AutoSec TARA Suite vs CYMETRIS
AutoSec TARA Suite
autosecinnovation.com
CYMETRIS
cymetris.comSide by side
| Figure | AutoSec TARA Suite | CYMETRIS |
|---|---|---|
| Price from | — | €99/mo |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 2 |
| Spec score · Threat Modeling Software | 7.4 (#18) | 7.9 (#5) |
| Integrations | Spreadsheet and PDF exports are listed; ReqIF exchange, Jira or ticketing integration, and SIEM or VSOC rule export are marked planned. | The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. |
| Intended users | Listed use cases include concept phase TARA, supplier TARA review, UN R155 evidence preparation, reassessment after architecture changes, and cybersecurity concept definition. | The maker describes CYMETRIS Lite as suitable for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs. |
| Purpose | AutoSec TARA Suite is a pilot automotive threat modelling and risk management platform for ISO/SAE 21434 aligned TARA workflows and UN R155 compliance activities. | CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle. |
| Security | AutoSec Innovation says it operates ISO 9001 and ISO/IEC 27001 management systems, with the latter covering its information security management system. | The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant. |
Plans
In their own words
AutoSec TARA Suite
AutoSec TARA Suite is a pilot automotive threat-modelling and risk-management platform for analyst-led workflows aligned with ISO/SAE 21434 and UN R155 activities. Its analysis moves through item definition, asset and boundary identification, threat scenarios, attack analysis, impact assessment, and risk determination. Candidate threat scenarios are generated for analyst review and mapped to STRIDE categories. Risk assessment considers safety, financial, operational, and privacy impacts, then calculates attack potential to determine risk. Listed outputs include traceability matrices, PDF and Excel compliance bundles, and VSOC detection rule exports. Deployment options include analyst-led engagements, managed evaluation instances, and self-hosted customer instances. Controlled self-hosted evaluations and technical demonstrations are available on request. The suite is designed to support ISO/SAE 21434, UNECE R155, and ISO 26262 activities, but it does not certify products or organisations. Pricing is available on request.
CYMETRIS
CYMETRIS is a cyber risk analysis and TARA platform for work across a product lifecycle. Its guided workflow follows ISO/SAE 21434 and applies automated consistency and logic checks. Teams can inspect attack paths interactively and map risks to components in system architecture, with risk prioritization, collaborative review, templates, frameworks, and multiple modeling methods. CYMETRIS Lite generates audit-ready reports for ISO/SAE 21434 and UN R155. The maker describes AI assistance through MCP for importing architectures, identifying assets, developing attack vectors, and querying TARA datasets in natural language. A public API is intended to connect requirements, architecture, PLM, ticketing, ALM, and reporting systems. Vulnerabilities can be imported from CVE databases, vendor advisories, or internal analyses and mapped to affected components; this capability is described as a selected-customer prototype. Access is available through web, API, or self-hosted deployment. Lite costs €99.00 per month, includes one full TARA project, and allows up to five active projects.