Most security bugs are cheap to prevent on a whiteboard and expensive to fix in production. Threat modelling is a short, structured conversation about what you are building, how it could be attacked and what you will do about it.