KAVACH vs ThreatTree
KAVACH
agnile.comThreatTree
threattree.comSide by side
| Figure | KAVACH | ThreatTree |
|---|---|---|
| Price from | — | $29/mo |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | — |
| API | — | Yes |
| Plans published | 4 | 3 |
| Spec score · Threat Modeling Software | 7.7 (#8) | 7.7 (#9) |
| Controls | Published security controls include customer identity-provider integration for on-premise and VPC deployments, TLS in transit, storage-layer encryption at rest, and auditable engineer-review actions. | Mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2. |
| Headquarters | Bengaluru, India | United Kingdom |
| Integrations | The maker names DOORS, Polarion, Jira, and AUTOSAR ARXML as toolchain context or integration targets, where applicable. | The Enterprise plan lists custom Jira and ServiceNow ticketing, Terraform/OpenAPI architecture import, Splunk and Microsoft Sentinel feeds, GRC platform sync, and Confluence/Notion embeds. |
| Purpose | KAVACH is an automotive cybersecurity engineering workspace supporting ISO/SAE 21434 lifecycle workflows from vehicle architecture to traceable evidence. | ThreatTree organizes threat models into forests containing Data Flow Diagrams and Attack Trees. |
| Support | Program Deployment includes onboarding, training, governance setup, and Agnile engineering support across the programme. | The pricing page lists priority support with Pro and dedicated support and an SLA with Enterprise. |
Plans
KAVACH
- Engineering Services AcceleratorPriced on request
- EvaluationPriced on request
- Program DeploymentPriced on request
- Scoped PilotPriced on request
In their own words
KAVACH
KAVACH is an automotive cybersecurity engineering workspace connecting vehicle architecture to traceable cybersecurity evidence across ISO/SAE 21434 workflows. Its TARA process links assets, damage and threat scenarios, attack paths, risk assessment and treatment, security goals, controls, and evidence. The workspace includes architecture context, attack-tree editing, a traceability hub, vulnerability monitoring, a cybersecurity case, an R155 compliance matrix, and report generation. SBOM and vulnerability signals can connect affected components with assets, threats, and treatment decisions. The current release focuses on ISO/SAE 21434 Clauses 5–15, UNECE R155/R156 evidence, AIS 189/AIS 190 readiness, and post-production monitoring. Deployment choices are a customer-controlled desktop workspace, on-premise deployment, or a customer-dedicated EU cloud VPC. Manual engineering, deterministic automation, and optional private AI are available. Generated work products are structured drafts requiring engineer review and customer approval. Pricing is scoped per programme.
ThreatTree
ThreatTree is a browser-based tool for organizing threat models into forests of Data Flow Diagrams and Attack Trees. It scores risks by likelihood and impact, then generates a ranked risk register across the trees in a forest. Threats can be tagged with STRIDE, LINDDUN, OWASP Top 10, CAPEC, and MITRE ATT&CK; mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2. Teams can invite members with owner, editor, or viewer roles. Reports are available as PDFs, with JSON and STIX 2.1 exports. Optional per-forest AES-256-GCM encryption is available on every plan, including Free. ThreatTree says data is stored on UK servers, connections use TLS 1.2 or higher, and encrypted database backups are taken daily and retained for 30 days. The Free plan costs nothing and has limits on forests and trees. Pro costs $29 a month per user, billed monthly; Enterprise pricing is by quote.