What AI says about OWASP Dragon-GPT

OWASP Dragon GPT is an AI-powered tool that automatically performs threat modeling analysis on diagrams created with OWASP Threat Dragon. It extracts diagram data from JSON files, converts it into human-readable sentences, and sends them to an LLM (such as ChatGPT or a local Llama 2 model) for analysis.

AI named OWASP Dragon-GPT from November 2025 to September 2026.

Questions and answers

Question

We need to generate a threat model for a new service. Is there an AI that can analyze our architecture diagram and identify potential security threat vectors?

Competitors

Microsoft Threat Modeling Tool and OWASP Threat Dragon appeared in every answer that named OWASP Dragon-GPT.

Microsoft Threat Modeling Tool
OWASP Threat Dragon
AWS Security Agent
Eraser
IriusRisk

Sources AI cites

AI cited owasp.org in these answers, after learn.microsoft.com.

owasp.org/www-project-dragon-gpt 22%Other sites 78%

learn.microsoft.com (opens in a new tab)28%
owasp.org (opens in a new tab)Owned22%
iriusrisk.com (opens in a new tab)11%
threatmodeler.ai (opens in a new tab)11%
aws.amazon.com (opens in a new tab)6%

See where AI mentions OWASP Dragon-GPT

Track OWASP Dragon-GPT