Correlate threat models

Last updated: Sep 23, 2026

---

The Design Map section provides you with a correlation between your threat model and the vulnerabilities Fluid Attacks has detected in your system. These threat matches are shown to you irrespective of whether such vulnerabilities have a 'Vulnerable' or 'Safe' status. Thanks to the information in this section, you can prioritize vulnerability remediation strategically, focusing on those flaws that pose the greatest risk to your business as defined by your threat model.

See the threat matches

After you provide an appropriately formatted file, Fluid Attacks processes it in the background. While this is underway, Design Map shows a message indicating that your file is being processed.

Once processing finishes, you see one of the following:

• The Threat Matches table, described below, if at least one correlation was found.
• A message indicating that no correlatable threats were found in your file(s).
• A message indicating that the process could not be completed. If you see this, try uploading your file again; if the problem persists, contact us.

The table in Threat Matches shows you the following information:

• Threat: The detailed descriptions of threats to your business as provided in your model
• Correlated weakness: The vulnerabilities from Fluid Attacks' categorization whose descriptions match those of the threats in your model

  The value 'No correlation' means that the threat does not match any of Fluid Attacks' defined categories.

• Category: The names of the categories where Fluid Attacks has included the weaknesses
• Severity: The default CVSS scores Fluid Attacks has assigned to the related vulnerabilities
• Total vulnerabilities: The total paths in your system where the weaknesses have been present

  A zero in Total vulnerabilities means that Fluid Attacks has not found vulnerabilities in your system related to the threat in question.

• Status: Total vulnerabilities by their Status:
  • Closed: Vulnerabilities that are no longer present
  • Open: Vulnerabilities that are present

Export the threat matches table

Click on the Export button next to the Threat Matches table to download its contents as an XLSX file, with one row per threat and the same columns described above.

How Fluid Attacks uses your threat model files

Fluid Attacks may use the files you upload to deliver Design Map and to improve the features and models behind it, in accordance with our Terms of Use.

Our models are built to classify and correlate threats. They are not designed to reproduce the content of your files, and your content is never shown to other clients. AI providers that help process your files do so under zero data retention terms.

Manage threat model files

You need to upload at least one correctly formatted spreadsheet detailing your threat model so that Fluid Attacks can do the correlation with the reported vulnerabilities. The name(s), description(s), and upload date(s) of those resources are shown in the table under Files.

• File: The spreadsheet's name
• Description: Your team's concise account of the file's content
• Date uploaded: When the spreadsheet was added to the platform

Upload threat model files

When you have a spreadsheet with your threat model that is appropriately formatted, you can add it by following these steps:

1. Navigate to Design Map

2. Click on the Add/Add file button.

   

3. Upload a spreadsheet with the .xlsx or .xls extension and write a brief description of the file's contents (maximum 200 characters).

   

4. Click on Continue.

When the analysis is done, you can see the results under Threat Matches.

Delete threat model files

Follow these steps to delete threat model files:

1. Navigate to Design Map.

2. Under Files, select the file(s) using the checkbox(es) and click on the Delete button.

   

3. Acknowledge that you understand that once the file is removed, threat matches are recalculated with any files left. Click on the checkbox and then Confirm.