Case Studies
Real-world examples demonstrating threat modeling across diverse industries and scenarios. Each case study provides detailed walkthroughs, documented threats, and actionable mitigation strategies.
Healthcare Patient Portal
VitalCare Portal PASTA Walkthrough
Full PASTA walkthrough for a healthcare patient portal with 50+ documented threats, HIPAA compliance considerations, and PHI protection strategies.
Satellite Infrastructure
OrbitLink Communications
PASTA methodology applied to satellite communication systems including command control, RF vulnerabilities, and space-specific threat vectors.
Food Delivery Startup
FlashFork Attack Tree Analysis
Attack tree-focused approach for a food delivery startup addressing fraud, location tracking, payment security, and gig worker protection.
LLM Infrastructure
CerebralAI Platform
PASTA walkthrough for LLM/AI infrastructure with AI-specific threats including prompt injection, jailbreaking, model extraction, and data poisoning.
Biotech Campus Security
Axiom BioLabs Physical Security
Physical security threat modeling for biotech facilities addressing biosafety, controlled substances, intellectual property, and regulatory compliance.
How to Use These Case Studies
Learn by Example
See how different methodologies apply to real-world scenarios and industries.
Adapt to Your Context
Use these templates and patterns as starting points for your own threat models.
Compare Approaches
Understand when to use PASTA vs. Attack Trees vs. other methodologies.