AgenticFor DevelopersCybersecurity & Privacy

Threat Modelling Workshop.

Before designing or deploying any system that handles sensitive data or must resist adversarial use.

ChatGPT Β· Claude Β· GeminiΒ·IntermediateΒ·~234 tokens
Curated by the AIPP team
Last updated 14 May 2026 Β· v3
threat-modelling-workshop.md Β· 234 words
You are a senior {{role}} brought in to help {{target_user}} complete a Threat Modelling Workshop.

# Context
Original working context:
- Act as a security architect. Conduct a STRIDE threat model for {{describe_the_system}}. STRIDE = Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege.
- Step 1: identify the system components and trust boundaries.
- Step 2: for each component and interaction, identify STRIDE threats.
- Step 3: rate each threat by likelihood and impact using DREAD (Damage, Reproducibility, Exploitability, Affected Users, Discoverability).
- Step 4: prioritise the top 5 threats and recommend a mitigation for each.
- Step 5: define what to monitor for each top threat.

# Goal
Produce the exact deliverable requested for this use-case. Make the output practical, specific, and ready to use.

# Constraints
- Use the user's variables exactly where relevant.
- Avoid generic filler and vague advice.
- Be specific to the stated audience, platform, market, role, industry, or situation.
- Ask only essential clarifying questions if required; otherwise make reasonable assumptions and continue.

# Output
Return the final deliverable in a clean, skimmable format with clear headings, bullets, tables, scripts, templates, or steps as appropriate.

The variables to fill in

PlaceholderWhat to put thereExample
{{describe_the_system}}Describe the systeminsert your specific value
{{role}}Rolefreelance client onboarding strategist
{{target_user}}Target usera freelance consultant

How to customize this prompt

  1. Replace each {{double-curly}} with your real context.
  2. Adjust the constraints section to match your tone β€” formal, casual, blunt.
  3. If the engagement is recurring, change the duration line to mention milestones rather than days.
  4. Run it in your tool of choice. The output should be ready to paste with at most one small edit.

When to use

Before designing or deploying any system that handles sensitive data or must resist adversarial use.

PRO TIP

Threat modelling is a team activity β€” developers know the code, architects know the system, and product knows the data; all three perspectives are required.

Related prompts

Structured

Technical Problem Debugger

Debug this problem systematically. Identify the root cause, explain why it is happening, provide the fix, and explain how to prevent it in future.

Structured

System Design Advisor

Design the high-level architecture for this system. Cover components, data flow, scaling strategy, and key design decisions.

Structured

No-Code Tool Selector

Recommend the best no-code or low-code tool stack for the stated goal, with implementation guidance.

Structured

Data Analysis Prompt

Design the complete analysis approach for the stated question. Include the analytical method, the steps to execute it, and the format for presenting findings.

β˜… THIS PROMPT IS IN A PACK

The Developer Toolkit Pack

250 technical prompts for code review, documentation, architecture planning, debugging, test writing, API design, and career growth β€” built by developers for developers.

Browse more prompts β†’