Threat Modeling Unleashed

Security Compass

Threat Modeling doesn’t have to be complicated - or stuck on a whiteboard. In this 6-part series, hosts Chris Romeo and Bruce Warren break down how modern teams can move beyond theory and make security by design a reality. From getting started and securing buy-in, to scaling without the bloat, to the role of AI in shaping the future, each episode delivers practical insights you can put into action. Whether you’re a developer, architect, or security leader, Threat Modeling Unleashed gives you the strategies, stories, and tools to build stronger, smarter applications.

  1. 02/12/2025

    Part 6: AI in Threat Modeling & The Future of Security by Design

    Where is threat modeling headed? In this closing episode, Chris and Trevor explore practical AI use cases, the future of developer-led security, and how organizations can prepare now. Takeaways: The reality of AI today: what’s useful vs. overhyped. Continuous delivery + security: can we really have both? The long-term shift toward “Security by Design” at scale. Positions Devici as a forward-looking, AI-enabled platform.

    28 min

  2. 25/11/2025

    Part 5: Tools That Fit — Threat Modeling Without the Bloat

    Not all tools are created equal. Chris and Trevor compare common approaches — from free tools to heavyweight enterprise platforms — and share guidance on what to look for in the right solution. Takeaways: When Microsoft TMT is enough — and when it’s not. Pros and cons of enterprise platforms like IriusRisk/ThreatModeler. How to measure ROI in terms of risk reduction and developer adoption. Echoes Devici’s “Threat modeling without the bloat” message.

    28 min

  3. 18/11/2025

    Part 4: Bridging the Gap Between Security and Development

    Security teams and developers don’t always speak the same language. This episode explores how to make threat modeling a true “team sport” that fits naturally into developer workflows. Takeaways: Collaboration techniques that work. How diagram-first modeling closes the communication gap. Making outputs actionable for developers. Highlights Devici’s real-time collaboration + built-in libraries.

    29 min

  4. 11/11/2025

    Part 3: Why Threat Modeling Fails (and How to Make It Stick)

    Many threat modeling efforts fall flat. Chris uncovers the common reasons — from cultural pushback to lack of developer adoption — and shares proven strategies for success. Takeaways: The most common pitfalls (and how to avoid them). Embedding consistency across security teams. Scaling without adding headcount. Supports Devici’s “Smarter, simpler threat modeling” positioning.

    26 min

  5. 07/10/2025

    Part 2: From Whiteboards to AI - The Evolution of Threat Modeling

    Threat modeling has evolved from sketches on a whiteboard to AI-enabled, diagram-first platforms. This episode explores how teams can modernize without the complexity of bloated enterprise tools. Takeaways: Why manual and siloed approaches fail at scale. The rise of diagram-driven threat modeling. Where AI fits today — and what’s hype vs. real. Reinforces Devici’s value as simple, intuitive, and forward-looking.

    17 min

  6. 29/09/2025

    Part 1: Getting Started with Threat Modeling — Simplifying the Start

    Threat modeling can feel overwhelming, but it doesn’t have to be. Chris and Bruce break down who needs to be involved, what roles matter most, and how to start small without losing impact. Takeaways: Key players to engage: architects, AppSec leads, developers, exec sponsors. How to secure buy-in and avoid resistance. Practical first steps to launch a repeatable practice. Aligns with Devici’s “Security by Design starts somewhere — start fast” message.

    24 min

  7. 05/12/2022

    Shaun Mckeag - Behind Application Security

    Today we are joined by Altaz Valani from Security Compass and Shaun Mckeag, Principal Software Engineer at Gen Digital, to talk about her personal journey in software development and security. Many listeners are either trying to get into secure software development, or have graduated from a program that teaches security and software development, or perhaps recently transitioned from a different role. It’s nice to have someone with years of experience in the field to give some perspective, guidance, tips, and encouragement. Listen in as Shaun shares her personal journey that will  inspire and help those of us who are newer to the secure software space.   Useful links from this podcast: https://www.linkedin.com/in/shaunmckeag/ https://nakedsecurity.sophos.com/podcast/ https://www.sans.org/blog/ https://www.devseccon.com/the-secure-developer-podcast https://darknetdiaries.com/ https://owasp.org/events/#AppSec%20Days https://devcon.org/ https://www.blackhat.com/

    24 min

  8. 08/11/2022

    Pranshu Bajpai - Use Training to Influence Your Developers With Embracing Security

    Today we are joined by Altaz Valani from Security Compass and Pranshu Bajpai, Security Architect at Motorola Solutions, to talk about the use of application security training to influence developers toward embracing security. Many developers are eager to learn about security but they need help. Developers move very fast because their performance is often measured around release frequency. All of this is happening while developers have to keep up with continually evolving frameworks and tools. It is possible for security teams to influence developers without getting in their way.

    27 min
See All (91)

About

Threat Modeling doesn’t have to be complicated - or stuck on a whiteboard. In this 6-part series, hosts Chris Romeo and Bruce Warren break down how modern teams can move beyond theory and make security by design a reality. From getting started and securing buy-in, to scaling without the bloat, to the role of AI in shaping the future, each episode delivers practical insights you can put into action. Whether you’re a developer, architect, or security leader, Threat Modeling Unleashed gives you the strategies, stories, and tools to build stronger, smarter applications.

Information

  • Creator
    Security Compass
  • Years Active
    2020 - 2025
  • Episodes
    91
  • Rating
    Explicit
  • Copyright
    © Copyright 2020 All rights reserved.
  • Show Website
    Threat Modeling Unleashed