SentinelOn complies with all standards of Threat Modeling defined in Threat Modeling by Swiderski and Snyder, copyright 2004 by Microsoft Corporation. SentinelOn includes the definition and management of Profiles, Threats, Vulnerabilities, related Risks and standardized attributes, e.g. S.T.R.I.D.E. and D.R.E.A.D. designations and Trust Levels.

• Profiles can be defined for any combination of Threats and Vulnerabilities 
• Threats and Vulnerabilities are defined separately and can be attached in any combination, eliminating redundancy and supporting assessment and monitoring across a variety of projects, systems and applications
• Profiles can be linked to any number of defined systems and applications as well as any number of projects
• Profiles can be owned, scheduled, assigned and monitored separate from other SentinelOn components
• Risks are defined and linked to Vulnerabilities, Projects and other components
• Project Risks are monitored by SentinelOn’s Risk Agent
• All Risks can be addressed by defined contingencies and executable contingency processes
• SentinelOn provides optional review and approval with electronic signature
• SentinelOn provides Change Logs to track all status and definitional changes