Show HN: Cumulus – Threat Modeling the Clouds

3 points

2 years ago

Hi HN! I am excited to share OWASP Cumulus, a threat modeling card game for IT security in DevOps and cloud projects. Taking strong inspiration from the well-known card games "Elevation of Privilege" and "OWASP Cornucopia" we created a game for threat modeling specifically the Ops part of DevOps projects.

It targets DevOps engineering teams, site reliability engineers and security professionals and gives a lightweight start into threat modeling and security by design.

Please check it out at https://owasp.org/www-project-cumulus/ and contribute via https://github.com/OWASP/cumulus. Let's make this a community project!