PTA is a calculative threat modeling methodology and risk assessment tool that assist security consultants and software developers in performing risk assessment of their systems and building the most effective risk mitigation policy for their systems.