OWASP Threat Dragon is a free, open-source modeling tool used to create threat model diagrams as part of a secure development lifecycle. It can be used to record possible threats and decide on their mitigations, as well as giving a visual indication of the threat model components and threat surfaces.
It is used by software developers, security professionals and architects as part of systems and software development.