Projects
A project is the top-level container for a security model in Lantern. All assets, elements, diagrams, threats, and mitigations belong to a project.
A project represents the complete security design of a product, system, service, or feature set. Its data is stored as a structured graph of typed entities.
Elements overview in a project
Project contents
A project can contain:
Project metadata
Project metadata provides the product and business context needed to make useful security decisions.
This includes:
- A description of the product or system
- Author
- Reviewer
- Threat modeling methodologies used
- More TBA.
This information helps reviewers understand what the project is intended to achieve, what matters to the business, and which outcomes need to be protected.
Generating reports
You can generate a comprehensive report of your project at any time.
A report captures the current state of the threat model, including its system design, assets, threats, risk assessments, and mitigations. It is a full visual representation of the entire threat model as a single downloadable artifact.
Data model
Projects are stored as structured JSON. They can be exported and imported.
The JSON representation is the source of truth for the security model. It can be validated against Lantern's JSON schema, stored under version control, and processed by other tools.
This portability allows optional AI systems to read or generate project data in a predictable format.