Export
Export your threat models for sharing, review, or compliance documentation.
Formats
| Format | Content | Best for |
|---|---|---|
| Report (HTML) | Full stakeholder report: model structure, controls with implementation status, assurance summary, compliance coverage, risk tiers | Sharing with stakeholders, GRC, CISOs — opens in any browser |
| Same rich report as HTML, rendered as PDF | Printing, archiving, email attachments | |
| CSV | Raw model structure (assets, attackers, COs, assumptions) | Importing into spreadsheets, data analysis, tooling |
How to export
- Go to the Models page or Assurance Dashboard
- Select a model
- Click Report (HTML), PDF, or CSV
The Report and PDF formats include the full enriched report: trust boundaries, assets, attackers, control objectives, implementation controls with traffic-light status, assurance summary (mitigated / at-risk / unassessed), risk tier breakdown, verification status, and compliance coverage (if a framework is selected — shows requirement-level gap analysis).
The CSV format includes the raw model structure: trust boundaries, assets (with security properties), attackers, control objectives, and assumptions.
Jira export
For Jira integration, use the dedicated "Export to Jira" button instead. This creates structured Jira issues rather than a flat document export. Each Jira issue includes mitigation group information in the description to show which controls are alternatives and which are defense-in-depth. See the Integrations section for details.