AutoSec TARA Suite vs ThreatZ
AutoSec TARA Suite
autosecinnovation.comThreatZ
threatz.ioSide by side
| Figure | AutoSec TARA Suite | ThreatZ |
|---|---|---|
| Price from | — | $8.33/mo |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 3 |
| Spec score · Threat Modeling Software | 7.4 (#18) | 7.6 (#12) |
| Deployment | Deployment options listed are analyst led engagements, managed evaluation instances, and self hosted instances in a customer environment during the pilot. | The pricing page says Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises, and air-gapped deployment. |
| Integrations | Spreadsheet and PDF exports are listed; ReqIF exchange, Jira or ticketing integration, and SIEM or VSOC rule export are marked planned. | The integrations page lists 30+ tools and data formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube. |
| Security | AutoSec Innovation says it operates ISO 9001 and ISO/IEC 27001 management systems, with the latter covering its information security management system. | ThreatZ is TISAX AL3 assessed; its trust page says ISO 27001 alignment is on the roadmap. |
Plans
In their own words
AutoSec TARA Suite
AutoSec TARA Suite is a pilot automotive threat-modelling and risk-management platform for analyst-led workflows aligned with ISO/SAE 21434 and UN R155 activities. Its analysis moves through item definition, asset and boundary identification, threat scenarios, attack analysis, impact assessment, and risk determination. Candidate threat scenarios are generated for analyst review and mapped to STRIDE categories. Risk assessment considers safety, financial, operational, and privacy impacts, then calculates attack potential to determine risk. Listed outputs include traceability matrices, PDF and Excel compliance bundles, and VSOC detection rule exports. Deployment options include analyst-led engagements, managed evaluation instances, and self-hosted customer instances. Controlled self-hosted evaluations and technical demonstrations are available on request. The suite is designed to support ISO/SAE 21434, UNECE R155, and ISO 26262 activities, but it does not certify products or organisations. Pricing is available on request.
ThreatZ
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers tracking vehicle security and supply-chain evidence. It brings TARA, software bills of materials, attack paths, incidents and compliance evidence into a knowledge graph. Threat modeling supports STRIDE TARA, AI-assisted threat scenarios and attack paths with feasibility ratings. ThreatZ generates work products for ISO/SAE 21434, UN R155 and GB 44495-2024; the last requires PRC-region deployment. Its integration list includes more than 30 tools and formats, among them Vector CANoe, MATLAB System Composer, Jira, GitHub and SonarQube. Data interchange options include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV and Excel. Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises and air-gapped deployment. The listed Team plan costs $1,199 a year, billed annually, and allows up to three projects. Professional is listed at $499 a year, billed annually, for 5–50 users and up to 15 projects; Enterprise is $100 a year with custom billing and unlimited projects and users. A free four-week trial uses sample vehicle data; Professional and Enterprise trials require approval.