What Is StartLeft?

StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different sources such as IaC files, diagrams or projects exported from Threat Modelling tools.

StartLeft is currently an Open Source application powered by IriusRisk, that is already using it as an intermediate service for all the imports of new projects from external sources.

You can find the GitHub repository here.

What input sources are supported?

• Infrastructure as Code (IaC):

  • CloudFormation (CFT).
  • Terraform (TF).

• Diagram:

  • Microsoft Visio (including diagrams exported from Lucidchart).

• Threat Model:

  • Microsoft Threat Modeling Tool (MTMT).

For information on our StartLeft releases, please see here. - This is a great place to view the features we have incorporated into StartLeft.