Category Validating Threat Mitigations