EVERYTHING XIAOMI
Get listed
EnCo SOX ATA logo

EnCo SOX ATA

EnCo SOX ATA is an attack tree analysis module within EnCo’s engineering workbench.

Place
#15 of 23
Score
5.9
EnCo SOX ATA's website

What EnCo SOX ATA is

EnCo SOX ATA is an attack tree analysis module within EnCo’s engineering workbench. It models attack paths in hierarchical trees with AND and OR gates, and connects those trees to TARA threat scenarios. Users assess attack steps against feasibility criteria; ATA carries the ratings through the tree to calculate attack feasibility or threat levels, depending on the selected norm, and identify critical paths. Threats can move between TARA and ATA, and reusable attack paths can be applied elsewhere in a tree or in other analyses. The module connects with requirements, system design, TARA and cybersecurity goals, with trace views for requirement relationships. Teams can assign tasks and analysis statuses, follow progress and changes, and work from a central database. Outputs include diagrams for printing or export, Excel results and project documentation through the integrated Report Designer. EnCo lists web and Windows platforms. Pricing is on request.

Good

  • Builds hierarchical attack trees with AND and OR gates
  • Calculates threat levels and highlights critical paths
  • Connects attack trees with TARA scenarios
  • Supports shared work, change history and progress tracking
  • Exports diagrams and reports results in Excel

Watch out

  • Pricing is available on request
  • SOX repository hosting uses the customer’s internal server infrastructure
  • Service Desk access requires registration and active customer status

Who it suits

It suits engineering teams assessing cybersecurity threats in automotive, plant engineering, rail or aerospace projects. Teams looking for linked attack-tree and TARA analysis, traceability and shared project work may find its features relevant.

Verdict

EnCo SOX ATA combines attack-tree modeling, feasibility assessment and TARA links with engineering traceability and team workflows.

The facts

Each one read from EnCo SOX ATA's own pages, with the date it was checked.

What it does

Assets
Project assets can be assigned to any ATA element by drag and drop.checked 9 Oct 2026
Attack feasibility
The ATA module calculates an attack feasibility level or threat level depending on the selected norm.checked 9 Oct 2026
Attack tree modeling
It supports hierarchical attack trees with logical AND and OR gates and connects attack trees with TARA threat scenarios.checked 8 Oct 2026
Collaboration
The product page says analyses use a central database and support multi-user collaboration, change history and progress tracking.checked 8 Oct 2026
Data exchange
The ATA page describes importing existing engineering information, exchanging structured data with other systems and exporting attack tree graphics and analysis results; it does not name specific ATA integrations.checked 8 Oct 2026
Downloads
Current and legacy SOX downloads are available through the service desk, and access requires registration and administrator approval.checked 9 Oct 2026
Engineering connections
ATA connects with requirements, system design, TARA and cybersecurity goals, with traceability across related engineering information.checked 8 Oct 2026
Export
ATA diagrams can be exported as BMP, GIF, JPG, PNG, RLE, or SVG images and can be printed.checked 9 Oct 2026
Hosting
EnCo says the SOX multi-user repository is stored on a MySQL server installed on the customer’s internal server infrastructure; its page also describes a C-SOX web client.checked 8 Oct 2026
Integrations
EnCo lists integrations with codebeamer, PTC Windchill, Jama Connect, IBM DOORS, Jira, and Polarion; its integrations page labels Jira as coming soon.checked 9 Oct 2026
Intended users
EnCo describes SOX as a safety and security engineering workbench for multidisciplinary engineering teams and says the company serves automotive, plant engineering, rail, and aerospace industries.checked 9 Oct 2026
Progress tracking
Users can set an analysis status and assign tasks.checked 9 Oct 2026
Purpose
ATA is a top-down method for identifying attack paths from a point of attack to a threat and analyzing those paths.checked 9 Oct 2026
Reporting
Attack trees can be exported as graphics, results reported in Excel, and project documentation created with the integrated Report Designer.checked 8 Oct 2026
Reuse
Transferable attack paths can be reused elsewhere in a tree or in other analyses.checked 8 Oct 2026
Standards
The ATA guide describes calculating threat level under SAE J3061 or attack feasibility under ISO 21434, depending on the selected norm.checked 9 Oct 2026
Support
SOX and licensing queries are handled through EnCo’s Service Desk, which requires registration and active customer status.checked 9 Oct 2026
Support resources
EnCo’s download page points visitors to its Service Desk for downloads, SOX tutorials, documentation, a knowledge base and support tickets.checked 8 Oct 2026
TARA connection
ATA can take over threats from TARA, link threat paths by drag and drop, and return its calculated attack feasibility level to TARA.checked 9 Oct 2026

The company

Company
EnCo Software GmbH says it was founded in 2005 in Hamburg and is headquartered in Hamburg.checked 9 Oct 2026
Founded
2005checked 28 Sep 2026
Headquarters
Hamburg, Germanychecked 28 Sep 2026

Where it runs

Platform architecture
EnCo describes SOX as a server database platform supporting centralized project data and simultaneous work by multidisciplinary teams.checked 9 Oct 2026
Platforms
The SOX product information describes a Windows-oriented RCP client and a C-SOX web client; it lists Ubuntu Server or Windows Server for the server environment.checked 8 Oct 2026

Alternatives to EnCo SOX ATA

All alternatives
  1. 1Dethernety logo

    Dethernety

    Free planOpen sourceWebAPISelf-hosted
    7.2Free plan
  2. 2ThreatModeler Nexus logo

    ThreatModeler Nexus

    Free planWebAPISelf-hosted
    6.7From $4,000 a year
  3. 3ThreatOpus logo

    ThreatOpus

    Free planWebAPI
    6.7From £129.99 a month
  4. 4

    ThreatTree

    Free planWebAPI
    6.6From $29 a month
  5. 5

    OWASP Threat Dragon

    Free planWebLinuxmacOSSelf-hosted
    6.4Free plan
  6. 6

    CAIRIS

    Free planWebAPILinuxmacOS
    6.3Free plan