How do you conduct threat modeling for a new feature before a single line of code is written at Appfolio?
