Raven - AppSec Workbench
STRIDE Risk & Threat Modeling
Only for Mac
Free
Mac
RAVEN is a threat modelling workbench built for security engineers and developers who take AppSec seriously.
Map your architecture, identify threats across every component and data flow, score findings with CVSS, and generate a PDF report — all from a single native macOS app, with no subscriptions and no cloud.
THREAT MODELLING THAT SHIPS WITH YOU
RAVEN ships with 433 built-in attack patterns mapped to STRIDE (Spoofing, Tampering, Information Disclosure, Denial of Service, Elevation of Privilege, Repudiation). Coverage spans web, mobile, cloud-native, Kubernetes, AI agents, MCP servers, GraphQL, gRPC, edge functions, smart contracts, browser extensions, and more. When you add a component to your architecture, RAVEN immediately suggests relevant attacks — no configuration required.
BUILT FOR MODERN STACKS
Purpose-built component types for every layer of a 2026 architecture: API Gateway, Service Mesh, CI Runner, Artifact Registry, IaC Runner, AI Agent, MCP Server, Vector Database, Workflow Engine, ZTNA Gateway, WebAuthn Service, eBPF Program, and more. RAVEN speaks your stack.
ON-DEVICE AI WITH APPLE INTELLIGENCE
RAVEN uses Apple Foundation Models to suggest contextual threats based on your specific architecture. Processing happens entirely on your device — your threat models, findings, and system designs never leave your Mac.
FROM THREAT TO FINDING TO REPORT
Triage threats into tracked findings with severity (Critical → Low), CVSS scoring, acceptance criteria, and owner assignment. Export a polished PDF report ready for engineering leads, security reviews, or compliance audits.
EVERYTHING IN ONE PLACE
· System Model — diagram components, data flows, and trust boundaries
· Threats Tab — STRIDE threats with built-in attack suggestions
· Findings Tab — severity breakdown, status tracking, and remediation notes
· Risk Register — active risks with likelihood and impact scoring
· Threat Library — browse, search, and extend the attack library
· CVSS Calculator — score any vulnerability without leaving the app
· Notepad — freeform notes scoped to each assessment
· Global Search — find anything across all assessments instantly
PRIVACY BY DESIGN
No accounts. No telemetry. No network access of any kind. All data is stored locally in ~/Library/Application Support/RAVEN/. RAVEN runs inside the macOS App Sandbox and Hardened Runtime.
Built for: AppSec engineers, security architects, penetration testers, platform engineers doing threat modelling, and engineering teams running threat reviews before launch.
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
Bug Fixes and Improvements.
The developer, Shahzaib Khan, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- Shahzaib Khan
- Size
- 2.3 MB
- Category
- Developer Tools
- Compatibility
Requires macOS 14.6 or later.
- Mac
Requires macOS 14.6 or later.
- Mac
- Languages
- English
- Age Rating
4+
- 4+
- Copyright
- © 2026 Rogue Protocols