---
id: 4042
title: "Continuous Security: Threat Modeling in DevSecOps"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/threat-modeling-in-devsecops"
published_at: "2021-11-08T00:00:00Z"
tags: ["appsec", "devsecops", "ci-cd", "threat-modeling", "continuous-security", "secure-design"]
phying_url: "https://phying.com/item/4042"
lang: en
---

# Continuous Security: Threat Modeling in DevSecOps

## Summary

A primer on threat modeling in DevSecOps: modeling the app as an attacker sees it addresses design and architecture security, with plain definitions and warnings against formalism overload.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2021-11-08T00:00:00Z
- **Original:** https://bishopfox.com/blog/threat-modeling-in-devsecops
- **Phying News:** https://phying.com/item/4042