CYMETRIS vs Riskonnect
CYMETRIS
cymetris.comRiskonnect
riskonnect.comSide by side
| Figure | CYMETRIS | Riskonnect |
|---|---|---|
| Price from | €99/mo | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 2 | 1 |
| Spec score · Risk Assessment Software | 7.9 (#2) | 7.2 (#8) |
| Headquarters | CYMETRIS GmbH lists its address in Munich, Germany. | Atlanta, Georgia, United States |
| Integrations | The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. | Riskonnect offers APIs to import and export data and says it has out-of-the-box integrations with specialized partners. |
| Security | The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant. | Riskonnect lists encryption, audit logs, firewalls, configurable password policies, TLS certificates of at least 256 bits, and optional AES 256 encryption at rest. |
| Support | Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA. | Customers can submit requests or contact support through the Riskonnect Success Portal, and the support page lists regional phone support hours. |
Plans
In their own words
CYMETRIS
CYMETRIS is a cyber risk analysis and TARA platform for work across a product lifecycle. Its guided workflow follows ISO/SAE 21434 and applies automated consistency and logic checks. Teams can inspect attack paths interactively and map risks to components in system architecture, with risk prioritization, collaborative review, templates, frameworks, and multiple modeling methods. CYMETRIS Lite generates audit-ready reports for ISO/SAE 21434 and UN R155. The maker describes AI assistance through MCP for importing architectures, identifying assets, developing attack vectors, and querying TARA datasets in natural language. A public API is intended to connect requirements, architecture, PLM, ticketing, ALM, and reporting systems. Vulnerabilities can be imported from CVE databases, vendor advisories, or internal analyses and mapped to affected components; this capability is described as a selected-customer prototype. Access is available through web, API, or self-hosted deployment. Lite costs €99.00 per month, includes one full TARA project, and allows up to five active projects.
Riskonnect
Riskonnect connects risk data, intelligence and decisions across organizations through software for risk, compliance, claims and resilience. Its coverage includes governance, risk and compliance; insurable risk; and business continuity and resilience. Teams can conduct risk assessments, collect evidence, map controls, manage vendor risk and coordinate remediation workflows across frameworks such as ISO, NIST, GDPR, PCI, HIPAA, AICPA SOX, DORA and APRA CPS 230. The company describes the product as a cloud-based enterprise SaaS platform with configurable workflows, forms, dashboards and automations, along with integrated data and AI-powered risk intelligence. Users can access it on laptops, desktops, tablets and phones; 35 languages are available out of the box, with more than 90 available for customization. APIs support data import and export, and the company lists integrations with providers including Cube, Tenable, AlertMedia, Zurich, NCCI and AM Best. Pricing is on request and depends on project size, complexity and customization. Riskonnect was founded in 2007 and is headquartered in Atlanta, Georgia, United States.