Dexfense

Know your attack surface.Build your defense.

Map your system architecture to MITRE ATT&CK® and get a prioritised, exportable security defense plan — in minutes.

MITRE ATT&CK® mapped 70+ components covered NIST CSF 2.0 Gap Analysis Exportable PDF reports
70+ Security Components
200+ ATT&CK® Techniques
NIST CSF 2.0 Aligned
Free to Use
Home/Community Library

Community Architecture Library

Reference architectures for common technology stacks, pre-mapped to MITRE ATT&CK® and OWASP threats. Use any template as the starting point for your own security assessment.

10 Dexfense-reviewed10 templates

Secure AI Agent with RAG & MCP

Reviewed

Reference architecture for an AI assistant using document retrieval, agent memory, MCP tool connectors and external APIs.

AI & AgentsEnterprise

10 components · By Dexfense · v1.0 · July 2026

Multi-Tenant SaaS Web Application

Reviewed

Standard architecture for a cloud-hosted SaaS product with REST APIs, SQL database, CDN, WAF and OAuth/SSO for customer authentication.

Cloud & SaaSWeb ApplicationsEnterprise

13 components · By Dexfense · v1.0 · July 2026

Microsoft 365 Small Business

Reviewed

Reference architecture for a Microsoft 365 deployment covering cloud identity, email, cloud storage, MFA and Windows endpoints.

Microsoft 365Small Business

10 components · By Dexfense · v1.0 · July 2026

AWS Serverless Application

Reviewed

Cloud-native application on AWS Lambda, API Gateway, Aurora/DynamoDB, S3 and CloudWatch with a GitOps CI/CD pipeline.

Cloud & SaaSEnterprise

15 components · By Dexfense · v1.0 · July 2026

E-commerce Platform (PCI DSS Relevant)

Reviewed

Online retail architecture covering web storefront, product and order APIs, customer database, CDN, WAF and PCI DSS-relevant audit logging.

Web ApplicationsEnterpriseSmall Business

14 components · By Dexfense · v1.0 · July 2026

WordPress Business Website

Reviewed

Security architecture for a business website on WordPress with managed hosting, CDN, WAF and automated backup.

Web ApplicationsSmall Business

10 components · By Dexfense · v1.0 · July 2026

Kubernetes-Hosted Application

Reviewed

Container-orchestrated microservices on Kubernetes with a service mesh, CI/CD pipeline, RBAC and centralised logging.

Cloud & SaaSEnterprise

15 components · By Dexfense · v1.0 · July 2026

Hybrid Office Network

Reviewed

On-premises and cloud-connected corporate network with Active Directory, VPN, EDR/XDR, firewalls and managed Windows workstations.

EnterpriseSmall Business

14 components · By Dexfense · v1.0 · July 2026

IoT Monitoring and Telemetry System

Reviewed

Connected device telemetry architecture with IoT sensors, time-series database, REST API and cloud storage ingestion pipeline.

IoT & OTEnterprise

11 components · By Dexfense · v1.0 · July 2026

University Research Network

Reviewed

Mixed academic environment with federated identity, campus wireless, shared research storage, VPN and Linux research servers.

EducationEnterprise

15 components · By Dexfense · v1.0 · July 2026

Community templates provide architecture-based security guidance. They do not confirm vulnerabilities or replace technical validation. Product and version validation is still required.