Oplane threat modeling platform documentation

Oplane is AI-powered threat modeling that finds architectural security risks in your pull requests, before they reach production. New here? Start with the quick start, or pick the route that matches what you’re here to do.

Quick start

Connect a repository and get your first review, or run a threat model from your IDE.

Choose your route

I'm evaluating Oplane's security

For security leads and reviewers. Start with how reviews work, then see how teams gate merges and track posture in Prove.

I'm an engineer getting reviews

Read the review comment on your PR or MR, respond to requirements, and apply suggested fixes.

I'm setting up my organisation

For org admins. Connect GitHub or GitLab, then set up workspaces, roles, and API keys in Administration.

I'm connecting an agent or tool

Connect your coding agent through MCP, then look up every tool in the Reference.

How the docs are organised

Section	What you’ll find
How it works	What triggers a review, what it produces, and how workspaces behave
Connect	GitHub, GitLab, self-managed GitLab, and Miro
Find	Reviews on pull and merge requests, responding to requirements, and MCP
Fix	Reviewing and applying the code fixes Oplane suggests
Prove	Merge gating and security posture analytics
Administration	Workspaces, roles, linked accounts, and API keys
Reference	Statuses, severity, and every MCP tool

⌘I