“But if you can use an open source tool that's for free, then I think that for a beginner, that's a nice place to start.”

Transcript evidence from Steven Wierckx -- The #OWASP Threat Modeling Project.