Threat modeling includes identifying any threats, countermeasures, vulnerabilities, and attacks, that can affect the application to be, early on. In the Sprint 0 phase, the experts analyze your application to be and identify any threats and vulnerabilities that can be caused by the features, designs, or areas’ decisions.