CYMETRIS Lite unlocks the full capability of our cyber risk analysis platform for complete TARA implementation under ISO/SAE 21434. Choose your plan and start today.
TISAX® assessment successfully passed (06/2026)
Fully compliant with ISO/SAE 21434
Hosted on secure servers in Germany
BSFZ-certified research & development
Developed by experts in Munich, Germany
Compare CYMETRIS Lite and CYMETRIS Enterprise feature by feature, and see which one matches where your team is today.
Excel & Legacy Tools
CYMETRIS Lite
CYMETRIS Enterprise
On request
Explore all core features and walk through the interface yourself by visiting our CYMETRIS Platform Overview
No sales calls, no onboarding project. Just three simple steps between you and your first TARA.
Select your package and check out directly, by credit card via Stripe or by invoice. You'll receive your invoice automatically by email. No contract negotiation, no waiting on a quote.
1
The moment payment goes through, your CYMETRIS Lite tenant is live. Every feature is unlocked from day one. No waiting period, no staged rollout.
2
A built-in demo project walks you through a complete TARA step by step. For everything beyond that, our extensive documentation covers the exact workflow in detail.
3
CYMETRIS Lite is a professional, web-based platform that gives security engineers everything they need to work through a complete TARA efficiently and correctly, in line with ISO/SAE 21434 and UN R155. Book online instantly, no procurement process required.
Independent Professionals
You deliver TARAs for clients. You know the methodology, you know the standard, and you need a tool that holds up in front of an auditor. Right now.
Software Defined Vehicle, Infrastructure and beyond
Compliance requirements are arriving faster than your headcount grows. You need a TARA process that satisfies OEM requirements without requiring a cybersecurity center of excellence.
Embedded Systems, Component Suppliers and more
Your OEM customers require ISO/SAE 21434-compliant TARAs. Your tooling budget is limited, a five- or six-figure enterprise contract is simply not the right fit for what you need to deliver right now.
Engineering Services, Consultancies and beyond
Professional TARAs are part of your service offering, for multiple clients, often in parallel. You need a structured foundation that keeps handling simple and output consistent. Start here. Scale to Enterprise when ready.
A look at how cybersecurity professionals describe their experience evaluating and using the platform.
Clear answers on what's included, what's not, and how to grow with CYMETRIS.
Yes. CYMETRIS Lite includes a ready-made example project you can use as a template. It's a realistic, pre-built TARA you can explore, copy, and adapt instead of starting from a blank screen. The sample project will be available to all users from August 2026.
Every customer gets their own strictly separated tenant with full data sovereignty. CYMETRIS is developed and operated in Germany, TISAX-assessed (06/2026). Our cybersecurity principles start with the source code of our own software. Your data stays yours.
CYMETRIS Lite fits freelance security engineers, consultancies, startups in mobility and vehicle development, security teams across the automotive supply chain, and service providers running TARAs for multiple clients. It's also relevant for any team facing UN R155, ISO/SAE 21434, or EU-CRA requirements.
Deepen Your Cyber Risk Analysis Knowledge
Vaguely knowing TARA and being able to defend it in front of an auditor are two different skill levels. This free 2-hour video course closes that gap. Ten theory lessons covering every ISO/SAE 21434 step with precision, followed by three full walkthroughs that build a complete TARA on a real example, start to finish.
OEMs and suppliers each build sound risk assessments — in isolation. The result: duplicated effort, broken traceability, and risk pictures that don't add up across the value chain. Discover how damage scenarios can become the connective tissue of a vertically integrated TARA and why this is now achievable in practice, not just on paper.
A solid methodology doesn't guarantee a solid result. From attack trees that collapse under their own complexity to the absence of a shared exchange format with suppliers, this practitioner's view dissects five structural weaknesses that quietly undermine even well-run TARAs — and what closing them actually requires.
Treating NIS2 and the Cyber Resilience Act as "just more compliance on top of ISO/SAE 21434" is a costly simplification. Both introduce distinct legal subjects, scopes, and liability regimes. Get the precise breakdown of where these frameworks actually bind, and where your existing engineering processes fall short.
Connect with our cybersecurity and development project experts to discover how the CYMETRIS solution can solve your organizational and project-level challenges.
