- Home
- Threat Modeling Software
- EnCo SOX ATA
EnCo SOX ATA
Hamburg, Germany
What it is
EnCo SOX ATA is an attack-tree analysis module within an engineering workbench. It models hierarchical attack paths with AND and OR gates and links them to TARA threat scenarios. Users rate attack steps against feasibility criteria; the software propagates those ratings to calculate attack-feasibility or threat levels according to the selected norm and identify critical paths. Threats can move from TARA into ATA, paths can be linked by drag and drop, and calculated feasibility can return to TARA. Attack paths are reusable in other tree sections or analyses. Teams can assign tasks, set analysis status, track progress and review changes through a central database that supports simultaneous work. ATA connects requirements, system design, TARA and cybersecurity goals, with trace views for relationships; project assets can be attached to elements. Diagrams can be printed or exported as BMP, GIF, JPG, PNG, RLE or SVG images. Results can be reported in Excel and documentation created with Report Designer. SOX is web and Windows software, paid with pricing on request, and its multi-user repository uses MySQL on the customer’s internal server.
For and against
For
- Hierarchical attack trees with AND and OR gates
- TARA threat linking
- Calculated feasibility and threat levels
- Central collaborative database
- Multiple diagram export formats
Against
- Pricing is on request
- Repository requires customer internal MySQL infrastructure
- Jira integration is listed as coming soon
The verdict
SOX ATA links attack-tree modeling with TARA, requirements and engineering traceability. Its collaboration, task tracking and reporting features support structured cybersecurity analyses.
Who it suits
It suits automotive, plant engineering, rail and aerospace teams performing collaborative attack-path and risk analysis within an engineering workbench.
On the record
- Assets
- Project assets can be assigned to any ATA element by drag and drop.enco-software.com · read 9 Oct 2026
- Attack feasibility
- The ATA module calculates an attack feasibility level or threat level depending on the selected norm.enco-software.com · read 9 Oct 2026
- Attack tree modeling
- It supports hierarchical attack trees with logical AND and OR gates and connects attack trees with TARA threat scenarios.enco-software.com · read 8 Oct 2026
- Collaboration
- The product page says analyses use a central database and support multi-user collaboration, change history and progress tracking.enco-software.com · read 8 Oct 2026
- Company
- EnCo Software GmbH says it was founded in 2005 in Hamburg and is headquartered in Hamburg.enco-software.com · read 9 Oct 2026
- Data exchange
- The ATA page describes importing existing engineering information, exchanging structured data with other systems and exporting attack tree graphics and analysis results; it does not name specific ATA integrations.enco-software.com · read 8 Oct 2026
- Downloads
- Current and legacy SOX downloads are available through the service desk, and access requires registration and administrator approval.enco-software.atlassian.net · read 9 Oct 2026
- Engineering connections
- ATA connects with requirements, system design, TARA and cybersecurity goals, with traceability across related engineering information.enco-software.com · read 8 Oct 2026
- Export
- ATA diagrams can be exported as BMP, GIF, JPG, PNG, RLE, or SVG images and can be printed.enco-software.com · read 9 Oct 2026
- Hosting
- EnCo says the SOX multi-user repository is stored on a MySQL server installed on the customer’s internal server infrastructure; its page also describes a C-SOX web client.enco-software.com · read 8 Oct 2026
- Integrations
- EnCo lists integrations with codebeamer, PTC Windchill, Jama Connect, IBM DOORS, Jira, and Polarion; its integrations page labels Jira as coming soon.enco-software.com · read 9 Oct 2026
- Intended users
- EnCo describes SOX as a safety and security engineering workbench for multidisciplinary engineering teams and says the company serves automotive, plant engineering, rail, and aerospace industries.enco-software.com · read 9 Oct 2026
- Platform architecture
- EnCo describes SOX as a server database platform supporting centralized project data and simultaneous work by multidisciplinary teams.enco-software.com · read 9 Oct 2026
- Progress tracking
- Users can set an analysis status and assign tasks.enco-software.com · read 9 Oct 2026
- Purpose
- ATA is a top-down method for identifying attack paths from a point of attack to a threat and analyzing those paths.enco-software.com · read 9 Oct 2026
- Reporting
- Attack trees can be exported as graphics, results reported in Excel, and project documentation created with the integrated Report Designer.enco-software.com · read 8 Oct 2026
- Reuse
- Transferable attack paths can be reused elsewhere in a tree or in other analyses.enco-software.com · read 8 Oct 2026
- Standards
- The ATA guide describes calculating threat level under SAE J3061 or attack feasibility under ISO 21434, depending on the selected norm.enco-software.com · read 9 Oct 2026
