Fragile is an open-source agile threat modeling toolkit that generates rule-based risk analysis and outputs reports to mitigate risks in data assets and technical assets.
- Fragile is an open-source agile threat modeling toolkit that generates rule-based risk analysis and outputs reports to mitigate risks in data assets and technical assets
- It uses a YAML file to create a threat model and generates various outputs such as reports, JSON, and REST API
- It has over 40 risk rules that can analyze the graph precisely leading to less false positives
- It has a plug-in interface that allows users to add custom risk rules to extend the tool's functionality
- It has a model macro concept that automates certain changes to the model in a wizard-style question and answer format
- It is released as open-source software under the MIT license and runs offline as a command-line interface or as a web server with a REST API