We've been busy! This past month or so has brought a brand-new library type, smarter search, richer diagrams, and a much friendlier first-run experience. Here's everything worth knowing.
🗂️ Introducing the Information Asset Library
Your threats and controls now have a companion: a dedicated Information Asset Library. Catalogue the data and systems that matter most, link assets directly to the threats that target them, and jump between the two with a single click inside any model.
It works everywhere you do: in the UI, via the CLI, and through our MCP integration. You can also import and export assets to move them between environments or seed a new org in seconds.
🔍 Search That Actually Finds Things
Finding the right threat or control across dozens of models used to mean a lot of clicking. Now there's platform-wide search with a keyword-first experience and type-tagged results so that you can tell threats, controls, and assets apart at a glance. A new search box right on your org overview deep-links you straight to the results.
🎨 Diagrams That Come Alive
Data Flow Diagrams got a major upgrade:
Drag elements anywhere on the canvas to better understand complex diagrams
Trust zones resize intelligently. Expanding as you drag elements toward their edges and snapping back as you move them in
Click a flow label to open its details instantly
Jump from the diagram straight to the threats and controls linked to any element
Parallel flows between the same two nodes now render as clean, distinct, labelled curves
And new this month: Mermaid diagram support. Drop a mermaid block into your threat model, and we'll render it client-side, right alongside your DFDs, with diagram counts surfaced so you always know what's in a model.
🚀 A Warmer Welcome
New to Threatcl (or onboarding a teammate)? We've added a guided getting-started tour that walks you through the essentials. Complete with a friendly lil’ cloud-pal to show you the ropes. Multiple tours mean we can guide you through new features as they land, not just on day one.
🛡️ Spot Your Coverage Gaps Faster
Control Coverage now includes an expandable "missing controls" tray, so the gaps in your defences are front and centre, and we've surfaced this view at the organisation level, giving you a bird's-eye view of where coverage is thin across all your models.
✏️ A Smarter HCL Editor
Writing threat models by hand just got easier with a new reference panel and inline autocomplete built into the HCL editor. Less guessing, fewer typos, faster modelling.
📱 Better on Mobile
Reviewing models on the go? Library views are now mobile-friendly, with drawer-based folder navigation and a clean card list. Controls show their linked threats inline so you never lose context on a small screen.
✨ Plus a Few More Things
Version diffing: every HCL upload now captures a per-entity diff, so you can see exactly what changed between versions
Faster, leaner infrastructure behind the scenes to keep things snappy
Updated spec support (threatcl spec v0.2.8) and an early Claude plugin for AI-assisted threat modelling
Questions or feedback? We'd love to hear what you'd like to see next. Just reply to this email.
-Christian and the Threatcl Cloud Team