Introduction

Lantern is a tool for creating and maintaining structured threat models. It helps teams describe the elements of a system, create diagrams, identify relevant threats, and document the mitigations used to address them.

Overview in Lantern Project overview dashboard in Lantern

Who Lantern is for

Lantern is intended for software engineers, security engineers and researches, architects, and teams that want threat models to remain understandable and maintainable.

How Lantern works

Lantern organizes a threat model around six connected concepts:

  • Projects provide the top-level container for the complete threat model.
  • Elements represent parts of the system and how information flows through it.
  • Diagrams create visualizations of isolated functions or areas.
  • Assets are used to track what is important to protect and how it moves around the system.
  • Threats describe potential security concerns.
  • Mitigations document how those concerns are addressed.

Next steps

Start with Set up a project to create your first Lantern project.