TLCTC Reference SDLC Architectures
Official reference JSON models for the TLCTC SDLC Threat Modeling App. Download these templates to bootstrap your threat modeling process with pre-configured components and threat mappings.
IdP
Typical authentication topology for a SaaS application integrating with an external Identity Provider (e.g., Google) using OAuth 2.0 / OpenID Connect.
Healthcare Patient Portal
HIPAA-compliant patient portal with EHR integration, patient mobile app, and third-party lab results. Demonstrates PHI protection and healthcare-specific threats.
Multi-Tenant SaaS Platform
B2B SaaS platform with tenant isolation, SSO integration, and usage-based billing. Demonstrates multi-tenancy security boundaries and OAuth flows.
Financial Trading Platform
High-frequency trading system with market data feeds, order execution, and regulatory reporting. Emphasizes real-time threats (VC-4) and financial data integrity.
Corporate Network Infrastructure
Enterprise network with Active Directory, VPN, endpoint management, and cloud hybrid connectivity. Demonstrates bridge cluster threats (#8, #9) and lateral movement.
Mobile Banking Application
Consumer mobile banking with biometrics, card controls, payments, and fraud detection. Demonstrates PCI-DSS considerations and mobile-specific threats.
Need Everything?
Download all 6 reference architectures in a single zip archive for offline analysis.