threat model
Identify assets, adversaries, entry points, and plausible failure paths.
Use this when A new feature changes who can access valuable data or operations.
without the term
“We're adding team sharing so users can invite others to their projects. Before building, can you think through how someone could abuse it and what we need to protect?”
with the term · How do you ask a model for threat model?
Threat-model this feature’s trust boundaries. Identify concrete misuse paths, choose controls, and turn the highest-risk paths into tests.
What is threat model?
List what is valuable, who might misuse it, including other signed-in customers, how they could reach it, and what controls and tests block each path.
Why does threat model matter when vibe coding?
Generic security middleware may miss the actual trust boundary.
How do you do threat model?
Describe the sensitive operation and the least-privileged caller who could misuse it.
What goes wrong with threat model?
Listing only anonymous attackers while ignoring another authenticated customer.