---
title: "Lola"
description: "1 posts about Lola, summarised, each linking to the original."
---

# Lola
> 1 posts about Lola, summarised, each linking to the original.

## Articles

### [AI threat modeling shouldn't be a bottleneck, so we open sourced ours](https://yomu.fyi/post/ai-threat-modeling-shouldn-t-be-a-bottleneck-so-we-open-sourced-ours.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Katie Mulliken, Jon Weiser, Judy Kelly
- Published: Sep 21, 2026
- Type: Announcement

The post announces the open-sourcing of agentic-threat-modeling, an AI-assisted threat-modeling module for Claude Code, Cursor, and Gemini CLI, built to address the bottleneck of security teams reviewing AI-generated code. It runs on Lola, an open source package manager for AI contexts, and profiles likely attackers, generates narrative attack scenarios grounded in actual code, and checks them against six structured threat modeling frameworks (STRIDE, PASTA, LINDDUN, attack trees, and more). The module ties every finding to a specific file and line of code, as shown in a real-world example against a file upload endpoint. It’s designed to produce structured output for AI-assisted triage, though that pipeline isn’t built yet. The team open sourced it because the problem isn’t unique to them, and it’s available in RedHatProductSecurity/agentic-threat-modeling and LobsterTrap/lola.