Description: Web threat modeling is a systematic process used to identify and mitigate potential threats to web applications. This approach allows developers and security teams to anticipate possible vulnerabilities and attacks, facilitating the implementation of appropriate security measures from the early stages of development. By identifying critical assets, assessing potential attack vectors, and prioritizing risks, threat modeling helps create more secure and resilient applications. This process focuses not only on external threats, such as SQL injection attacks or cross-site scripting (XSS), but also considers internal threats and configuration errors that could compromise application security. The relevance of threat modeling lies in its ability to provide a clear view of the risks associated with an application, allowing development and security teams to work collaboratively to address these issues before they become security incidents. In a digital environment where threats are becoming increasingly sophisticated, threat modeling has become an essential practice to ensure the integrity, confidentiality, and availability of data in web applications.