ThreatMatrix
Developer ToolsReference

ThreatMatrix

Michael Butt · released 18 Dec 2025 · Open in App Store ↗

Revenue 30d not estimated
Downloads 30d not estimated
Rating no reviews

No in-app products collected for this app.

RatingPrice
United Arab Emirates<1%0AED 12.99 $3.54
Afghanistan<1%0$2.99
Antigua And Barbuda<1%0$2.99
Anguilla<1%0$2.99
Albania<1%0$3.99
Armenia<1%0$3.99
Angola<1%0$2.99
Argentina<1%0$2.99
Austria<1%0€2.99 $3.45
Australia<1%0A$4.99 $3.51

The store shows a different set in every country

Description

Instant MITRE ATT&CK Lookup for Security Operations

NO SUBSCRIPTION. NO TRACKING. 100% OFFLINE.

ThreatMatrix gives SOC analysts, incident responders, and threat hunters fast, offline access to the full MITRE ATT&CK framework. It is built for secure, air-gapped, and time-critical environments where internet access may not be available.

WHY SECURITY PROFESSIONALS CHOOSE THREATMATRIX

ThreatMatrix opens instantly, works entirely offline, and provides a fast, clean, native experience on iPhone, iPad, and Mac.

Works fully offline after install

Instant startup with no loading delays

No analytics, tracking, or third-party services

CloudKit sync using your private iCloud

Native performance on iOS, iPadOS, and macOS

One-time purchase with no subscription

KEY FEATURES

Speed and Performance

Instant technique lookup during investigations

Offline database preprocessed at build time

Deep-link support using threatmatrix://

Spotlight integration for system-wide search

Works Anywhere

Fully functional without internet

Ideal for air-gapped SOCs and secure facilities

No network calls or external dependencies

Complete MITRE ATT&CK v18.1 Coverage (2025)

800+ techniques with detection guidance and mitigations

140+ threat groups including APT29, Lazarus Group, and others

700+ software and malware families with mapped TTPs

40+ mitigations with actionable defense recommendations

Full sub-technique support (for example: T1078.001)

Smart Search and Discovery

Fast full-text search across all ATT&CK objects

Auto-linking of MITRE technique IDs in descriptions

Recently viewed history for quick reference

Professional Content Display

Clean, readable interface with selectable text

Detection guidance and data source details

One-tap access to external references

Tactic mappings and kill chain visualization

Bookmarks, Notes, and Organization

Bookmark techniques and organize using folders

Add personal notes for detections or incident observations

Automatic CloudKit sync across your devices

Works offline and syncs when online

Native Platform Integration

Context menus for quick actions

Copy technique IDs or deep links

Share via Messages, Mail, or AirDrop

iOS home screen widgets for quick access

Research Progress Tracking

Track techniques reviewed and groups analyzed

Maintain learning streaks

Visual progress tracking across tactics and matrices

Achievement milestones for skill development

BUILT FOR SECURITY PROFESSIONALS

Suitable for:

SOC Analysts

Incident Responders

Threat Intelligence Analysts

Security Engineers

Penetration Testers and Red Team Operators

Security Researchers

Students studying for CISSP, CEH, Security Plus, and OSCP

PLATFORM SUPPORT

Native iOS and iPadOS app (iOS 17 or later)

Full Dark Mode support

PRIVACY AND OFFLINE

No analytics or tracking

No personal data collection

No third-party SDKs

Fully offline functionality

Syncs using your private iCloud account

DATA SOURCE

Based on MITRE ATT&CK v18.1 (2025).

Data is preprocessed for fast offline loading.

Regular updates planned to match MITRE releases and add new features.

ONE-TIME PURCHASE

No subscription. All features included.

LEGAL NOTICE

MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

ThreatMatrix is an independent application and is not affiliated with, endorsed by, or sponsored by The MITRE Corporation.

All content is provided as-is. The ATT&CK framework does not represent all possible adversary behaviors.

Download ThreatMatrix and access the MITRE ATT&CK framework instantly, even in secure or offline environments.