CYMETRIS vs KAVACH
CYMETRIS
cymetris.comKAVACH
agnile.comSide by side
| Figure | CYMETRIS | KAVACH |
|---|---|---|
| Price from | €99/mo | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 2 | 4 |
| Spec score · Threat Modeling Software | 7.9 (#5) | 7.7 (#8) |
| Headquarters | CYMETRIS GmbH lists its address in Munich, Germany. | Bengaluru, India |
| Integrations | The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. | The maker names DOORS, Polarion, Jira, and AUTOSAR ARXML as toolchain context or integration targets, where applicable. |
| Purpose | CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle. | KAVACH is an automotive cybersecurity engineering workspace supporting ISO/SAE 21434 lifecycle workflows from vehicle architecture to traceable evidence. |
| Security | The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant. | Agnile states it is certified to ISO 9001:2015 and ISO/IEC 27001:2022. |
| Support | Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA. | Program Deployment includes onboarding, training, governance setup, and Agnile engineering support across the programme. |
Plans
KAVACH
- Engineering Services AcceleratorPriced on request
- EvaluationPriced on request
- Program DeploymentPriced on request
- Scoped PilotPriced on request
In their own words
CYMETRIS
CYMETRIS is a cyber risk analysis and TARA platform for work across a product lifecycle. Its guided workflow follows ISO/SAE 21434 and applies automated consistency and logic checks. Teams can inspect attack paths interactively and map risks to components in system architecture, with risk prioritization, collaborative review, templates, frameworks, and multiple modeling methods. CYMETRIS Lite generates audit-ready reports for ISO/SAE 21434 and UN R155. The maker describes AI assistance through MCP for importing architectures, identifying assets, developing attack vectors, and querying TARA datasets in natural language. A public API is intended to connect requirements, architecture, PLM, ticketing, ALM, and reporting systems. Vulnerabilities can be imported from CVE databases, vendor advisories, or internal analyses and mapped to affected components; this capability is described as a selected-customer prototype. Access is available through web, API, or self-hosted deployment. Lite costs €99.00 per month, includes one full TARA project, and allows up to five active projects.
KAVACH
KAVACH is an automotive cybersecurity engineering workspace connecting vehicle architecture to traceable cybersecurity evidence across ISO/SAE 21434 workflows. Its TARA process links assets, damage and threat scenarios, attack paths, risk assessment and treatment, security goals, controls, and evidence. The workspace includes architecture context, attack-tree editing, a traceability hub, vulnerability monitoring, a cybersecurity case, an R155 compliance matrix, and report generation. SBOM and vulnerability signals can connect affected components with assets, threats, and treatment decisions. The current release focuses on ISO/SAE 21434 Clauses 5–15, UNECE R155/R156 evidence, AIS 189/AIS 190 readiness, and post-production monitoring. Deployment choices are a customer-controlled desktop workspace, on-premise deployment, or a customer-dedicated EU cloud VPC. Manual engineering, deterministic automation, and optional private AI are available. Generated work products are structured drafts requiring engineer review and customer approval. Pricing is scoped per programme.