Amyntor

Draw your system as a data flow, set trust boundaries and let Amyntor derive the threats with STRIDE. On iPhone, iPad and Mac, no account needed.

Amyntor is a threat modeling app for iPhone, iPad and Mac. You draw your system as a data flow diagram: processes, data stores, external entities, the flows between them and the trust boundaries they cross. From that, Amyntor derives the threats that fit your design using the STRIDE method: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service and Elevation of Privilege.

Getting started is easy. Pick a domain and start with a diagram, a questionnaire, text or an empty model. On the canvas you work with touch, stylus, mouse or keyboard. Boxes and arrows sketched with the stylus become elements and flows.

What you can do:

• set properties on elements and flows, such as encrypted, authenticated or reachable from the internet. The threat list follows these answers.
• prioritize and filter threats and work through them with state and reason
• read the history of each threat: state, reason and rating changes with time, with your name if you set one
• assess risk with several methods, baseline and residual risk kept apart, accepted risks with a reason
• link safeguards and track their state, plus your own Safeguard Collection for all models
• record protected data with its sensitivity and see where it flows
• build attack trees and spot the easiest attack path
• look at privacy threats with LINDDUN
• check safeguards against requirements of common security standards and the EU Cyber Resilience Act
• create starter diagrams from infrastructure and API descriptions
• match software bills of materials (SBOM) against a vulnerability list you bring yourself
• compare two versions of a model
• export as .tm7, as a report with images, as CSV, JSON or Markdown, as PNG, PDF or SVG, and as a ticket file to import into your issue tracker

The domain supplies building blocks and threat rules, extra rules add to them. Every threat comes with review questions and recommendations. You can import your own rule packs.

Exchange: Amyntor reads and writes threat models in the .tm7 format and imports templates in the .tb7 format. Content Amyntor does not display stays in the file when you save. For a complete backup with everything beyond .tm7 there is the Amyntor archive.

Your models stay with you. Amyntor needs no account and has no server of its own. Models are stored on your device, on iPhone and iPad also encrypted by the system's data protection. They are deliberately left out of backups, so export important models or save an archive wherever you like. To work on a model with others, share just that model through your iCloud. Invited people edit it at the same time or offline, or they can only view it; Amyntor merges the versions. You enter your name in Settings if you want to. It then appears in the history and travels with files and shared models.

On the Mac you get menus and keyboard shortcuts for desk work, on iPad the full canvas with stylus.

Generated threats and suggestions are a working aid. They do not replace an expert review of your system.

Requires iOS 27, iPadOS 27 or macOS 27.

Legal notice: https://www.mobilebox-consulting.de/impressum-site-notice/ Privacy: https://www.mobilebox-consulting.de/datenschutzerkl%C3%A4rung-privacy-policy/