Security & identity templates
Authentication, access control, threat response and compliance flows for security and platform teams. Every one opens as a real, editable diagram — restyle it, extend it and export it as your own. See also the system architecture diagram tool.
All 13 security & identity templates
OAuth 2.0 login with PKCE
The authorization-code-with-PKCE flow a single-page or mobile app uses to sign a user in without a client secret — the standard picture for any SSO integration review.
MermaidSecure password reset flow
A password reset that resists account takeover: rate limits, single-use expiring tokens, and session revocation — used in security reviews and auth implementation.
MermaidAccess request & approval (least privilege)
How an employee gets access to a system: request, manager and owner approval, time-bound grant, and periodic recertification — the core of an IAM governance process.
MermaidSecurity incident response (NIST lifecycle)
Detection through lessons learned, following the NIST preparation-detection-containment-eradication-recovery lifecycle. A standard SOC and CISO reference diagram.
MermaidVulnerability management lifecycle
Scan, prioritise by exploitability, patch within SLA, verify — the loop every security team runs and auditors ask to see.
MermaidZero-trust access decision
Every request is evaluated on identity, device posture and context before reaching an app — the policy decision flow behind a zero-trust architecture.
MermaidSecrets & key rotation
Rotating a database password or API key without downtime using dual credentials — a common platform-engineering runbook.
MermaidPhishing report & response
From the employee "report phish" button through analysis, mailbox purge and account reset — used by SOC teams and security awareness programs.
MermaidSOC 2 audit readiness
Scoping, control design, evidence collection and the audit window — the path a SaaS company follows to its first SOC 2 Type II report.
MermaidAPI request authentication & authorization
How a backend validates every API call: key or JWT, scopes, rate limits and audit — useful for API design reviews.
MermaidMFA enrollment flow
How users enrol in multi-factor authentication: prompt at sign-in, choose passkey, authenticator app or SMS, verify the factor and save recovery codes.
MermaidSIEM alert triage
How a SOC analyst triages a SIEM alert in Splunk, Sentinel or Elastic: enrich, check for false positives, scope impact, and escalate to incident response.
MermaidRansomware incident response
A ransomware response playbook: detect and isolate, activate the incident team, assess scope, preserve evidence, restore from clean backups and notify regulators.
Mermaid