Skip to content
SPECIFICTION
Get listed

KAVACH

agnile.com

Windows
Visit agnile.com
Spec score 7.7 #8 of 23 in Threat Modeling Software

What it is

KAVACH is an automotive cybersecurity engineering workspace connecting vehicle architecture to traceable cybersecurity evidence across ISO/SAE 21434 workflows. Its TARA process links assets, damage and threat scenarios, attack paths, risk assessment and treatment, security goals, controls, and evidence. The workspace includes architecture context, attack-tree editing, a traceability hub, vulnerability monitoring, a cybersecurity case, an R155 compliance matrix, and report generation. SBOM and vulnerability signals can connect affected components with assets, threats, and treatment decisions. The current release focuses on ISO/SAE 21434 Clauses 5–15, UNECE R155/R156 evidence, AIS 189/AIS 190 readiness, and post-production monitoring. Deployment choices are a customer-controlled desktop workspace, on-premise deployment, or a customer-dedicated EU cloud VPC. Manual engineering, deterministic automation, and optional private AI are available. Generated work products are structured drafts requiring engineer review and customer approval. Pricing is scoped per programme.

Spec sheet

Purpose
KAVACH is an automotive cybersecurity engineering workspace supporting ISO/SAE 21434 lifecycle workflows from vehicle architecture to traceable evidence.Read 7 Oct 2026 · agnile.com
Product
KAVACH is an automotive cybersecurity engineering workspace for connecting vehicle architecture to cybersecurity evidence.Read 8 Oct 2026 · agnile.com
Audience
KAVACH is built for OEMs and Tier-1 suppliers, including automotive cybersecurity teams and programme engineers.Read 7 Oct 2026 · agnile.com
Deployment
Deployment options include a customer-controlled desktop workspace, on-premise deployment, and a customer-dedicated EU cloud VPC.Read 7 Oct 2026 · agnile.com
Integrations
The maker names DOORS, Polarion, Jira, and AUTOSAR ARXML as toolchain context or integration targets, where applicable.Read 8 Oct 2026 · agnile.com
Security
Agnile states it is certified to ISO 9001:2015 and ISO/IEC 27001:2022.Read 7 Oct 2026 · agnile.com
Support
Program Deployment includes onboarding, training, governance setup, and Agnile engineering support across the programme.Read 8 Oct 2026 · agnile.com
Headquarters
Bengaluru, IndiaRead 28 Sep 2026 · agnile.com
Founded
2023Read 28 Sep 2026 · agnile.com
AI and customer data
The Trust Center says KAVACH is not designed to train models on customer data unless explicitly agreed in writing.Read 8 Oct 2026 · agnile.com
AI modes
KAVACH supports manual engineering, deterministic automation, and optional private AI, with AI configurable by programme.Read 7 Oct 2026 · agnile.com
Controls
Published security controls include customer identity-provider integration for on-premise and VPC deployments, TLS in transit, storage-layer encryption at rest, and auditable engineer-review actions.Read 7 Oct 2026 · agnile.com
Data boundary
Architecture inputs, TARA records, attack paths, controls, cybersecurity case artefacts, and operational metadata are designed to remain inside the customer-defined boundary unless exported or shared.Read 7 Oct 2026 · agnile.com
Data handling
The maker says architecture inputs, TARA records, cybersecurity work products, and operational metadata are designed to stay within the customer-defined boundary.Read 8 Oct 2026 · agnile.com
Deployment options
Deployment options are a customer-controlled desktop workspace, on-premise deployment, and a customer-dedicated EU cloud VPC.Read 8 Oct 2026 · agnile.com
Features
The workspace includes architecture context, attack-tree editing, a traceability hub, vulnerability monitoring, a cybersecurity case, an R155 compliance matrix, and report generation.Read 7 Oct 2026 · agnile.com
Intended customers
KAVACH is described as built for OEMs and Tier-1 suppliers, with deployment options also described for individual engineers, small programmes, and early evaluation.Read 8 Oct 2026 · agnile.com
Lifecycle coverage
The current release focuses on ISO/SAE 21434 lifecycle workflows across Clauses 5–15, including the Cybersecurity Case and post-production vulnerability monitoring.Read 8 Oct 2026 · agnile.com
Limitations
The maker publishes no public rate card and says engagement pricing is scoped per programme.Read 8 Oct 2026 · agnile.com
Limits
The maker says generated work products are structured drafts for engineering review and customer approval.Read 7 Oct 2026 · agnile.com
Operating modes
It offers manual engineering, deterministic automation, and optional private AI, with engineers responsible for review, correction, approval, and final evidence.Read 8 Oct 2026 · agnile.com
Security certifications
Agnile states that it is certified to ISO 9001:2015 and ISO/IEC 27001:2022.Read 8 Oct 2026 · agnile.com
Security controls
The security page describes configurable customer identity providers for on-premise and VPC deployments, TLS in transit, storage-layer encryption at rest, and auditable engineer-review actions.Read 8 Oct 2026 · agnile.com
Standards
The current release focuses on ISO/SAE 21434 Clauses 5–15, UNECE R155/R156 evidence, AIS 189/AIS 190 readiness, and post-production vulnerability monitoring.Read 7 Oct 2026 · agnile.com
TARA
It supports architecture-aware threat analysis and risk assessment, linking assets, damage scenarios, threats, attack paths, risk treatment, security goals, controls, and evidence.Read 8 Oct 2026 · agnile.com
Vulnerability monitoring
KAVACH connects SBOM and vulnerability signals to affected components, architecture context, threats, risk treatment, and evidence updates.Read 8 Oct 2026 · agnile.com

Plans and prices

Engineering Services Accelerator Priced on request Scoped per programme · Embedded senior engineers for a defined workstream · KAVACH optional Read 8 Oct 2026 · agnile.com
Evaluation Priced on request Scoped per programme · Guided walkthrough on a representative ECU or system architecture · No deployment required Read 8 Oct 2026 · agnile.com
Program Deployment Priced on request Scoped per programme · Full programme rollout · On-premise or customer-dedicated EU VPC deployment Read 8 Oct 2026 · agnile.com
Scoped Pilot Priced on request Scoped per programme · Time-boxed pilot on one feature, ECU family, or vehicle subsystem · Customer-controlled desktop, on-premise, or customer-dedicated EU VPC Read 8 Oct 2026 · agnile.com

Every KAVACH plan and price →

Strong points and limits

Strong points

  • Traceable TARA and attack-path workflow
  • ISO/SAE 21434 Clauses 5–15 focus
  • SBOM-linked vulnerability monitoring
  • Desktop, on-premise, or EU VPC deployment
  • Manual, automated, and private AI modes

Limits

  • No public rate card
  • Pricing scoped per programme
  • Generated work requires engineering approval
  • Windows platform listed

Who it suits

KAVACH is built for OEMs, Tier-1 suppliers, automotive cybersecurity teams, and programme engineers. Deployment options also cover individual engineers, small programmes, and early evaluation.

Verdict

KAVACH organizes automotive cybersecurity analysis, evidence, compliance, and vulnerability monitoring around vehicle architecture. Its deployment and AI choices are configurable, while generated outputs remain subject to engineering review.

Where Specifiction places it

Alternatives to KAVACHAll alternatives →