Threat-model Threat models for various software applications Threat model Attacker model Attacker goals Vulnerabilities or threats Tools Security Scorecards - Security health metrics for Open Source