Skip to content
SPECIFICTION
Get listed

CYMETRIS

cymetris.com

From €99/mo WebAPISelf-hosted
Visit cymetris.com
Spec score 7.9 #2 of 15 in Risk Assessment Software

What it is

CYMETRIS is a cyber risk analysis and TARA platform for work across a product lifecycle. Its guided workflow follows ISO/SAE 21434 and applies automated consistency and logic checks. Teams can inspect attack paths interactively and map risks to components in system architecture, with risk prioritization, collaborative review, templates, frameworks, and multiple modeling methods. CYMETRIS Lite generates audit-ready reports for ISO/SAE 21434 and UN R155. The maker describes AI assistance through MCP for importing architectures, identifying assets, developing attack vectors, and querying TARA datasets in natural language. A public API is intended to connect requirements, architecture, PLM, ticketing, ALM, and reporting systems. Vulnerabilities can be imported from CVE databases, vendor advisories, or internal analyses and mapped to affected components; this capability is described as a selected-customer prototype. Access is available through web, API, or self-hosted deployment. Lite costs €99.00 per month, includes one full TARA project, and allows up to five active projects.

Spec sheet

Purpose
CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle.Read 3 Oct 2026 · cymetris.com
Intended users
The maker describes CYMETRIS Lite as suitable for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs.Read 3 Oct 2026 · cymetris.com
Integrations
The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems.Read 3 Oct 2026 · cymetris.com
Security
The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant.Read 3 Oct 2026 · cymetris.com
Support
Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA.Read 3 Oct 2026 · cymetris.com
Headquarters
CYMETRIS GmbH lists its address in Munich, Germany.Read 3 Oct 2026 · cymetris.com
AI
CYMETRIS says AI assistance via MCP can support architecture import, asset identification, attack vector development, and natural-language queries across TARA datasets.Read 3 Oct 2026 · cymetris.com
Attack paths
The platform offers interactive attack path visualization and maps risks to system architecture components.Read 3 Oct 2026 · cymetris.com
Lite limitation
CYMETRIS Lite collaboration is limited to two users, and the page says it excludes vulnerability management, vertical TARA integration, and enterprise toolchain connectors.Read 3 Oct 2026 · cymetris.com
Named connectors
The Lite page lists Jira, Codebeamer, and Enterprise Architect as examples of enterprise toolchain connectors excluded from Lite.Read 3 Oct 2026 · cymetris.com
Reports
CYMETRIS Lite includes automatic audit-ready reports for ISO/SAE 21434 and UN R155.Read 3 Oct 2026 · cymetris.com
TARA workflow
The platform provides a guided TARA workflow aligned with ISO/SAE 21434 and automated consistency and logic checks.Read 3 Oct 2026 · cymetris.com
TISAX
The About page lists a TISAX assessment ID, AXDY4Y.Read 3 Oct 2026 · cymetris.com
Vulnerability management
CYMETRIS describes importing vulnerabilities from CVE databases, vendor advisories, or internal analyses and mapping them to affected components; the cited release page says the feature was in a selected-customer prototype phase.Read 3 Oct 2026 · cymetris.com

Plans and prices

CYMETRIS Lite €99 a month net €99/month 1 full TARA project included · additional projects net €899/year each, up to 5 active projects · collaboration limited to 2 users Read 3 Oct 2026 · cymetris.com
CYMETRIS Enterprise Priced on request On request Individual project bundles · unlimited users · priority support with dedicated contact and SLA Read 3 Oct 2026 · cymetris.com

Every CYMETRIS plan and price →

Strong points and limits

Strong points

  • Guided TARA workflow aligned with ISO/SAE 21434
  • Interactive attack-path visualization
  • Automatic audit-ready compliance reports
  • Web, API, and self-hosted access
  • Risk prioritization and collaborative review

Limits

  • Lite collaboration limited to two users
  • Lite excludes vulnerability management
  • Lite excludes enterprise toolchain connectors
  • Lite costs €99.00 per month

Who it suits

CYMETRIS Lite is described for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs. Enterprise supports organizations needing unlimited users and dedicated priority support.

Verdict

CYMETRIS combines standards-aligned TARA workflows, architecture-linked attack paths, reporting, and integration options. Lite is constrained to two collaborators and five active projects, while Enterprise pricing is available on request.

Where Specifiction places it

Alternatives to CYMETRISAll alternatives →