🚀 The world’s most powerful TARA tool. Now self-service.
Right inside the CYMETRIS platform: vulnerability management interlocked with TARA analysis. With this far-reaching feature extension, structured vulnerability management can now be integrated directly into the CYMETRIS TARA process.
New vulnerabilities from external sources such as CVE databases, vendor advisories, or internal security analyses can be imported on a per-project basis with the new vulnerability management feature and automatically mapped to the affected components in your own development.
A product-specific risk assessment of the new vulnerability can then be performed — a major advantage when it comes to making well-founded statements about its actual relevance.
As soon as a vulnerability is assigned to a component, CYMETRIS checks whether and how it affects existing attack paths. Relevant vulnerabilities can be fed into the attack path analysis as additional data points — either as a new entry point that did not exist before, or as a new way to circumvent an existing protection mechanism.
With this continuous update of the risk landscape across the entire product lifecycle, keeping the TARA up to date becomes intelligent and, above all, efficient: when the threat landscape shifts due to a newly discovered vulnerability, the TARA reflects this immediately — required mitigation measures can be triggered right away and forwarded with all relevant information attached. The feature is currently available to selected customers in a prototyping phase and will be rolled out globally in the near future.
Accompanying AI assistance functions, which will noticeably simplify day-to-day work in vulnerability management, are also ready to launch.
Stay up to date with CYMETRIS and our software platform. We regularly share new features, updates, and practical expert insights on cyber risk assessment and TARA. Browse all our latest posts right here: NEWS
We’re expanding the boundaries of scalable cyber risk analysis. In a pilot phase, we’re testing vertical TARA integration that allows damage scenarios from lower-level TARAs to flow directly into vehicle-level attack trees. This approach enables independent assessments while protecting IP, and allows efficient derivation, comparison, and reuse of variants.
CYMETRIS has been recognized as an R&D company by Germany’s Research Allowance Authority (BSFZ). This confirms our AI platform for automotive cybersecurity breaks new ground with dynamic attack analysis and collaborative risk assessment. LEARN MORE↗
As the automotive industry advances toward software-defined vehicles and AI-driven engineering workflows, information security has become a fundamental prerequisite. CYMETRIS has completed its TISAX® assessment, meeting the information security standards increasingly expected of software platforms across the automotive supply chain.
TARA (Threat Analysis and Risk Assessment) provides a powerful methodology for systematically identifying and evaluating cyber risks — throughout product development and across the entire lifecycle.
Our overview page guides you step-by-step through the complete TARA process in line with ISO/SAE 21434: you’ll learn which phases matter, what artifacts play a role, and what truly counts.
What you’ll find here:
Get started now and dive into the full guide.
Our platform continues to evolve with cutting-edge features for intelligent cyber risk modeling/TARA. Want the latest on new capabilities, integrations, and industry developments? Reach out to our team for insights tailored to your needs.
