modelling tools.
https://github.com/iriusrisk/startleft

cloudformation cybersecurity iac lucidcharts microsoft-threat-modeling-tool microsoft-visio open-source python3 terraform terraform-graph terraform-plans threat-modeling

Last synced: 3 months ago
JSON representation

StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different sources such as IaC files, diagrams or projects exported from Threat Modelling tools.

• Host: GitHub
• URL: https://github.com/iriusrisk/startleft
• Owner: iriusrisk
• License: apache-2.0
• Created: 2021-07-25T21:59:02.000Z (almost 5 years ago)
• Default Branch: main
• Last Pushed: 2025-11-25T14:07:56.000Z (7 months ago)
• Last Synced: 2025-11-28T15:33:09.409Z (7 months ago)
• Topics: cloudformation, cybersecurity, iac, lucidcharts, microsoft-threat-modeling-tool, microsoft-visio, open-source, python3, terraform, terraform-graph, terraform-plans, threat-modeling
• Language: Python
• Homepage: https://iriusrisk.github.io/startleft/
• Size: 14.5 MB
• Stars: 52
• Watchers: 2
• Forks: 15
• Open Issues: 7
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# StartLeft

![Supported python versions](https://img.shields.io/badge/python-3.9%20|%203.10%20|%203.11-blue)

![Software Quality Assurance](https://github.com/iriusrisk/startleft/actions/workflows/qa.yml/badge.svg)

![Semgrep scan with owasp-top-ten & cwe-top-25](https://github.com/iriusrisk/startleft/actions/workflows/semgrep.yml/badge.svg)

![Documentation](https://github.com/iriusrisk/startleft/actions/workflows/documentation.yml/badge.svg)

**StartLeft** is an automation tool for **generating Threat Models** written in the 

[Open Threat Model (OTM)](http://iriusrisk.github.io/startleft/Open-Threat-Model-%28OTM%29/)

format **from a variety of different sources** such as IaC files, diagrams or projects exported from

Threat Modeling tools.

## Documentation

All you need to know about StartLeft is available in our [documentation](http://iriusrisk.github.io/startleft).

## Change Log

All release notes are documented in [Releases Section](https://github.com/iriusrisk/startleft/releases).