AXIOM STRIDE Threat Modeler & Compliance Engine
Evaluate trust boundaries, review threat checklists, and audit architecture design against SOC 2, ISO 27001, and NIST CSF.
STRIDE Score
60% Compliant
6 / 10 Passed
Threat Synthesis LLM:OpenAI GPT-4o / Claude 3.5 Sonnet
In-Memory Engine:Apache Arrow + Polars Columnar Engine
Compliance Pipeline:SOC 2 / ISO 27001 / NIST CSF Ingestion
Filter Framework:
Architecture Threat Mappings (10 Controls)
Toggle checkbox to verify remediation stateSpoofingSOC 2S-1
Enforce Multi-Factor Authentication (MFA) on admin accounts
Audit Finding: MFA active via OAuth 2.0 / SAML
Compliant
SpoofingNIST CSFS-2
Prevent LLM System Persona Spoofing via DAN roleplay filters
Audit Finding: Prefix validation rules active
Compliant
TamperingPCI-DSST-1
Parameterize database inputs to block SQL injection attacks
Audit Finding: Spring JPA prepared statements enforced
Compliant
TamperingISO 27001T-2
Encrypt local storage configurations using AES-GCM-256
Audit Finding: Plaintext keys found in configs
Action Required
RepudiationSOC 2R-1
Establish centralized write-once audit logs (WORM / CloudTrail)
Audit Finding: Logs writable by admin role
Action Required
Information DisclosureSOC 2I-1
Mask database passwords and credentials in properties
Audit Finding: Secrets stored in HashiCorp Vault
Compliant
Information DisclosurePCI-DSSI-2
Restrict CORS origin headers and enforce IMDSv2 metadata tokens
Audit Finding: Access-Control-Allow-Origin: * active
Action Required
Denial of ServiceISO 27001D-1
Rate limit incoming client API request counts (Token Bucket)
Audit Finding: No rate-limiting filters mapped on gateway
Action Required
Elevation of PrivilegeSOC 2E-1
Enforce RBAC authorization and BOLA object tenancy validation
Audit Finding: RBAC filter mapped on gateway
Compliant
Elevation of PrivilegeNIST CSFE-2
Audit Kubernetes ServiceAccount tokens for wildcard privileges
Audit Finding: ClusterRoleBinding audit clean
Compliant