I think threat modeling is great, and not that hard (see [1]), but the problem as with everything is that it's tedious to do by hand and it's not clear how one

I think threat modeling is great, and not that hard (see [1]), but the problem as with everything is that it's tedious to do by hand and it's not clear how one should start or structure the output of a threat modeling exercise. This cries for better tooling. After all, tooling is here to make you a superhuman, so where's the tooling to help you create a threat model easily? I've done some with spreadsheets, but it's really not the ideal tool. If I had time on my hand, I would probably create a threat model SaaS. [1]: https://news.ycombinator.com/item?id=26059701 https://news.ycombinator.com/item?id=26059701