
An interactive walkthrough of the Shostack threat modelling framework applied to a real-world web server scenario - then extended into four live attack simulations.
🔒 Progress is stored in your browser only - never sent to any server.
Step 1 of 4 · System Definition
Click a step above, or open the workspace to continue.

Erwin's Briefing
Tactical AI Guide · Step 1
Mapping 4 components. Every surface is a place a fox can sniff. Move to STRIDE when ready.
Interactive Exercise
Practice classifying real-world threats across 3 scenarios. Earn your rank.