CYMETRIS vs EnCo SOX ATA
CYMETRIS
cymetris.com
EnCo SOX ATA
enco-software.comSide by side
| Figure | CYMETRIS | EnCo SOX ATA |
|---|---|---|
| Price from | €99/mo | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 2 | 0 |
| Spec score · Threat Modeling Software | 7.9 (#5) | 7.5 (#14) |
| Headquarters | CYMETRIS GmbH lists its address in Munich, Germany. | Hamburg, Germany |
| Integrations | The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. | EnCo lists integrations with codebeamer, PTC Windchill, Jama Connect, IBM DOORS, Jira, and Polarion; its integrations page labels Jira as coming soon. |
| Intended users | The maker describes CYMETRIS Lite as suitable for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs. | EnCo describes SOX as a safety and security engineering workbench for multidisciplinary engineering teams and says the company serves automotive, plant engineering, rail, and aerospace industries. |
| Purpose | CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle. | ATA is a top-down method for identifying attack paths from a point of attack to a threat and analyzing those paths. |
| Support | Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA. | SOX and licensing queries are handled through EnCo’s Service Desk, which requires registration and active customer status. |
Plans
In their own words
CYMETRIS
CYMETRIS is a cyber risk analysis and TARA platform for work across a product lifecycle. Its guided workflow follows ISO/SAE 21434 and applies automated consistency and logic checks. Teams can inspect attack paths interactively and map risks to components in system architecture, with risk prioritization, collaborative review, templates, frameworks, and multiple modeling methods. CYMETRIS Lite generates audit-ready reports for ISO/SAE 21434 and UN R155. The maker describes AI assistance through MCP for importing architectures, identifying assets, developing attack vectors, and querying TARA datasets in natural language. A public API is intended to connect requirements, architecture, PLM, ticketing, ALM, and reporting systems. Vulnerabilities can be imported from CVE databases, vendor advisories, or internal analyses and mapped to affected components; this capability is described as a selected-customer prototype. Access is available through web, API, or self-hosted deployment. Lite costs €99.00 per month, includes one full TARA project, and allows up to five active projects.
EnCo SOX ATA
EnCo SOX ATA is an attack tree analysis module in the SOX engineering workbench. It models hierarchical attack paths with logical AND and OR gates and links those trees to TARA threat scenarios. Users score attack steps against feasibility criteria; the module propagates scores through the tree to calculate threat or attack-feasibility levels according to the selected norm and expose critical paths. Threats can move between TARA and ATA, with paths linked by drag and drop. Reusable attack paths can be placed elsewhere in a tree or another analysis. The module connects requirements, system design, TARA and cybersecurity goals, while trace views show requirement relationships and assets can be assigned to elements. Teams can assign tasks, set statuses, track progress and review changes through a central database. Outputs include printed or image-exported diagrams, Excel results and Report Designer documentation. It runs on web and Windows; pricing is on request.