EnCo SOX ATA vs ThreatZ

EnCo SOX ATA is an attack tree analysis module in the SOX engineering workbench. It models hierarchical attack paths with logical AND and OR gates and links those trees to TARA threat scenarios. Users score attack steps against feasibility criteria; the module propagates scores through the tree to calculate threat or attack-feasibility levels according to the selected norm and expose critical paths. Threats can move between TARA and ATA, with paths linked by drag and drop. Reusable attack paths can be placed elsewhere in a tree or another analysis. The module connects requirements, system design, TARA and cybersecurity goals, while trace views show requirement relationships and assets can be assigned to elements. Teams can assign tasks, set statuses, track progress and review changes through a central database. Outputs include printed or image-exported diagrams, Excel results and Report Designer documentation. It runs on web and Windows; pricing is on request.

ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers tracking vehicle security and supply-chain evidence. It brings TARA, software bills of materials, attack paths, incidents and compliance evidence into a knowledge graph. Threat modeling supports STRIDE TARA, AI-assisted threat scenarios and attack paths with feasibility ratings. ThreatZ generates work products for ISO/SAE 21434, UN R155 and GB 44495-2024; the last requires PRC-region deployment. Its integration list includes more than 30 tools and formats, among them Vector CANoe, MATLAB System Composer, Jira, GitHub and SonarQube. Data interchange options include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV and Excel. Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises and air-gapped deployment. The listed Team plan costs $1,199 a year, billed annually, and allows up to three projects. Professional is listed at $499 a year, billed annually, for 5–50 users and up to 15 projects; Enterprise is $100 a year with custom billing and unlimited projects and users. A free four-week trial uses sample vehicle data; Professional and Enterprise trials require approval.