- Home
- Threat Modeling Software
- KAVACH
KAVACH
Bengaluru, India
What it is
KAVACH is an automotive cybersecurity engineering workspace connecting vehicle architecture to traceable cybersecurity evidence. Its TARA workflow links assets, damage scenarios, threat scenarios, attack paths, risk assessment and treatment, security goals, controls, and evidence. The workspace includes architecture context, attack-tree editing, a traceability hub, vulnerability monitoring, a cybersecurity case, an R155 compliance matrix, and report generation. The current release focuses on ISO/SAE 21434 Clauses 5–15, UNECE R155/R156 evidence, AIS 189/AIS 190 readiness, and post-production vulnerability monitoring. SBOM and vulnerability signals can be connected to affected components, assets, threats, and treatment decisions. Deployment options are a customer-controlled desktop workspace, on-premise deployment, or customer-dedicated EU cloud VPC. Operating modes include manual engineering, deterministic automation, and optional private AI. The maker says generated work products are structured drafts requiring engineering review and approval. Pricing is scoped per programme, with no public rate card.
For and against
For
- Maps TARA elements through evidence
- Supports ISO/SAE 21434 Clauses 5–15
- Includes vulnerability monitoring and R155 matrix
- Offers on-premise and dedicated EU VPC deployment
- Provides manual, automated, and private AI modes
Against
- No public rate card
- Work products require engineering review and approval
- Pricing is scoped per programme
The verdict
KAVACH focuses on connecting automotive cybersecurity analysis, compliance, and evidence in one workspace. Its programme-scoped pricing and review requirement matter when planning adoption.
Who it suits
KAVACH is designed for OEMs, Tier-1 suppliers, automotive cybersecurity teams, and programme engineers. Its deployment choices also cover individual engineers, small programmes, and early evaluations.
Plans and prices
Engineering Services Accelerator
Scoped per programme · Embedded senior engineers for a defined workstream · KAVACH optional
Read 8 Oct 2026 · agnile.com
Evaluation
Scoped per programme · Guided walkthrough on a representative ECU or system architecture · No deployment required
Read 8 Oct 2026 · agnile.com
Program Deployment
Scoped per programme · Full programme rollout · On-premise or customer-dedicated EU VPC deployment
Read 8 Oct 2026 · agnile.com
Scoped Pilot
Scoped per programme · Time-boxed pilot on one feature, ECU family, or vehicle subsystem · Customer-controlled desktop, on-premise, or customer-dedicated EU VPC
Read 8 Oct 2026 · agnile.com
On the record
- AI and customer data
- The Trust Center says KAVACH is not designed to train models on customer data unless explicitly agreed in writing.agnile.com · read 8 Oct 2026
- AI modes
- KAVACH supports manual engineering, deterministic automation, and optional private AI, with AI configurable by programme.agnile.com · read 7 Oct 2026
- Audience
- KAVACH is built for OEMs and Tier-1 suppliers, including automotive cybersecurity teams and programme engineers.agnile.com · read 7 Oct 2026
- Controls
- Published security controls include customer identity-provider integration for on-premise and VPC deployments, TLS in transit, storage-layer encryption at rest, and auditable engineer-review actions.agnile.com · read 7 Oct 2026
- Data boundary
- Architecture inputs, TARA records, attack paths, controls, cybersecurity case artefacts, and operational metadata are designed to remain inside the customer-defined boundary unless exported or shared.agnile.com · read 7 Oct 2026
- Data handling
- The maker says architecture inputs, TARA records, cybersecurity work products, and operational metadata are designed to stay within the customer-defined boundary.agnile.com · read 8 Oct 2026
- Deployment
- Deployment options include a customer-controlled desktop workspace, on-premise deployment, and a customer-dedicated EU cloud VPC.agnile.com · read 7 Oct 2026
- Deployment options
- Deployment options are a customer-controlled desktop workspace, on-premise deployment, and a customer-dedicated EU cloud VPC.agnile.com · read 8 Oct 2026
- Features
- The workspace includes architecture context, attack-tree editing, a traceability hub, vulnerability monitoring, a cybersecurity case, an R155 compliance matrix, and report generation.agnile.com · read 7 Oct 2026
- Integrations
- The maker names DOORS, Polarion, Jira, and AUTOSAR ARXML as toolchain context or integration targets, where applicable.agnile.com · read 8 Oct 2026
- Intended customers
- KAVACH is described as built for OEMs and Tier-1 suppliers, with deployment options also described for individual engineers, small programmes, and early evaluation.agnile.com · read 8 Oct 2026
- Lifecycle coverage
- The current release focuses on ISO/SAE 21434 lifecycle workflows across Clauses 5–15, including the Cybersecurity Case and post-production vulnerability monitoring.agnile.com · read 8 Oct 2026
- Limitations
- The maker publishes no public rate card and says engagement pricing is scoped per programme.agnile.com · read 8 Oct 2026
- Limits
- The maker says generated work products are structured drafts for engineering review and customer approval.agnile.com · read 7 Oct 2026
- Operating modes
- It offers manual engineering, deterministic automation, and optional private AI, with engineers responsible for review, correction, approval, and final evidence.agnile.com · read 8 Oct 2026
- Product
- KAVACH is an automotive cybersecurity engineering workspace for connecting vehicle architecture to cybersecurity evidence.agnile.com · read 8 Oct 2026
- Purpose
- KAVACH is an automotive cybersecurity engineering workspace supporting ISO/SAE 21434 lifecycle workflows from vehicle architecture to traceable evidence.agnile.com · read 7 Oct 2026
- Security
- Agnile states it is certified to ISO 9001:2015 and ISO/IEC 27001:2022.agnile.com · read 7 Oct 2026
