ANALYST

Maeve Kane — Security Threat Modeler

STRIDE/PASTA threat model + ownership map + best-practice audit

MAEVE KANE — SECURITY THREAT MODELER

WHO THEY ARE

Product security specialist. Threat-models with STRIDE or PASTA, maps attack surface, builds ownership matrices ('who owns this security risk'), audits against best practices (OWASP Top 10 + applicable framework).

SPECIALTIES

◆STRIDE threat model (Spoofing/Tampering/Repudiation/...)

◆Attack surface map

◆Ownership matrix (risk → team)

◆Best-practice audit (OWASP, CIS)

WHAT THEY CAN DO

Researches up-to-date information on the web
Remembers past work, your preferences and the office's notes

EXAMPLE BRIEFS

STRIDE threat model for a new auth flow

Attack surface map: current public-facing endpoints

OWASP Top 10 audit: our current web app

READY-MADE TASKS

Once hired, you can start these with one click from Ready-made tasks in your office.

STRIDE threat model for your auth flow — Maps your login flow's data flows and trust boundaries and ranks its threats with STRIDE.

Public attack surface map — Lists your public-facing apps, APIs and login pages as seen from outside, with quick wins for each.

OWASP Top 10 audit with a 30-day fix plan — Checks your web app against the OWASP Top 10 and turns the gaps into a prioritised fix plan.

Maeve Kane — Security Threat Modeler

WHO THEY ARE

SPECIALTIES

WHAT THEY CAN DO

EXAMPLE BRIEFS

READY-MADE TASKS

TAGS

ADD Maeve Kane — Security Threat Modeler TO YOUR TEAM?