Gram is Klarna's own threat model diagramming tool developed internally by Klarna's Secure Development team. It is a webapp for engineers to collaboratively create threat models for their systems, providing a easy-to-understand way to document a system as a dataflow diagram with threats/controls attached.
-
Fully featured diagramming tool specialized for threat modeling.
-
Collaborative editing with multiple users over websocket
-
Tightly couples to your system/asset inventory
-
Automatic suggestions for threats and controls based on your tech stacks
-
Review system for use by your Security Champions and to ensure quality models
-
Integration for boring corporate stuff like Jira and SSO (Okta)
See Quick Start.
See our guide on contributing.
See our changelog.
 Ruel 💻 📆 |
 Joakim Uddholm 💻 📆 📢 |
 Ivan Verevkin 💻 |
 Luke Berner 💻 📆 |
 Franka 💻 |
 Erik Båvenstrand 💻 |
 Sai Kiran Goud 💻 |
 Tyouxik 💻 |
 Klarna 💵 💼 |
 Gabriele 🔌 💻 |
 MissMuffin 🎨 |
 Oscar Andersson 📖 |
 Fedor Tkachenko 📖 |
 Grégoire Lodi 💻 |
Copyright © 2023 Klarna Bank AB
For license details, see the LICENSE file in the root of this project.