Adam Shostack · 4-Question Model

Threat Modelling Lab

An interactive walkthrough of the Shostack threat modelling framework applied to a real-world web server scenario - then extended into four live attack simulations.

🔒 Progress is stored in your browser only - never sent to any server.

Step 1 of 4 · System Definition

Click a step above, or open the workspace to continue.

Erwin

Erwin's Briefing

Tactical AI Guide · Step 1

Mapping 4 components. Every surface is a place a fox can sniff. Move to STRIDE when ready.

Components4/4
Active threats0
Controls applied0
100% Onshore Australian IntelligenceASD ISM & Essential Eight AlignedZero External Data Exfiltration
🎯

Interactive Exercise

STRIDE Model Builder

Practice classifying real-world threats across 3 scenarios. Earn your rank.

Start Exercise
Feisty Fox Logo
Feisty Fox Security

© 2026 Feisty Fox Security. Internal reference only.