Threat model
Structured work on "who could attack us, how, and what do we do about it".
Frameworks: STRIDE (Microsoft), DREAD, PASTA. Questions: which assets must be protected? Who are the attackers? What are the entry points? Done early in design, updated alongside the codebase. Prevents wrong architecture — cheaper than fixing later.