Make security tradeoffs visible in architecture, from system boundaries to prioritized mitigations and residual risk
Explain when design-level threat modeling applies and sketch a baseline system for analysis.
Draw a data flow diagram and identify boundaries where threats concentrate in an architecture.
Generate a complete STRIDE threat set and map each threat to a specific system element or interaction.
Analyze attacker paths and prerequisites for a high-impact threat to locate design choke points.
Rank threats using likelihood, impact, detectability, and effort to justify what receives attention first.
Select architecture decisions, integrate them into a full system threat model, and state the remaining risk.
3 sections · 6 lessons
Define the design-level scope and represent data flows and trust boundaries that reveal where threats concentrate in the architecture.
2 lessonsApply STRIDE to system elements, then build attack trees that expose attacker paths, prerequisites, and high-value design choke points.
2 lessonsEvaluate threats with a practical rubric, choose architecture decisions, and assemble a defensible end-to-end model with residual risk.
2 lessonsDesign-level threat modeling examines security risks while a software system is still an architecture, not an implementation. This course develops a structured way to represent system boundaries, analyze threats, choose design decisions, and produce a defensible end-to-end threat model. It is suited to system designers and engineers who need security reasoning grounded in architecture.
The course covers baseline system modeling, data flow diagrams, trust boundaries, STRIDE analysis, attack trees, threat prioritization, mitigation selection, architecture decisions, and residual risk in a full-system threat model.
From project managers and operators to founders, analysts, and teams adopting AI, Fenzo is for people who want to get better at the work they already do.
Anything from using AI for project planning and analysis to improving workflows, decision-making, communication, and delivery. If you can describe the skill or task, Fenzo can build a course around it.
Yes. Tell Fenzo what you do, what you’re trying to accomplish, and where you’re stuck, and Fenzo will shape the course around your role, your goals, and the work you actually have to do.
No. Fenzo adapts to your starting point, so you can begin with the fundamentals or jump straight into more advanced work.
Yes. Fenzo for Business puts the whole team on one plan — shared seats, courses you can assign, and reporting on who has finished what.
See Fenzo for BusinessYou start by describing your goal or taking a short skill benchmark. Fenzo uses that context to identify gaps and shape the learning experience around them.
Yes, Fenzo works in your mobile browser.
Something to operate in every section.
Three findings from decades of learning research shaped how every Fenzo lesson is built.
Average pass rate · Freeman et al., PNAS 2014
What the science says
Students in lecture-only classes are 1.5× more likely to fail.
How Fenzo does it
Every Fenzo lesson is interactive. No passive reading or watching, ever.
You work through itAI does it for you
Skill retention over time · with vs. without practice
What the science says
Offloading thinking to AI erodes the very skills you’re trying to build.
How Fenzo does it
Fenzo makes you do the thinking — guided, but never done for you.
Retrieval practiceRe-reading
Long-term recall · retrieval vs. re-reading
What the science says
Recalling information beats re-reading it for building durable understanding.
How Fenzo does it
Lessons weave in quizzes and recall prompts, so it sticks.