OWASP Cumulus - Threat Modeling the clouds

OWASP Cumulus is a gamified approach to integrating security into cloud and DevOps teams. As a variant of the popular card game Elevation of Privilege by Adam Shostack, Cumulus enables teams to threat model DevOps systems.

Cumulus categorizes threats into five key areas, reflected as game suits:
• Access & Secrets
• Delivery
• Recovery
• Monitoring
• Resources

Developed and supported by TNG Technology Consulting, Cumulus helps DevOps teams enhance their security through collaboration and discussion and seamlessly integrates into agile development processes.

Threat model the Ops of DevOps!