Threat Modeling Hackathon
2025

April 1-23

Join our highly anticipated annual Threat Modeling Hackathon to collaborate with top threat modeling practitioners from around the globe. Enhance your threat modeling skills, share knowledge, or mentor others.

About the Hackathon

Threat Modeling Hackathon is the industry’s largest virtual hackathon focused on threat modeling and secure design. The best and brightest threat modeling pros around the world gather for three weeks to design secure systems. Join us for the 3rd year to secure the future by design!

Timeline

Registration
Feb 1 - March 7
Contest period
April 1-13
Judging period
April 14-20
Awards ceremony
April 23

Here's what to expect

Three-Week Immersive Threat Modeling Journey
Collaborate with security pros and developers from around the globe as you navigate a comprehensive three-week program designed to enhance your threat modeling prowess.
Expert-led Threat Modeling Training
Equip yourself with threat modeling knowledge and skills taught by leading threat modeling experts. Past speakers include Adam Shostack, Chris Romeo, Kim Wuyts, Luis Servin, and more.
Mentorship Opportunities
Receive personalized guidance and mentorship from leading threat modeling professionals throughout the duration of the event.
Exciting Prizes
Compete for a chance to win fantastic prizes. Past prizes include a $2,500 Amazon voucher and an exclusive private session of the Elevation of Privilege Game hosted by Adam Shostack himself.

Coming Soon...

Speakers, mentors and sponsors! Watch this space (metaphorically, not literally, that could be very dull).

If you're interested in becoming a sponsor, drop us an email.

If you are interested in becoming a Mentor, click the button below!

FAQs

What is the Threat Modeling Hackathon?

keyboard_arrow_down

Think of it as a three-week virtual bootcamp for threat modeling – where you’ll dive into intense threat modeling exercises with people who are just as passionate (and maybe even a bit obsessed) about secure design as you are!

You’ll team up with 4-6 people and choose from one of three tracks, each focused on a different system. Acting as Security Consultant, your job is to review a system design, identify key threats, and propose solutions. The team with the sharpest analysis and most innovative solutions wins their track.

Who should come?

keyboard_arrow_down

Anyone who's already into threat modeling or anyone who's curious and ready to learn the ropes.

How much does it cost?

keyboard_arrow_down

Zero. Nada. Zilch. The Threat Modeling Hackathon is completely free for all participants – thanks to our amazing sponsors who share our mission to make threat modeling a must-have skill and practice for every team.

What if I don’t have any threat modeling experience?

keyboard_arrow_down

No worries! You’re in great company. Over 30% of our past participants started with zero threat modeling experience. This is where they got their start! We offer beginner workshops and resource packs to get you up to speed. Plus, mentors and more experienced teammates will have your back.

Do I compete as an individual or a team?

keyboard_arrow_down

We’re all about teamwork. The Threat Modeling Hackathon is a team competition, but don’t worry if you don’t have a team – you can register individually, and we’ll match you with others based on time zones.

What will I build?

keyboard_arrow_down

The best threat model you can create for the system in your chosen track. Acting as a Security Consultant, your team will analyze the system design, identify the top threats, and propose solutions.

Previous champions

Champion Threat Models

Featured Threat Model 04
A threat model for AI-assisted software featuring extensive frameworks and threat libraries, including STRIDE, LINDDUN, Plot4.ai, OWASP, and others.
Featured Threat Model 03
A threat model of a rideshare app, created by the 2024 Hackathon Finalist team using a combination of STRIDE and LINDDUN GO as the primary methodologies.
Featured Threat Model 02
A threat model of a rideshare app created by the finalist team of the 2023 Threat Modeling Hackathon using ATASM, c4 methodology, and graphviz.
Featured Threat Model 01
The scope of the threat model is a microservice application (RideShare) and associated directly interacting entities such as data stores and middleware.

Past Mentors

Zoe Braiterman
2023
CIO
Mutual Knowledge Systems
Mark Merkow
2023
Application Security Engineer
Freeport-McMoRan
Jeroen Verwoest
2023
Product Owner, Threat Modeling
ABN AMRO Bank
Steven Wierckx
2024
Product Security Team Lead
Toreon
Avi Douglen
2023
Founder and CEO
Bounce Security
Tyson Garrett
2024
CTO
TrustOnCloud
Simone Curzi
2024
Cyber Security Principal Consultant
Microsoft
Natalia Girabet Massot
2024
Tech Lead
IriusRisk
Michael Bernhardt
2024
Product Security Manager
Telefónica Germany
Joshua Holmes
2024
Cyber Security Consultant
secureIO GmbH
Mariia Tiurina
2024
Senior Application Security Engineer
Outseer
Jonny Tennyson
2024
Head of Customer Success
Secure Code Warrior
Georges Bolssens
2024
Threat Modeling Consultant
Toreon
James Rabe
2024
Global Technical Program Manager
IriusRisk
John Taylor
2023, 2024
Sr. Manager, Global Cybersecurity A&E Application Security and Design
Deloitte
Altaz Valani
2024
Principal Advisory Director
Info-Tech Research Group
Edouard Stoka
2024
Sr. Application Security Architect
ADP
Daniel Agota
2023, 2024
Sr. Security Consultant
Career break
Dave Soldera
2024
Security Architect
Electronic Arts
Álvaro Pérez
2024
Sr. Developer & Security Champion
IriusRisk
Atul Chaturvedi
2024
Cyber Security Architect
Fiskars Group

Past Speakers

Adam Shostack
Adam Shostack
President
Shostack + Associates
Kim Wuyts
Kim Wuyts
Manager, Cyber & Privacy
PwC Belgium
Luis Servín
Luis Servín
Platform Security Lead
Hapag-Lloyd AG
Chris Romeo
Chris Romeo
CEO & Co-founder
Devici

Past Judges

Lesley Nuttall
2023
IBM Cloud
IBM
Sebastien Deleersnyder
2023
Co-founder & CTO
Toreon
Robert Hurlbut
2024
Principal Application Security Architect / Threat Modeling Lead
Aquia Inc
Kim Wuyts
2024
Manager, Cyber & Privacy
PwC
Avi Douglen
2024
Founder and CEO
Bounce Security
Izar Tarandach
2023
Sr. Principal Security Architect
SiriusXM
Brook Schoenfield
2023, 2024
CTO & Chief Security Architect
Resilient Software Security, LLC
Adam Shostack
2023
President
Shostack + Associates