- Home
- Threat Modeling Software
- ThreatZ
ThreatZ
Regensburg, Germany
What it is
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers. It brings TARA, software bills of materials, attack paths, incidents, and compliance evidence into one knowledge graph. STRIDE TARA support includes AI-assisted threat scenarios and attack paths with feasibility ratings. The platform generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024, with GB support through a PRC-region deployment. Integrations and data exchange cover more than 30 tools and formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, SonarQube, ReqIF, SARIF, STIX, AUTOSAR, PDF, CSV, and Excel. Team and Professional use hosted AWS Marketplace subscriptions; Enterprise also supports private cloud, on-premises, and air-gapped deployment. A free four-week trial uses sample vehicle data. Paid plans allow unlimited programs, and view-only supplier guests are free. Security controls include TLS 1.3, encryption at rest, tenant segregation, SAML SSO, and audit logging.
For and against
For
- Connects security evidence in one knowledge graph
- Supports major automotive compliance frameworks
- Offers private and air-gapped deployment
- Includes many integrations and exchange formats
- Four-week trial available
Against
- No free plan
- Professional and Enterprise trials need approval
- Team plan is limited to three projects
- Pricing details use differing billing descriptions
The verdict
ThreatZ combines automotive threat modeling, evidence management, integrations, and compliance outputs in one platform. Its deployment choices and security controls address organizations with demanding vehicle-security programs, while plan limits and paid access require review.
Who it suits
ThreatZ suits vehicle manufacturers and Tier-1 suppliers managing cybersecurity analysis, compliance work, and supply-chain evidence. Teams needing attack-path analysis, collaborative review, and multiple integrations may benefit.
Plans and prices
Enterprise
unlimited projects & users
Read 4 Oct 2026 · threatz.io
Professional
5–50 users · up to 15 projects
Read 4 Oct 2026 · threatz.io
Team
up to 3 projects
Read 4 Oct 2026 · threatz.io
On the record
- Compliance
- It generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024, with GB 44495 support via PRC-region deployment.threatz.io · read 4 Oct 2026
- Data exchange
- Listed interchange formats include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV, and Excel.threatz.io · read 4 Oct 2026
- Deployment
- The pricing page says Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises, and air-gapped deployment.threatz.io · read 4 Oct 2026
- Integrations
- The integrations page lists 30+ tools and data formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube.threatz.io · read 4 Oct 2026
- Maker
- VxLabs Security identifies itself as the parent company behind ThreatZ and lists its headquarters in Dover, Delaware, USA.vxlabs.ai · read 4 Oct 2026
- Plan limits
- Pricing states that supplier-share guests who only view shared evidence are free and that program count is unlimited on all paid plans.threatz.io · read 4 Oct 2026
- Product
- ThreatZ is an automotive cybersecurity management platform that connects TARA, SBOMs, attack paths, incidents, and compliance evidence in one knowledge graph.threatz.io · read 4 Oct 2026
- Security
- ThreatZ is TISAX AL3 assessed; its trust page says ISO 27001 alignment is on the roadmap.threatz.io · read 4 Oct 2026
- Security controls
- The trust page lists TLS 1.3 encryption in transit, encryption at rest, tenant data segregation, role-based access controls, SAML SSO, and audit logging.threatz.io · read 4 Oct 2026
- Support
- The trust page says ThreatZ has offices and support in Germany, the United States, and Egypt, and commits to responding to vulnerability reports within 48 hours.threatz.io · read 4 Oct 2026
- Threat modeling
- ThreatZ supports STRIDE TARA with AI-assisted threat scenarios and aggregates attack paths with feasibility ratings.threatz.io · read 4 Oct 2026
- Trial
- The pricing page describes a free four-week trial using sample vehicle data; Professional and Enterprise trials are available on approval.threatz.io · read 4 Oct 2026
- Use cases
- The platform is designed for OEMs and Tier-1 suppliers managing vehicle cybersecurity and supply-chain evidence.threatz.io · read 4 Oct 2026
