Dethernety User Documentation

For platform overview, installation, and architecture, see the main README.

---

Modeling and Analysis

Guide	Description
Building Your First Model	Step-by-step tutorial for creating a threat model
Boundary Trust Zones	Record each boundary's trust zone, domains, role, and approved channels — the declared design intent for segmentation
Component Configuration Guide	Component setup, class assignment, and attribute configuration
Security Analysis Workflow	Running analysis and interpreting results
Managing Findings	Affirming findings as confirmed live risk or muting them (not applicable, false positive, waived, superseded); the pending/confirmed/disposed lifecycle

Security Controls and Modules

Guide	Description
Working with Security Controls	Creating, configuring, and assigning security controls
Understanding Modules	How the module system extends modeling and analysis

Issue Tracking

Guide	Description
Issue Management Guide	Issue creation, filtering, merging, and external integration

Reporting — Threat Report

A read-only, point-in-time report over a model. See the Threat Report guide:

Guide	Description
Threat Report Overview	What the report is, what it does and does not tell you, and where to start
Getting Started	Generate, open, refresh, and export a report
Reading the Report	Navigation, the shared visual language, the Posture and Boundary Crossings views
Understanding Coverage and Gaps	The MITRE ATT&CK coverage matrix: tiers, gaps, and honest interpretation
Reachability and Flow Routes	Flow routes to crown-jewel assets and between any two elements
Working with Findings	The Residual Risk ledger, triage, filtering, and the Component Profile

AI and Automation — Dethereal (Claude Code Plugin)

For comprehensive documentation on the Dethereal threat modeling plugin, see the Dethereal documentation:

Guide	Description
Getting Started	Installation, authentication, first model
Guided Workflow	The 11-step threat modeling process
Command Reference	All 14 slash commands
Model Concepts	Components, boundaries, flows, quality scoring
Discovery and Enrichment	Infrastructure scanning, security attributes, MITRE
Sync and Version Control	Push/pull, git integration, conflict handling
Review and Analysis	Quality review, attack surface analysis
Agents and Architecture	AI agents, MCP tools, lifecycle hooks
Glossary	Plugin-specific terminology

Running a deployment — BYODt

Everything needed to run Dethernety on your own machine or server. See the BYODt deployment guide:

Guide	Description
Overview	What a BYODt deployment runs, what it needs, and how the pieces fit
Installation	Prerequisites, obtaining the bundle, first start, and verifying health
Configuration	The .env settings reference, the generated secret, and database storage
Operations	The byodt commands: start, apply changes, logs, backup and restore, TLS, upgrade
Cloud	Connecting a deployment to cloud sign-in and content packages
Troubleshooting	Symptoms, causes, and fixes

---

Suggested reading order

Platform (GUI): Building Your First Model -- then Security Analysis Workflow to run and interpret analysis -- then the Threat Report to read, filter, and export your residual risk.

Dethereal (Claude Code plugin):

1. Getting Started -- install and create your first model
2. Guided Workflow -- the complete 11-step process
3. Command Reference -- all available commands

Going deeper:

1. Working with Security Controls -- create and assign controls
2. Issue Management Guide -- track findings and coordinate remediation
3. Component Configuration Guide -- advanced component setup

Modules:

1. Understanding Modules -- module system and extensibility