Threat modeling is the process of reviewing the architecture and design of an application to identify potential threats before it’s built. Mitigations can be designed into the application while its being built instead of bolted as an after-thought.