Show HN: 10-min AI threat model (STRIDE and MAESTRO), assumption-driven

Hi HN, I built an assumption-driven AI security assessment for teams shipping AI features without a dedicated security team yet.

You paste your AI use case (what it does, data types, vendors, deployment). In ~10 minutes you get a PDF report by email containing: - Trust boundaries + data flows + a threat model diagram (explicitly marked as conceptual/assumption-based) - Threats mapped to STRIDE + MAESTRO (agentic AI) - A risk rating (impact/likelihood) + 5×5 risk matrix - Recommended security controls and compliance mappings (example: EU AI Act, NIST AI 600-1)

Important: we make assumptions (ex: AWS deployment, common patterns) and we call them out in the report so you can correct them.

Link: https://raxit.ai/assessment

Would love feedback on what’s wrong, what’s missing, and what would make this actually useful in a real security review.