Threat Modeling Expertise + Training

Shostack + Associates is the acknowledged leader in threat modeling. We offer the most applied training, and the most thoughtful thought leadership. In fact, we offer the best threat modeling training and coaching available. Our entire team has experience both building and securing products, services and businesses. That gives us a unique perspective, focused on solving your problems in the most effective ways.

We do more including developing the science of security, with focus on both cyber public health and learning lessons, both of which feed into effective threat modeling... and more.

Learn Threat Modeling

We aim to deliver the best threat modeling training available, in ways that suit your business or career. We have corporate and open courses, standard or customized content, and instructor-led and computer-based training. Courses start at one minute, and many are free.

Accelerate

As your organization starts to threat model, Shostack + Associates can accelerate your secure by design program, helping you define your goals, develop a plan, identifying obstacles and a path through them, and generally getting you there faster.

Shostack and Associates

Adam is a leading expert on threat modeling, and a consultant, entrepreneur, technologist, author and game designer. The Associates include a wide range of knowledge, talent, and experience in cybersecurity, information security, application security, and threat modeling.

What Every Security Engineer Should Learn from Star Trek

Security engineers in a DevSecOps world, embedded with application teams, sitting in sprint planning, reviewing pull requests, and trying to help developers understand why that API endpoint needs authentication before it ships to production can learn from Star Trek, The Next Generation.

Getting Root on a Star Ship

Sometimes, officers and crewmembers of starships die, are taken prisoner, or are otherwise unable to complete their duties. It is important that the crew can control the spaceship, including software and computer hardware.

Star Trek's Astromycologist

Have you met the scientist with a mushroom fetish bent on saving the planet?

Trek and CISSP

Rediscover a video series titled “Passing the CISSP Exam with the help of Spock & Kirk”.