All threats are contextualized to the diagram you import or build within SD Blueprint. These threats will be broken down at the component level and across the different phases in the development lifecycle. The threats will also be organized into the STRIDE categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.

The repository scan feature allows automatic scanning of your GitHub and GitLab repositories to create a threat model diagram or build a survey. Solutions and secure code suggestions can be added directly into your integrated development environment (IDE).

SD Blueprint offers reports for each of your projects. These reports include:

• Compliance Reports: This report outlines the completion status of countermeasures that apply to a particular compliance regulation (HIPAA, PCI DSS, etc).
• Project Risk Policy Reports: This report provides a list of the countermeasures that need to be addressed in your project in order to be compliant with their assigned risk policies.
• Completion Status Reports: This report summarizes the completion status of security countermeasures in specific phases of your project.
• Weakness Summary Reports: This report outlines the weaknesses (security risks) in your project that have been identified by SD Blueprint.
• Countermeasure Reports: This report summarizes all the countermeasures relevant to your project.

Once your requirements have been identified, you will have the ability to assign them to specific users to address. This includes leaving notes and assigning specific users to complete specific countermeasure(s).

Security Compass ensures the quality of our security content by having it maintained and continually updated by our dedicated security research team.

Once your requirements have been identified, each countermeasure will highlight the specific sections of each regulation that it addresses. To assess overall compliance progress, such as PCI-DSS v4.0, you can select that regulation within the Project Reports → Compliance Reports section.