# Threat Modeling is Measure Twice, Cut Once

DevFeed: [Threat Modeling is Measure Twice, Cut Once](<https://devfeed.tech/articles/threat-modeling-is-measure-twice-cut-once-37042.md>)

Original publisher: [Read original article](<https://shostack.org/blog/threat-modeling-is-measure-twice-cut-once-for-software/>)

Author: Adam

Published: 2023-01-12T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Software](<https://devfeed.tech/topics/software.md>), [Agile](<https://devfeed.tech/topics/agile.md>)

Tags: [agile](<https://devfeed.tech/tags/agile.md>), [code](<https://devfeed.tech/tags/code.md>), [software](<https://devfeed.tech/tags/software.md>)

## AI overview

The article argues that threat modeling applies the "measure twice, cut once" principle to software. Planning and discussing features before implementation can reduce developer rework, dependency costs, communication costs, uncertainty, and wasted computing resources. It also notes that Agile development and prototypes can be useful when early implementation is needed for learning.

## Source excerpt

Threat Modeling is the software version of measure twice, cut once.