
CYMETRIS
CYMETRIS is a cyber risk analysis platform for carrying out TARA across a product lifecycle.
What CYMETRIS is
CYMETRIS is a cyber risk analysis platform for carrying out TARA across a product lifecycle. Its guided workflow aligns with ISO/SAE 21434 and includes automated checks for consistency and logic. Teams can visualize attack paths and link risks to components in a system architecture, with support for risk prioritization, collaborative review, templates, and multiple modeling methods. CYMETRIS Lite produces audit-ready reports for ISO/SAE 21434 and UN R155. The maker says AI assistance via MCP can support architecture imports, asset identification, attack-vector development, and natural-language queries across TARA datasets. A public API is intended to connect with requirements, architecture, PLM, ticketing, ALM, and reporting systems. Lite costs €99/mo and includes one full TARA project; additional projects cost net €899/year each, with up to five active projects and a two-user collaboration limit. The Lite tier excludes vulnerability management, vertical TARA integration, and enterprise toolchain connectors such as Jira, Codebeamer, and Enterprise Architect. Web, API, and self-hosted access are listed.
Good
- Guided workflow aligns with ISO/SAE 21434.
- Visualizes attack paths and maps risks to components.
- Lite generates reports for ISO/SAE 21434 and UN R155.
- Offers web, API, and self-hosted access.
Watch out
- Lite collaboration is limited to two users.
- Lite excludes vulnerability management and vertical TARA integration.
- Lite excludes enterprise toolchain connectors.
- Lite costs €99/mo; extra projects cost net €899/year each.
Who it suits
CYMETRIS Lite is aimed at freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs.
Verdict
CYMETRIS combines guided TARA work, risk mapping, and reporting, with Lite starting at €99/mo. Check the two-user collaboration cap and exclusions before choosing Lite; Enterprise pricing is on request.
Plans and prices
From CYMETRIS's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| CYMETRIS Lite | €99 a month | 1 full TARA project included · additional projects net €899/year each, up to 5 active projects · collaboration limited to 2 users · net €99/month |
| CYMETRIS Enterprise | Priced on request | Individual project bundles · unlimited users · priority support with dedicated contact and SLA · On request |
The facts
Each one read from CYMETRIS's own pages, with the date it was checked.
What it does
- AI
- CYMETRIS says AI assistance via MCP can support architecture import, asset identification, attack vector development, and natural-language queries across TARA datasets.checked 3 Oct 2026
- Attack paths
- The platform offers interactive attack path visualization and maps risks to system architecture components.checked 3 Oct 2026
- Integrations
- The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems.checked 3 Oct 2026
- Intended users
- The maker describes CYMETRIS Lite as suitable for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs.checked 3 Oct 2026
- Lite limitation
- CYMETRIS Lite collaboration is limited to two users, and the page says it excludes vulnerability management, vertical TARA integration, and enterprise toolchain connectors.checked 3 Oct 2026
- Named connectors
- The Lite page lists Jira, Codebeamer, and Enterprise Architect as examples of enterprise toolchain connectors excluded from Lite.checked 3 Oct 2026
- Purpose
- CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle.checked 3 Oct 2026
- Reports
- CYMETRIS Lite includes automatic audit-ready reports for ISO/SAE 21434 and UN R155.checked 3 Oct 2026
- Security
- The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant.checked 3 Oct 2026
- Support
- Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA.checked 3 Oct 2026
- TARA workflow
- The platform provides a guided TARA workflow aligned with ISO/SAE 21434 and automated consistency and logic checks.checked 3 Oct 2026
- TISAX
- The About page lists a TISAX assessment ID, AXDY4Y.checked 3 Oct 2026
- Vulnerability management
- CYMETRIS describes importing vulnerabilities from CVE databases, vendor advisories, or internal analyses and mapping them to affected components; the cited release page says the feature was in a selected-customer prototype phase.checked 3 Oct 2026
The company
- Headquarters
- CYMETRIS GmbH lists its address in Munich, Germany.checked 3 Oct 2026
Alternatives to CYMETRIS
- 1
RiskRecon
Free planWebAPI6.9Free plan - 2
RiskWatch Vendor Risk Management
AndroidiOSWebAPI6.6 - 3

SAP CPQ
Web6.4From $24 a month - 4
Origami Risk Claims
AndroidiOSWebAPI6.3 - 5
Riskonnect
AndroidiOSWebAPI6.3 - 6

Protecht
WebAPI6.2
