Skip to content
SPECIFICTION
Get listed

ThreatZ

threatz.io

From $8.33/mo Free trial WebAPISelf-hosted
Visit threatz.io
Spec score 7.6 #12 of 23 in Threat Modeling Software

What it is

ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers tracking vehicle security and supply-chain evidence. It brings TARA, software bills of materials, attack paths, incidents and compliance evidence into a knowledge graph. Threat modeling supports STRIDE TARA, AI-assisted threat scenarios and attack paths with feasibility ratings. ThreatZ generates work products for ISO/SAE 21434, UN R155 and GB 44495-2024; the last requires PRC-region deployment. Its integration list includes more than 30 tools and formats, among them Vector CANoe, MATLAB System Composer, Jira, GitHub and SonarQube. Data interchange options include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV and Excel. Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises and air-gapped deployment. The listed Team plan costs $1,199 a year, billed annually, and allows up to three projects. Professional is listed at $499 a year, billed annually, for 5–50 users and up to 15 projects; Enterprise is $100 a year with custom billing and unlimited projects and users. A free four-week trial uses sample vehicle data; Professional and Enterprise trials require approval.

Spec sheet

Product
ThreatZ is an automotive cybersecurity management platform that connects TARA, SBOMs, attack paths, incidents, and compliance evidence in one knowledge graph.Read 4 Oct 2026 · threatz.io
Deployment
The pricing page says Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises, and air-gapped deployment.Read 4 Oct 2026 · threatz.io
Trial
The pricing page describes a free four-week trial using sample vehicle data; Professional and Enterprise trials are available on approval.Read 4 Oct 2026 · threatz.io
Integrations
The integrations page lists 30+ tools and data formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube.Read 4 Oct 2026 · threatz.io
Security
ThreatZ is TISAX AL3 assessed; its trust page says ISO 27001 alignment is on the roadmap.Read 4 Oct 2026 · threatz.io
Compliance
It generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024, with GB 44495 support via PRC-region deployment.Read 4 Oct 2026 · threatz.io
Support
The trust page says ThreatZ has offices and support in Germany, the United States, and Egypt, and commits to responding to vulnerability reports within 48 hours.Read 4 Oct 2026 · threatz.io
Headquarters
Regensburg, GermanyRead 28 Sep 2026 · threatz.io
Founded
VxLabs Security says it was founded in January 2022.Read 4 Oct 2026 · vxlabs.ai
Maker
VxLabs Security identifies itself as the parent company behind ThreatZ and lists its headquarters in Dover, Delaware, USA.Read 4 Oct 2026 · vxlabs.ai
Data exchange
Listed interchange formats include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV, and Excel.Read 4 Oct 2026 · threatz.io
Plan limits
Pricing states that supplier-share guests who only view shared evidence are free and that program count is unlimited on all paid plans.Read 4 Oct 2026 · threatz.io
Security controls
The trust page lists TLS 1.3 encryption in transit, encryption at rest, tenant data segregation, role-based access controls, SAML SSO, and audit logging.Read 4 Oct 2026 · threatz.io
Threat modeling
ThreatZ supports STRIDE TARA with AI-assisted threat scenarios and aggregates attack paths with feasibility ratings.Read 4 Oct 2026 · threatz.io
Use cases
The platform is designed for OEMs and Tier-1 suppliers managing vehicle cybersecurity and supply-chain evidence.Read 4 Oct 2026 · threatz.io

Plans and prices

Enterprise $100 a year Custom unlimited projects & users Read 4 Oct 2026 · threatz.io
Professional $499 a year billed annually 5–50 users · up to 15 projects Read 4 Oct 2026 · threatz.io
Team $14,388 a year Billed annually ($14,388/yr) up to 3 projects Read 4 Oct 2026 · threatz.io

Every ThreatZ plan and price →

Strong points and limits

Strong points

  • Connects security evidence in a knowledge graph
  • Supports STRIDE TARA and feasibility-rated attack paths
  • Generates work products for named regulations and standards
  • Offers private-cloud, on-premises and air-gapped deployment
  • Free four-week trial uses sample vehicle data

Limits

  • No free plan is listed
  • GB 44495 support requires PRC-region deployment
  • Professional and Enterprise trials require approval
  • Team allows up to three projects

Who it suits

ThreatZ is aimed at OEMs and Tier-1 suppliers coordinating vehicle cybersecurity and supply-chain evidence. It may suit teams that need threat modeling, compliance work products and deployment options that include on-premises or air-gapped environments.

Verdict

ThreatZ combines threat modeling, compliance outputs and evidence exchange for automotive cybersecurity teams. Confirm plan limits, trial approval requirements and deployment fit before choosing a subscription.

Where Specifiction places it

Alternatives to ThreatZAll alternatives →