🚀 The world’s most powerful TARA tool. Now self-service.
CYMETRIS and VicOne are integrating their platforms, connecting automotive vulnerability intelligence with system-level risk engineering so that newly disclosed vulnerabilities can be assessed directly within existing TARA and architecture models.
The integration reflects a broader direction CYMETRIS is actively pursuing: close collaboration with established players across the automotive cybersecurity toolchain. Working alongside partners deeply embedded in OEM and Tier-1 supplier environments is a prerequisite for the kind of integrated workflows that product security teams actually need, and CYMETRIS is increasingly active in exactly these environments, across the tool landscapes, integration architectures, and engineering processes that define how risk is managed at scale today.
As vulnerability disclosures accelerate, the core operational challenge for automotive product security teams is determining quickly which findings are relevant to a specific vehicle program, where they appear in the architecture, and what risk and treatment decisions follow. The integration creates a connected workflow in which vulnerability and SBOM intelligence from VicOne feeds directly into CYMETRIS, where findings are mapped to affected assets and ECUs, assessed against existing attack paths and controls, and translated into traceable treatment decisions. Architecture context flows back to VicOne, keeping both systems aligned as software and threats evolve.
“Risk cannot be determined by a severity score alone. A vulnerability becomes meaningful when organizations can see where it exists, whether it is reachable, which controls could be bypassed and what damage could result. This integration gives engineering and PSIRT teams that shared context without requiring manual handovers between disconnected tools.”
— Falk Mayer, Co-Founder and Managing Director, CYMETRIS
The combined workflow supports evidence management for ISO/SAE 21434 and UN R155, maintains versioned traceability across architecture and risk model changes, and aligns PSIRT and cybersecurity engineering around a consistent shared data model.
The full joint press release is available on the VicOne website.
Stay up to date with CYMETRIS and our software platform. We regularly share new features, updates, and practical expert insights on cyber risk assessment and TARA. Browse all our latest posts right here: NEWS
We’re expanding the boundaries of scalable cyber risk analysis. In a pilot phase, we’re testing vertical TARA integration that allows damage scenarios from lower-level TARAs to flow directly into vehicle-level attack trees. This approach enables independent assessments while protecting IP, and allows efficient derivation, comparison, and reuse of variants.
We are currently developing our first customer success stories featuring clients who have already successfully integrated the CYMETRIS platform into their development workflows. Check back here soon for detailed insights and comprehensive case studies. LEARN MORE↗
Usability first: Our new release (which includes backend stability and scalability improvements along with several interesting features—see the complete overview in the tool) brings undo and redo functionality. If you encounter any bugs, please report them!
TARA (Threat Analysis and Risk Assessment) provides a powerful methodology for systematically identifying and evaluating cyber risks — throughout product development and across the entire lifecycle.
Our overview page guides you step-by-step through the complete TARA process in line with ISO/SAE 21434: you’ll learn which phases matter, what artifacts play a role, and what truly counts.
What you’ll find here:
Get started now and dive into the full guide.
Our platform continues to evolve with cutting-edge features for intelligent cyber risk modeling/TARA. Want the latest on new capabilities, integrations, and industry developments? Reach out to our team for insights tailored to your needs.
