Gram

Gram is Klarna's own threat model diagramming tool developed internally by Klarna's Secure Development team. It is a web app for engineers to collaboratively create threat models for their systems, providing a easy-to-understand way to document a system as a dataflow diagram with threats/controls attached.

Features ✨

• Fully featured diagramming tool specialized for threat modeling.

• Collaborative editing with multiple users over websocket

• Tightly couples to your system/asset inventory

• Automatic suggestions for threats and controls based on your tech stacks

• Review system for use by your Security Champions and to ensure quality models

• Integration for boring corporate stuff like Jira and SSO (Okta)

Getting Started 🚀

See Quick Start.

How to contribute 🙋

See our guide on contributing.

Release History 📜

See our changelog.

<!-- ## Thanks to --> <!-- TODO: need to grab these from old repo somehow + ideally automate -->

Contributors 🌟

<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section --> <!-- prettier-ignore-start --> <!-- markdownlint-disable --> <table> <tbody> <tr> <td align="center" valign="top" width="14.28%"><a href="https://ruel.me/"><img src="https://avatars.githubusercontent.com/u/480039?v=4?s=100" width="100px;" alt="Ruel"/><br />_<b>Ruel</b></a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=ruel" title="Code">💻</a> <a href="#projectManagement-ruel" title="Project Management">📆</a></td> <td align="center" valign="top" width="14.28%"><a href="https://joakim.uddholm.com/"><img src="https://avatars.githubusercontent.com/u/298627?v=4?s=100" width="100px;" alt="Joakim Uddholm"/><br />_{<b>Joakim Uddholm</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=Tethik" title="Code">💻</a> <a href="#projectManagement-Tethik" title="Project Management">📆</a> <a href="#talk-Tethik" title="Talks">📢</a></td> <td align="center" valign="top" width="14.28%"><a href="https://github.com/idoo"><img src="https://avatars.githubusercontent.com/u/738921?v=4?s=100" width="100px;" alt="Ivan Verevkin"/><br />_{<b>Ivan Verevkin</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=idoo" title="Code">💻</a></td> <td align="center" valign="top" width="14.28%"><a href="https://ar.linkedin.com/in/lucas-berner-89865339"><img src="https://avatars.githubusercontent.com/u/7293607?v=4?s=100" width="100px;" alt="Luke Berner"/><br />_{<b>Luke Berner</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=lukeber4" title="Code">💻</a> <a href="#projectManagement-lukeber4" title="Project Management">📆</a></td> <td align="center" valign="top" width="14.28%"><a href="https://franka.tech/"><img src="https://avatars.githubusercontent.com/u/2796920?v=4?s=100" width="100px;" alt="Franka"/><br />_{<b>Franka</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=vsmart" title="Code">💻</a></td> <td align="center" valign="top" width="14.28%"><a href="https://github.com/ErikBavenstrand"><img src="https://avatars.githubusercontent.com/u/19384305?v=4?s=100" width="100px;" alt="Erik Båvenstrand"/><br />_{<b>Erik Båvenstrand</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=ErikBavenstrand" title="Code">💻</a></td> <td align="center" valign="top" width="14.28%"><a href="https://github.com/kuramsai"><img src="https://avatars.githubusercontent.com/u/6891487?v=4?s=100" width="100px;" alt="Sai Kiran Goud"/><br />_{<b>Sai Kiran Goud</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=kuramsai" title="Code">💻</a></td> </tr> <tr> <td align="center" valign="top" width="14.28%"><a href="https://github.com/Tyouxik"><img src="https://avatars.githubusercontent.com/u/65331057?v=4?s=100" width="100px;" alt="Tyouxik"/><br />_{<b>Tyouxik</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=Tyouxik" title="Code">💻</a></td> <td align="center" valign="top" width="14.28%"><a href="https://klarna.github.io/"><img src="https://avatars.githubusercontent.com/u/394540?v=4?s=100" width="100px;" alt="Klarna"/><br />_{<b>Klarna</b>}</a><br /><a href="#financial-klarna" title="Financial">💵</a> <a href="#business-klarna" title="Business development">💼</a></td> <td align="center" valign="top" width="14.28%"><a href="https://it.linkedin.com/in/gdiener"><img src="https://avatars.githubusercontent.com/u/8479033?v=4?s=100" width="100px;" alt="Gabriele"/><br />_{<b>Gabriele</b>}</a><br /><a href="#plugin-gadiener" title="Plugin/utility libraries">🔌</a> <a href="https://github.com/klarna-incubator/gram/commits?author=gadiener" title="Code">💻</a></td> <td align="center" valign="top" width="14.28%"><a href="https://github.com/MissMuffin"><img src="https://avatars.githubusercontent.com/u/2961854?v=4?s=100" width="100px;" alt="MissMuffin"/><br />_{<b>MissMuffin</b>}</a><br /><a href="#design-MissMuffin" title="Design">🎨</a></td> <td align="center" valign="top" width="14.28%"><a href="https://github.com/Ogglas"><img src="https://avatars.githubusercontent.com/u/4015237?v=4?s=100" width="100px;" alt="Oscar Andersson"/><br />_{<b>Oscar Andersson</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=Ogglas" title="Documentation">📖</a></td> <td align="center" valign="top" width="14.28%"><a href="http://pulko-app.com"><img src="https://avatars.githubusercontent.com/u/38206129?v=4?s=100" width="100px;" alt="Fedor Tkachenko"/><br />_{<b>Fedor Tkachenko</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=Pulko" title="Documentation">📖</a> <a href="https://github.com/klarna-incubator/gram/commits?author=Pulko" title="Tests">⚠️</a></td> <td align="center" valign="top" width="14.28%"><a href="https://github.com/lodi-g"><img src="https://avatars.githubusercontent.com/u/4528943?v=4?s=100" width="100px;" alt="Grégoire Lodi"/><br />_{<b>Grégoire Lodi</b>}</a><br /><a href="https://github.com/klarna-incubator/gram/commits?author=lodi-g" title="Code">💻</a></td> </tr> </tbody> </table> <!-- markdownlint-restore --> <!-- prettier-ignore-end --> <!-- ALL-CONTRIBUTORS-LIST:END --> <!-- prettier-ignore-start --> <!-- markdownlint-disable --> <!-- markdownlint-restore --> <!-- prettier-ignore-end --> <!-- ALL-CONTRIBUTORS-LIST:END -->

License ⚖️

Copyright © 2025 Klarna Bank AB

For license details, see the LICENSE file in the root of this project.

<!-- Markdown link & img dfn's -->