An efficient examination of a security threat that may affect a product is enabled. A security information processing device includes threat information model generation means for generating, by use of first threat information including threat information indicating a threat related to security, a threat information model capable of classifying a piece of information as the threat information, collection means for collecting one or more threat information candidates each being a candidate for the threat information, from an information source providing information related to security, and detection means for detecting, by use of information about a component constituting a product and the threat information model, second threat information including the threat information that may affect the product, from the collected one or more threat information candidates.