Precogly¶
The open-source alternative to commercial threat modeling platforms¶
Open-source threat modeling tools lack enterprise features. Commercial tools come with heavy price tags and vendor lock-in. Precogly bridges this gap and democratizes threat modeling for every organization in the world.
Key Features¶
- Import and export TM-BOM style JSON files — improves interoperability with other threat modeling platforms
- Collaborative workspaces — team collaboration for threat modeling programs
- Advanced DFD editor — nested components, trust zones with trust boundaries, and more
- Community library packs — links to MITRE ATT&CK, CAPEC, LINDDUN, STRIDE, and other taxonomies for high-quality threat models
Who is Precogly for?¶
- Security architects looking to scale threat modeling across their organizations
- Security engineers who need a well-architected foundation for AI-powered threat modeling assistants
- Threat modeling consultants and trainers looking for a platform that supports reference images, team collaboration, and structured programs
- Compliance professionals looking to link threat modeling with standards like ASVS or regulations like CRA and DORA
How is Precogly different?¶
- Compliance-aware — built-in traceability to DORA, CRA, ASVS, NIST CSF, SOC 2, and more
- Structured library packs — curated packs with components, threats, countermeasures, and taxonomy links
- AI-agent ready architecture — a clean REST API with full OpenAPI docs
- Pack ecosystem — community and official packs for AWS, Azure, GCP, banking, and compliance frameworks
Quick Start¶
Open http://localhost:5173 and log in with admin@precogly.dev / admin123.
Tech Stack¶
| Layer | Technology |
|---|---|
| Frontend | React 19, TypeScript, Tailwind CSS, shadcn/ui, React Flow |
| Backend | Django 5.1, Django REST Framework, PostgreSQL 16 |
| Infrastructure | Docker, nginx (production) |
Next Steps¶
- Installation — detailed setup instructions
- Quickstart — create your first threat model
- Concepts — understand Precogly's core concepts