davidmatousek/tachi
davidmatousek
Python79updated 4mo ago
Python79updated 4mo agoThreat modeling and AI-reasoning vulnerability detection harness for Claude Code — STRIDE + AI + MAESTRO
Claude
agentic-securityai-securityattack-treesclaude-codecybersecuritydevsecopsllm-securitysarifsecuritystridethreat-modeling
README
tachi
Threat Modeling and Vulnerability Detection Harness for Claude Code.
AI-Reasoning Scanner — STRIDE + AI + MAESTRO.
Get started: Quick Start | Developer Guide (full walkthrough with worked examples)
OWASP Coverage
50/50 across five frameworks — every catalogued threat in each framework has a tachi detection agent.
| Framework | Coverage | Anchor | |---|---|---| | OWASP LLM Top 10 (2025) | 10/10 | LLM 2025 | | OWASP Agentic Top 10 (2026) | 10/10 | Agentic 2026 | | OWASP ML Security Top 10 (2023) | 10/10 | ML 2023 | | OWASP Mobile Top 10 (2024) | 10/10 | Mobile 2024 | | OWASP Web/API* (2021 + 2023) | 10/10 | Web 2021 · API 2023 |
* Web/API combined slot: OWASP Web Top 10:2021 (A01–A10) + OWASP API Security Top 10:2023 (API1–API10) — 20 items, 20/20.
Canonical matrix: [docs/standards/OWASP_COVERAGE.md](docs/standards/OWASP_C