Threat modeling identifies potential security flaws early in software architecture design. STRIDE offers a structural categorization of threats, while PASTA aligns technical security with business risk assessment.