Help Launch Threat Modeling 2nd Edition

How to help with the launch

Thank you for asking how to help with the launch of the second edition of my original threat modeling book. I’m excited to launch this new edition, Threat Modeling: Designing for Security in an AI World, available by February 2, 2027. Between now and its release, I’d love help getting the word out. Sharing on a blog, at work, on social media is incredibly helpful. If you have a platform, like a podcast, I’d love to come on.

Why a second edition?

The first edition of Threat Modeling: Designing for Security was published in 2014. It’s been called “the Bible of threat modeling,” and I’m proud that it proved enduring. Its techniques have held up as technology and development paradigms shifted over the last decade.

But a lot has changed. AI has reshaped software architecture, secure development, and risk analysis in ways that didn’t exist when the first edition published. Half of this second edition is completely new or heavily revised, with two new chapters covering using LLMs to threat model and threats to LLMs, AIs, and ML models themselves. The Four Question Framework has been updated, the guidance on agile has been deepened, and the book now explicitly includes non-technical product owners as part of the threat modeling conversation.

The first edition showed how secure by design was a real possibility. This one shows how to make it happen in the technology we’re actually building today.

How to help between now and February 2, 2027

• Pre-order the book for yourself from Amazon or Wiley
• Pre-order copies for your engineering team
• Set a calendar reminder
• Email your coworkers, professional contacts, or anyone who would benefit from better security practices, letting them know about the book and why you think it matters to them
• Spread the word on Mastodon, Bluesky, LinkedIn, your blog or wherever you spend time online
• Invite me to your podcast or webinar
• Sign up for book news by subscribing to Adam’s New Thing on my company’s Contact page

How to help after the book releases in February:

• Buy the book from Amazon or Wiley.
• Let people know about the book
• Keep inviting me to your podcast or webinar
• Invite me for a combined keynote/book signing appearance on the Contact page and we’ll try to work something out

Sample text for social media, Slack or email

• If you work in security and don’t own the first edition of Adam Shostack’s threat modeling book, you’ve probably used its ideas anyway. It’s at the heart of OWASP’s threat modeling approaches and adopted across industry and government. The second edition is out in February, updated for AI.
• Half of the new edition of “the Bible of threat modeling” is completely new or heavily revised. It includes two new chapters on LLMs, a new framework for selecting defenses, and a scaling chapter for organizations trying to make threat modeling stick. Available now for pre-order.
• Most security books mention AI. This one threat models it. Adam Shostack’s updated threat modeling book includes dedicated chapters on using LLMs to threat model and on threats to LLMs, AIs, and ML models themselves. Available in February 2027.
• If you’ve ever tried to explain threat modeling to a product owner, a developer, or a non-technical stakeholder, the new edition of Adam Shostack’s threat modeling book expands the room by explicitly including them. Pre-order now to get it in Feburary!
• The first edition of Adam Shostack’s threat modeling book came out in 2014 and the techniques still work. The second edition draws on thousands of conversations over the last decade and adds everything the first couldn’t have anticipated, including AI. Pre-order for February 2027.

Best single link to use:

Book cover

Want me to remind you?

Stay informed about my latest updates about the book, blogs, and new training opportunities. You can follow the Shostack + Friends blog (RSS feed here) for higher-volume updates covering more than just the book.
Our Contact page has multiple ways to stay in the loop, including subscribing to Adam’s New Thing, following us on our socials, or making direct inquiries about podcast or speaking appearances.

Thanks!

Also, thanks again to Scott Berkun for his inspirational “how to help” webpage for his "Year without Pants" book.