diff --git a/README.md b/README.md
index bd0323e..a4942bc 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,6 @@
 # Full-Stack-Web-App-with-Login
 
 This is a full-stack CRUD web app developed with a focus on prioritizing the security of the application.
+
+
+The root folder has Thread Modeling document of a similar [webapp](https://github.com/artiwari07/csc424_app). react-frontend and expressjs-backend also have their own SBOM files in their respective folders.
\ No newline at end of file
diff --git a/Threat modeling.pdf b/Threat modeling.pdf
new file mode 100644
index 0000000..2254c65
Binary files /dev/null and b/Threat modeling.pdf differ