Gram
January 17, 2025 · View on GitHub
Gram is Klarna's own threat model diagramming tool developed internally by Klarna's Secure Development team. It is a web app for engineers to collaboratively create threat models for their systems, providing a easy-to-understand way to document a system as a dataflow diagram with threats/controls attached.
Features ✨
-
Fully featured diagramming tool specialized for threat modeling.
-
Collaborative editing with multiple users over websocket
-
Tightly couples to your system/asset inventory
-
Automatic suggestions for threats and controls based on your tech stacks
-
Review system for use by your Security Champions and to ensure quality models
-
Integration for boring corporate stuff like Jira and SSO (Okta)
Getting Started 🚀
See Quick Start.
How to contribute 🙋
See our guide on contributing.
Release History 📜
See our changelog.
Contributors 🌟
 Ruel 💻 📆 |
 Joakim Uddholm 💻 📆 📢 |
 Ivan Verevkin 💻 |
 Luke Berner 💻 📆 |
 Franka 💻 |
 Erik Båvenstrand 💻 |
 Sai Kiran Goud 💻 |
 Tyouxik 💻 |
 Klarna 💵 💼 |
 Gabriele 🔌 💻 |
 MissMuffin 🎨 |
 Oscar Andersson 📖 |
 Fedor Tkachenko 📖 ⚠️ |
 Grégoire Lodi 💻 |
License ⚖️
Copyright © 2025 Klarna Bank AB
For license details, see the LICENSE file in the root of this project.