Threat model

Threat modelling is the systematic exercise of identifying who could attack you, how, with what capabilities, and what they're trying to obtain. Standard threat-modelling frameworks (STRIDE, LINDDUN, PASTA) walk through assets, threat actors, attack vectors, and likely outcomes.

For offshore hosting customers, the threat model determines the right host. A journalist facing a hostile state-level adversary needs a different setup from a small-business operator avoiding routine DMCA harassment. State-level adversaries have MLAT reach, signals-intelligence capabilities, and patient supply-chain attacks; the right host is one with thin treaty coverage, strong physical security, and minimal logs (Iceland, Switzerland, Panama). DMCA-troll adversaries are mostly economic; even an EU offshore host (NL, RO, BG) defeats them through procedural friction. Match the host to the threat.