Skip to content
SPECIFICTION
Get listed

EnCo SOX ATA

enco-software.com

WebWindows
Visit enco-software.com
Spec score 7.5 #14 of 23 in Threat Modeling Software

What it is

EnCo SOX ATA is an attack tree analysis module in the SOX engineering workbench. It models hierarchical attack paths with logical AND and OR gates and links those trees to TARA threat scenarios. Users score attack steps against feasibility criteria; the module propagates scores through the tree to calculate threat or attack-feasibility levels according to the selected norm and expose critical paths. Threats can move between TARA and ATA, with paths linked by drag and drop. Reusable attack paths can be placed elsewhere in a tree or another analysis. The module connects requirements, system design, TARA and cybersecurity goals, while trace views show requirement relationships and assets can be assigned to elements. Teams can assign tasks, set statuses, track progress and review changes through a central database. Outputs include printed or image-exported diagrams, Excel results and Report Designer documentation. It runs on web and Windows; pricing is on request.

Spec sheet

Purpose
ATA is a top-down method for identifying attack paths from a point of attack to a threat and analyzing those paths.Read 9 Oct 2026 · enco-software.com
Intended users
EnCo describes SOX as a safety and security engineering workbench for multidisciplinary engineering teams and says the company serves automotive, plant engineering, rail, and aerospace industries.Read 9 Oct 2026 · enco-software.com
Platforms
The SOX product information describes a Windows-oriented RCP client and a C-SOX web client; it lists Ubuntu Server or Windows Server for the server environment.Read 8 Oct 2026 · enco-software.com
Integrations
EnCo lists integrations with codebeamer, PTC Windchill, Jama Connect, IBM DOORS, Jira, and Polarion; its integrations page labels Jira as coming soon.Read 9 Oct 2026 · enco-software.com
Support
SOX and licensing queries are handled through EnCo’s Service Desk, which requires registration and active customer status.Read 9 Oct 2026 · enco-software.atlassian.net
Headquarters
Hamburg, GermanyRead 28 Sep 2026 · enco-software.com
Founded
2005Read 28 Sep 2026 · enco-software.com
Company
EnCo Software GmbH says it was founded in 2005 in Hamburg and is headquartered in Hamburg.Read 9 Oct 2026 · enco-software.com
Assets
Project assets can be assigned to any ATA element by drag and drop.Read 9 Oct 2026 · enco-software.com
Attack feasibility
The ATA module calculates an attack feasibility level or threat level depending on the selected norm.Read 9 Oct 2026 · enco-software.com
Attack tree modeling
It supports hierarchical attack trees with logical AND and OR gates and connects attack trees with TARA threat scenarios.Read 8 Oct 2026 · enco-software.com
Collaboration
The product page says analyses use a central database and support multi-user collaboration, change history and progress tracking.Read 8 Oct 2026 · enco-software.com
Data exchange
The ATA page describes importing existing engineering information, exchanging structured data with other systems and exporting attack tree graphics and analysis results; it does not name specific ATA integrations.Read 8 Oct 2026 · enco-software.com
Downloads
Current and legacy SOX downloads are available through the service desk, and access requires registration and administrator approval.Read 9 Oct 2026 · enco-software.atlassian.net
Engineering connections
ATA connects with requirements, system design, TARA and cybersecurity goals, with traceability across related engineering information.Read 8 Oct 2026 · enco-software.com
Export
ATA diagrams can be exported as BMP, GIF, JPG, PNG, RLE, or SVG images and can be printed.Read 9 Oct 2026 · enco-software.com
Hosting
EnCo says the SOX multi-user repository is stored on a MySQL server installed on the customer’s internal server infrastructure; its page also describes a C-SOX web client.Read 8 Oct 2026 · enco-software.com
Platform architecture
EnCo describes SOX as a server database platform supporting centralized project data and simultaneous work by multidisciplinary teams.Read 9 Oct 2026 · enco-software.com
Progress tracking
Users can set an analysis status and assign tasks.Read 9 Oct 2026 · enco-software.com
Reporting
Attack trees can be exported as graphics, results reported in Excel, and project documentation created with the integrated Report Designer.Read 8 Oct 2026 · enco-software.com
Reuse
Transferable attack paths can be reused elsewhere in a tree or in other analyses.Read 8 Oct 2026 · enco-software.com
Standards
The ATA guide describes calculating threat level under SAE J3061 or attack feasibility under ISO 21434, depending on the selected norm.Read 9 Oct 2026 · enco-software.com
Support resources
EnCo’s download page points visitors to its Service Desk for downloads, SOX tutorials, documentation, a knowledge base and support tickets.Read 8 Oct 2026 · enco-software.com
TARA connection
ATA can take over threats from TARA, link threat paths by drag and drop, and return its calculated attack feasibility level to TARA.Read 9 Oct 2026 · enco-software.com
Threat assessment
Users rate attack steps against feasibility criteria, and the software propagates ratings through the tree to calculate threat levels and identify critical paths.Read 8 Oct 2026 · enco-software.com
Traceability
Requirements can be assigned to ATA elements, with their relationships available in the Traces and Trace Graph views.Read 9 Oct 2026 · enco-software.com
Trial and support
EnCo invites visitors to contact the company to test the SOX Modular Workbench without obligation and offers a contact form and email for inquiries.Read 8 Oct 2026 · enco-software.com

Strong points and limits

Strong points

  • Hierarchical trees with AND and OR gates
  • Calculates threat levels and critical paths
  • Links attack trees with TARA scenarios
  • Reusable attack paths and traceability views
  • Exports diagrams and Excel results

Limits

  • Pricing is available only on request
  • Repository requires customer-installed MySQL infrastructure
  • Service Desk access requires registration and approval

Who it suits

It suits automotive, plant engineering, rail and aerospace teams performing traceable attack-path and risk analysis. Centralized, multi-user engineering work is a core fit.

Verdict

EnCo SOX ATA combines attack-tree modeling, TARA linkage, scoring and engineering traceability in one workbench module. Its centralized collaboration and reporting features fit organizations that need structured, reusable analyses.

Where Specifiction places it

Alternatives to EnCo SOX ATAAll alternatives →