PocketTM

Welcome to PocketTM

App Summary

At the grocery store, do you need to perform a Threat Model? No problem, PocketTM is here to help you. Want to save time while still covering everything you need as part of performing a Threat Model? Introducing PocketTM, an iOS application designed to guide security professionals through comprehensive security threat assessments using Microsoft's STRIDE framework. The app provides a structured approach to identifying potential security vulnerabilities during system design phases, transforming complex threat modeling into an accessible, step-by-step process.

Pocket Threat Model (PocketTM) is a comprehensive threat modeling companion for security professionals, developers, and architects. Browse and assess threats using the industry-standard STRIDE framework plus a dedicated AI & Machine Learning section covering today's most critical AI risks. Select relevant threats, explore guided discovery questions, review mapped mitigation strategies, and generate shareable HTML reports — all from your pocket.

STRIDE Framework — Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

AI Threat Modeling — Prompt Injection, Training Data Poisoning, Adversarial Attacks, AI Agent Risks, Model Theft, Hallucination & Output Integrity, Supply Chain, Bias & Ethics, Sensitive Data Exposure, Shadow AI, AI Social Engineering, Vector & Embedding Attacks, Fine-Tuning Subversion, Multimodal Attacks, AI Denial of Service

702 discovery questions · 101 mitigation strategies · 49 threat risks · Shareable HTML reports