KAVACH vs ThreatZ
KAVACH
agnile.comThreatZ
threatz.ioSide by side
| Figure | KAVACH | ThreatZ |
|---|---|---|
| Price from | — | $8.33/mo |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | — |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 3 |
| Spec score · Threat Modeling Software | 7.7 (#8) | 7.6 (#12) |
| Deployment | Deployment options include a customer-controlled desktop workspace, on-premise deployment, and a customer-dedicated EU cloud VPC. | The pricing page says Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises, and air-gapped deployment. |
| Founded | 2023 | VxLabs Security says it was founded in January 2022. |
| Headquarters | Bengaluru, India | Regensburg, Germany |
| Integrations | The maker names DOORS, Polarion, Jira, and AUTOSAR ARXML as toolchain context or integration targets, where applicable. | The integrations page lists 30+ tools and data formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube. |
| Product | KAVACH is an automotive cybersecurity engineering workspace for connecting vehicle architecture to cybersecurity evidence. | ThreatZ is an automotive cybersecurity management platform that connects TARA, SBOMs, attack paths, incidents, and compliance evidence in one knowledge graph. |
| Security | Agnile states it is certified to ISO 9001:2015 and ISO/IEC 27001:2022. | ThreatZ is TISAX AL3 assessed; its trust page says ISO 27001 alignment is on the roadmap. |
| Security controls | The security page describes configurable customer identity providers for on-premise and VPC deployments, TLS in transit, storage-layer encryption at rest, and auditable engineer-review actions. | The trust page lists TLS 1.3 encryption in transit, encryption at rest, tenant data segregation, role-based access controls, SAML SSO, and audit logging. |
| Support | Program Deployment includes onboarding, training, governance setup, and Agnile engineering support across the programme. | The trust page says ThreatZ has offices and support in Germany, the United States, and Egypt, and commits to responding to vulnerability reports within 48 hours. |
Plans
KAVACH
- Engineering Services AcceleratorPriced on request
- EvaluationPriced on request
- Program DeploymentPriced on request
- Scoped PilotPriced on request
In their own words
KAVACH
KAVACH is an automotive cybersecurity engineering workspace connecting vehicle architecture to traceable cybersecurity evidence across ISO/SAE 21434 workflows. Its TARA process links assets, damage and threat scenarios, attack paths, risk assessment and treatment, security goals, controls, and evidence. The workspace includes architecture context, attack-tree editing, a traceability hub, vulnerability monitoring, a cybersecurity case, an R155 compliance matrix, and report generation. SBOM and vulnerability signals can connect affected components with assets, threats, and treatment decisions. The current release focuses on ISO/SAE 21434 Clauses 5–15, UNECE R155/R156 evidence, AIS 189/AIS 190 readiness, and post-production monitoring. Deployment choices are a customer-controlled desktop workspace, on-premise deployment, or a customer-dedicated EU cloud VPC. Manual engineering, deterministic automation, and optional private AI are available. Generated work products are structured drafts requiring engineer review and customer approval. Pricing is scoped per programme.
ThreatZ
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers tracking vehicle security and supply-chain evidence. It brings TARA, software bills of materials, attack paths, incidents and compliance evidence into a knowledge graph. Threat modeling supports STRIDE TARA, AI-assisted threat scenarios and attack paths with feasibility ratings. ThreatZ generates work products for ISO/SAE 21434, UN R155 and GB 44495-2024; the last requires PRC-region deployment. Its integration list includes more than 30 tools and formats, among them Vector CANoe, MATLAB System Composer, Jira, GitHub and SonarQube. Data interchange options include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV and Excel. Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises and air-gapped deployment. The listed Team plan costs $1,199 a year, billed annually, and allows up to three projects. Professional is listed at $499 a year, billed annually, for 5–50 users and up to 15 projects; Enterprise is $100 a year with custom billing and unlimited projects and users. A free four-week trial uses sample vehicle data; Professional and Enterprise trials require approval.