- Home
- Risk Assessment Software
- CYMETRIS
CYMETRIS
CYMETRIS GmbH lists its address in Munich, Germany.
What it is
CYMETRIS is a software platform for cyber risk analysis and TARA across a product lifecycle. Its guided workflow aligns with ISO/SAE 21434 and performs consistency and logic checks. Teams can visualize attack paths interactively and map risks to system-architecture components. The platform supports risk prioritization, collaborative review, templates and frameworks, and multiple modeling methods. CYMETRIS Lite generates automatic audit-ready reports for ISO/SAE 21434 and UN R155. The maker says AI assistance through MCP can help import architecture, identify assets, develop attack vectors, and query TARA datasets in natural language. A public API connects with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. Lite costs €99 a month, billed net €99/month, with one full TARA project; additional projects cost net €899/year each, up to five active projects. Collaboration is limited to two users and five active projects. Enterprise pricing is on request, with individual project bundles, unlimited users, and priority support with a dedicated contact and SLA. Access is available through web, API, or self-hosted deployment. Cloud service locations are in Germany, and on-premise deployment is offered.
For and against
For
- Guided ISO/SAE 21434 TARA workflow
- Interactive attack-path visualization
- Automatic audit-ready reports
- AI assistance through MCP
- Web, API, and self-hosted options
Against
- Lite collaboration is limited to two users
- Lite allows up to five active projects
- Lite excludes vulnerability management
- Lite excludes enterprise toolchain connectors
The verdict
CYMETRIS combines structured TARA workflows, architecture-linked attack paths, reporting, and integration options. Lite provides a defined entry plan, while Enterprise expands users, support, and project arrangements on request.
Who it suits
CYMETRIS Lite is described for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain teams, and service providers running TARAs. Enterprise is suited to organizations needing unlimited users or tailored project bundles.
Plans and prices
CYMETRIS Lite
1 full TARA project included · additional projects net €899/year each, up to 5 active projects · collaboration limited to 2 users
Read 3 Oct 2026 · cymetris.com
CYMETRIS Enterprise
Individual project bundles · unlimited users · priority support with dedicated contact and SLA
Read 3 Oct 2026 · cymetris.com
On the record
- AI
- CYMETRIS says AI assistance via MCP can support architecture import, asset identification, attack vector development, and natural-language queries across TARA datasets.cymetris.com · read 3 Oct 2026
- Attack paths
- The platform offers interactive attack path visualization and maps risks to system architecture components.cymetris.com · read 3 Oct 2026
- Integrations
- The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems.cymetris.com · read 3 Oct 2026
- Intended users
- The maker describes CYMETRIS Lite as suitable for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs.cymetris.com · read 3 Oct 2026
- Lite limitation
- CYMETRIS Lite collaboration is limited to two users, and the page says it excludes vulnerability management, vertical TARA integration, and enterprise toolchain connectors.cymetris.com · read 3 Oct 2026
- Named connectors
- The Lite page lists Jira, Codebeamer, and Enterprise Architect as examples of enterprise toolchain connectors excluded from Lite.cymetris.com · read 3 Oct 2026
- Purpose
- CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle.cymetris.com · read 3 Oct 2026
- Reports
- CYMETRIS Lite includes automatic audit-ready reports for ISO/SAE 21434 and UN R155.cymetris.com · read 3 Oct 2026
- Security
- The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant.cymetris.com · read 3 Oct 2026
- Support
- Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA.cymetris.com · read 3 Oct 2026
- TARA workflow
- The platform provides a guided TARA workflow aligned with ISO/SAE 21434 and automated consistency and logic checks.cymetris.com · read 3 Oct 2026
- TISAX
- The About page lists a TISAX assessment ID, AXDY4Y.cymetris.com · read 3 Oct 2026
- Vulnerability management
- CYMETRIS describes importing vulnerabilities from CVE databases, vendor advisories, or internal analyses and mapping them to affected components; the cited release page says the feature was in a selected-customer prototype phase.cymetris.com · read 3 Oct 2026
