Creating a Design Review

Ways to start a design review outside of Jira.

In addition to the Jira integration, you can start a design review directly from documents and diagrams.

From a document

Design reviews can be created from:

• Confluence pages

• Google Docs — including directly from within the Google Docs Add-on, matching the existing threat-model workflow

• GitHub Wiki pages

To use a pasted URL instead of browsing for a page, DevArmor can resolve a pasted Confluence or GitHub Wiki URL directly to the matching page.

From diagrams

DevArmor automatically interprets uploaded architecture and data-flow diagrams as part of a design review, and takes any diagrams uploaded previously into account when generating recommendations.

Custom rules

You can create and manage custom rules that guide DevArmor's automated design reviews, in addition to the standard analysis against your organization's threat model.

Memory

Design reviews use your organization's connected memory sources — Confluence pages, Google Docs, and Jira issues you've attached to the project — the same shared organizational context available to Threat Modeler. You can turn memory use on or off per design review from project settings, and DevArmor shows whether memory was actually used for a given review, with an explanation when it wasn't.

Once a review completes, see Review Output & Findings.