ThreatTree vs ThreatZ

ThreatTree is a browser-based tool for organizing threat models into forests of Data Flow Diagrams and Attack Trees. It scores risks by likelihood and impact, then generates a ranked risk register across the trees in a forest. Threats can be tagged with STRIDE, LINDDUN, OWASP Top 10, CAPEC, and MITRE ATT&CK; mitigations can be mapped to standards including ISO 27001:2022, NIST SP 800-53 Rev 5, CIS Controls v8, PCI DSS v4.0, NIST CSF 2.0, and SOC 2. Teams can invite members with owner, editor, or viewer roles. Reports are available as PDFs, with JSON and STIX 2.1 exports. Optional per-forest AES-256-GCM encryption is available on every plan, including Free. ThreatTree says data is stored on UK servers, connections use TLS 1.2 or higher, and encrypted database backups are taken daily and retained for 30 days. The Free plan costs nothing and has limits on forests and trees. Pro costs $29 a month per user, billed monthly; Enterprise pricing is by quote.

ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers tracking vehicle security and supply-chain evidence. It brings TARA, software bills of materials, attack paths, incidents and compliance evidence into a knowledge graph. Threat modeling supports STRIDE TARA, AI-assisted threat scenarios and attack paths with feasibility ratings. ThreatZ generates work products for ISO/SAE 21434, UN R155 and GB 44495-2024; the last requires PRC-region deployment. Its integration list includes more than 30 tools and formats, among them Vector CANoe, MATLAB System Composer, Jira, GitHub and SonarQube. Data interchange options include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV and Excel. Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises and air-gapped deployment. The listed Team plan costs $1,199 a year, billed annually, and allows up to three projects. Professional is listed at $499 a year, billed annually, for 5–50 users and up to 15 projects; Enterprise is $100 a year with custom billing and unlimited projects and users. A free four-week trial uses sample vehicle data; Professional and Enterprise trials require approval.