
CAPEC™ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.
Checked October 2026.
Common Attack Pattern Enumeration and Classification (CAPEC™) is a community resource that provides a comprehensive dictionary of known patterns of attack employed by adversaries to exploit weaknesses in cyber-enabled capabilities. It helps analysts, developers, testers, and educators enhance defenses by advancing community understanding of how adversaries operate.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about CAPEC: features, pricing and alternatives.
CAPEC is a product in the Threat Modeling category. It covers Cyber Threat Intelligence.
CAPEC is free. Download and setup instructions are at https://capec.mitre.org/.
Alternatives to CAPEC listed on CybersecTools:
Compare all CAPEC alternatives at https://cybersectools.com/alternatives/capec
CAPEC is available as cloud. It is listed for startup, smb, mid-market and enterprise organizations. It is free.
Side by side: features, pricing model and the company behind each one.
Automated runtime threat modeling tool for DevSecOps pipelines.
Consulting service translating business objectives into threat models & risk scenarios.
Risk-driven cybersecurity DevOps platform for automotive product lifecycle
AI-driven threat modeling for identifying security risks in design phase
AI-powered tool that analyzes dev tickets for security risks.
Automated continuous threat modeling platform that enforces security at design time.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best Application Security Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,027 products.
Connect your AI