An open API service indexing awesome lists of open source software.

https://github.com/klarna-incubator/gram

Gram is Klarna's own threat model diagramming tool
https://github.com/klarna-incubator/gram

appsec cybersecurity infosec threat-modeling

Last synced: 6 months ago
JSON representation

Gram is Klarna's own threat model diagramming tool

Awesome Lists containing this project

README

        

# Gram

[![Build Status][ci-image]][ci-url]
[![License][license-image]][license-url]
[![Discord][discord-image]][discord-url]
[![Developed at Klarna][klarna-image]][klarna-url]

Gram is Klarna's own [threat model][owasp-tm] diagramming tool developed internally by Klarna's Secure Development team. It is a web app for engineers to collaboratively create threat models for their systems, providing a easy-to-understand way to document a system as a dataflow diagram with threats/controls attached.

![Screenshot](screenshot.png)

## Features ✨
* Fully featured diagramming tool specialized for threat modeling.

* Collaborative editing with multiple users over websocket

* Tightly couples to your system/asset inventory

* Automatic suggestions for threats and controls based on your tech stacks

* Review system for use by your Security Champions and to ensure quality models

* Integration for boring corporate stuff like Jira and SSO (Okta)

## Getting Started 🚀

See [Quick Start](QuickStart.md).

## How to contribute 🙋

See our guide on [contributing](CONTRIBUTING.md).

## Release History 📜

See our [changelog](CHANGELOG.md).

## Contributors 🌟



Ruel
Ruel

💻 📆
Joakim Uddholm
Joakim Uddholm

💻 📆 📢
Ivan Verevkin
Ivan Verevkin

💻
Luke Berner
Luke Berner

💻 📆
Franka
Franka

💻
Erik Båvenstrand
Erik Båvenstrand

💻
Sai Kiran Goud
Sai Kiran Goud

💻


Tyouxik
Tyouxik

💻
Klarna
Klarna

💵 💼
Gabriele
Gabriele

🔌 💻
MissMuffin
MissMuffin

🎨
Oscar Andersson
Oscar Andersson

📖
Fedor Tkachenko
Fedor Tkachenko

📖 ⚠️
Grégoire Lodi
Grégoire Lodi

💻

## License ⚖️

Copyright © 2023 Klarna Bank AB

For license details, see the [LICENSE](LICENSE) file in the root of this project.

[ci-image]: https://github.com/klarna-incubator/gram/actions/workflows/ci.yml/badge.svg?branch=master
[ci-url]: https://github.com/klarna-incubator/gram/actions?query=branch%3Amaster
[license-image]: https://img.shields.io/badge/license-Apache%202-blue?style=flat-square
[license-url]: http://www.apache.org/licenses/LICENSE-2.0
[discord-image]: https://badgen.net/badge/icon/discord?icon=discord&label
[discord-url]: https://discord.gg/8TFdB8rUfG
[klarna-image]: https://img.shields.io/badge/%20-Developed%20at%20Klarna-black?style=flat-square&labelColor=ffb3c7&logo=klarna&logoColor=black
[klarna-url]: https://klarna.github.io
[owasp-tm]: https://owasp.org/www-community/Threat_Modeling