ThreatScope — DREAD Risk Analysis (@sanjana123-b & @arman080325)
A web application for performing DREAD threat modeling on systems/applications. Features auto-calculated DREAD scores, risk level assignment, CSV report exports, and an interactive aggregate dashboard.
The Problem
Threat modeling often relies on static, disconnected spreadsheets. Organizations need a dynamic way to track Damage, Reproducibility, Exploitability, Affected Users, and Discoverability (DREAD), while having an intuitive dashboard to monitor critical risks.
Architecture & Approach
Collaborated on building a Django-based application where @sanjana123-b handled the core DREAD logic, and I implemented a massive frontend overhaul. Introduced dynamic Light/Dark mode with no FOUC, glassmorphism UI components, fluid animations, and Custom User Profiles with live FileReader avatar previews.
Engineering Challenges & Solutions
- Preventing the 'flash of unstyled content' (FOUC) when toggling between Light and Dark mode using an inline IIFE
- Implementing a live circular preview for avatar uploads using custom JavaScript FileReader
- Merging a 5,100+ line UI redesign flawlessly without breaking the 8 automated backend tests
Outcome & Results
A fully responsive, modern threat modeling application running in production with a custom theme and fully functional DREAD scoring engine.
Lessons Learned
Cross-functional collaboration requires careful PR boundaries. By isolating the UI redesign into a dedicated branch and writing a detailed 5,100-line PR, we prevented backend regressions while massively upgrading the user experience.
