Experimental Extension

Security Champion Desktop

Threat modeling tool for VS Code using the Threagile framework

An integrated development environment for security professionals, architects, and developers to create, analyze, and manage threat models directly within Visual Studio Code.

Current Version: v0.0.3 VS Code 1.89.0+
threagile-demo-model.yaml
1 technical_assets:
2 web-server: 📊 3 references
3 id: web-server
4 type: process
2 High Risk Issues Detected

Key Features

Almost everything you need for professional threat modeling in VS Code

Intelligent YAML Editing

CodeLens integration, smart navigation, hover information, and auto-completion for Threagile YAML files.

  • Interactive CodeLens annotations
  • Jump to definitions & references
  • Rich contextual documentation

Risk Analysis & Management

Automated risk detection with interactive views for managing identified security threats.

  • Docker-based Threagile engine
  • STRIDE analysis breakdown
  • Risk tracking & mitigation

Data Flow Visualization

Interactive diagrams with animated data flows and visual trust boundary mapping.

  • Technical asset visualization
  • Animated data movement
  • Click-to-navigate integration
Experimental

External Integrations

Seamless integration with external tools for enhanced workflow productivity.

  • Jira issue management
  • Report generation & export
  • Custom tool integrations

Docker Requirement

This extension requires a custom Docker image for proper functionality:

docker pull z00mi/threagile:latest
The extension will not work correctly with the original Threagile Docker image.

Download & Installation

Get started with Security Champion Desktop today

Latest Release

Version 0.0.3 Released: July 2025
Download VSIX

Installation Steps

1

Download the VSIX file

Click the download button above to get the latest extension package

2

Install in VS Code

Open VS Code and run: Extensions: Install from VSIX... (Ctrl+Shift+P)

3

Setup Docker

Install the required Docker image: docker pull z00mi/threagile:latest

4

Start Threat Modeling

Open any Threagile YAML file matching **/threagile-*-model.yaml

Changelog

Track the evolution of Security Champion Desktop

v0.0.3 July 2025

Latest Development Release

  • Enhanced risk analysis and management features
  • Improved YAML editing with CodeLens integration
  • Experimental data flow visualization
  • Jira integration for issue tracking
  • Technical asset management views
  • Docker-based Threagile engine integration
This is an experimental release. Features are subject to change.

Acknowledgments

Built upon the shoulders of giants

Original Threagile Project

This extension builds upon the excellent work of the original Threagile project. We acknowledge and thank the Threagile team for creating such a powerful threat modeling framework that serves as the foundation for this VS Code integration.

Threagile Authors: The Threagile development team and contributors