Exporting an OTM from Devici

Import from Devici consumes an OTM (Open Threat Model) v0.2.0 JSON document. The export is performed in Devici by any user with View access to the threat model. No SD Elements account is required to produce the export.

Exporting from the Devici canvas

Steps:

  1. In Devici, open the threat model you want to import into SD Elements.

  2. From the canvas toolbar, click Export.

  3. Select OTM (Open Threat Model) from the format dropdown.

  4. Click Download. Devici saves a .otm (JSON) file to your local machine.

Exporting via the Devici API

For automation use cases (CI/CD, scheduled exports, scripted imports), the same export is available via the Devici REST API:

curl -X GET \
  "https://your-org.devici.com/api/v1/threat-models/{threat_model_id}/export?format=otm" \
  -H "Authorization: Bearer $DEVICI_API_TOKEN" \
  -o threat-model.otm

The endpoint returns the same OTM v0.2.0 JSON document that the canvas Export action produces.

What’s in the exported OTM document

The OTM document contains the complete state of the threat model at export time:

Object Type Description

Elements

Every node on the canvas — processes, data stores, external entities, trust boundaries, and sticky notes — with their ref_id, label, and type.

Dataflows

All edges between elements, including source and target handles, direction, label, and edge styling.

Element attributes

All attributes set on each element, both built-in (matched to the Devici codex) and custom (org-specific codex extensions).

Threats

All threats surfaced against elements, tagged with their methodology (STRIDE, LINDDUN, MAESTRO, custom).

Mitigations

All mitigations attached to threats, both built-in and custom codex.

Trust boundaries

Trust boundary nodes with their child elements and parent boundary references.

Canvas layout

Position, size, and color of every node. Used by SD Elements to render the embedded diagram on the Devici tab.

Methodology metadata

The set of threat-modeling methodologies enabled on the source threat model. SD Elements preserves these as filterable tags on the imported Weaknesses.

The OTM specification version is 0.2.0. Older OTM files exported by third-party tools may need a one-time conversion before SD Elements can import them. OTM files exported by Devici are always on the current spec.

Next step

With the .otm file downloaded, continue to Importing into SD Elements.

results matching ""

    No results matching ""