Threat Modeling

Threat modeling↗ is a structured process, usually done during system design, for identifying potential threats, vulnerabilities, and attack paths against a system, then prioritizing which ones matter most and deciding how to address them.

By thinking like an attacker early, before code is written, teams can design in security rather than bolting it on afterward. Common frameworks include asking who might attack the system, what they'd want, and how they could realistically get it.