Learn OWASP Precogly

This hands-on course will teach you to combine the power of LLMs with open-source tooling to scale threat modeling in your organization without increasing the workload for your security team.

Scaling threat modeling is one of the hardest problems in application security. Open-source tools often lack the depth needed for enterprise use, while commercial platforms come with vendor lock-in, steep licensing costs, and the loss of data sovereignty. OWASP Precogly bridges this gap as a fully open-source platform that rivals commercial tools in capability without the trade-offs. In this two-day, hands-on course, participants will learn to use Precogly to unblock the bottlenecks that slow down threat modeling programs: building reusable threat libraries with LLM assistance, mapping threats to industry taxonomies (STRIDE, MITRE ATT&CK, CWE, CAPEC), tracing countermeasures to compliance standards and regulations (NIST CSF, SOC 2, DORA, ASVS), and generating reports that serve security, compliance, and executive stakeholders alike.

A key focus of the course is how Precogly integrates AI responsibly. Rather than letting LLMs generate entire threat models at runtime, where hallucinated components, data flows, and threats are a real risk, Precogly uses LLMs at build time to generate curated library packs that humans vet before use. Participants will learn to author these packs themselves, creating vetted chains of components to threats, threats to countermeasures, and countermeasures to regulatory frameworks. The course also covers Precogly's reporting capabilities, from compliance coverage reports to penetration testing plans that support threat-led pentesting engagements. And because Precogly supports threat-model-as-code with git integration, participants will see how developers can work from their IDE while security teams, compliance officers, and executives interact through the web interface, making threat modeling a collaborative practice rather than a siloed exercise.