Dethernety review
A graph-based open-source threat modeling platform for technical security analysis.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Dethernety is an open-source threat modeling platform for security teams, architects, DevOps teams, and consultants. Its browser-based interface supports drag-and-drop architecture diagrams, data flows, and visual modeling, while its graph-native design connects system structure to attack paths and impacts. Teams that need technical analysis rather than lightweight checklist-based modeling will find the strongest fit here, particularly when self-hosted deployment is a requirement.
Its standout capability is the combination of graph-backed attack-path traversal, impact analysis, blast-radius analysis, and chokepoint analysis. Findings can be mapped to MITRE ATT&CK exposures and D3FEND countermeasures, giving teams a framework for relating modeled weaknesses to adversary behavior and defensive actions. Context-aware deterministic analysis and optional AI assistance add another layer, while executable JavaScript and TypeScript modules support customization. Version-controlled JSON import and export also suit teams that want models to fit into code-oriented workflows.
Dethernety extends beyond modeling with issue creation, filtering, merging, and external tracker integration. Collaborative review is supported, and CLI automation can help technical teams incorporate threat modeling into broader engineering processes. The tradeoff is operational: the current deployment model is self-hosted, so organizations must manage the infrastructure themselves, including deployments in cloud, on-premises, or air-gapped environments. Teams seeking control, graph analysis, and extensibility should consider Dethernety; those wanting a currently hosted SaaS experience or broader documented platform integrations should choose an alternative.
Dethernety pros and cons
- Where it wins
- Graph-backed attack-path, blast-radius, and chokepoint analysis
- MITRE ATT&CK and D3FEND mappings connect threats to defenses
- Self-hosted deployment supports cloud, on-premises, and air-gapped environments
- Where it doesn't
- Self-hosting requires customer-managed infrastructure
- Platform integrations are focused on external issue trackers
- Hosted SaaS is planned rather than the current deployment model
Dethernety fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update