
EnCo SOX ATA
EnCo SOX ATA is an attack tree analysis module within EnCo’s engineering workbench.
What EnCo SOX ATA is
EnCo SOX ATA is an attack tree analysis module within EnCo’s engineering workbench. It models attack paths in hierarchical trees with AND and OR gates, and connects those trees to TARA threat scenarios. Users assess attack steps against feasibility criteria; ATA carries the ratings through the tree to calculate attack feasibility or threat levels, depending on the selected norm, and identify critical paths. Threats can move between TARA and ATA, and reusable attack paths can be applied elsewhere in a tree or in other analyses. The module connects with requirements, system design, TARA and cybersecurity goals, with trace views for requirement relationships. Teams can assign tasks and analysis statuses, follow progress and changes, and work from a central database. Outputs include diagrams for printing or export, Excel results and project documentation through the integrated Report Designer. EnCo lists web and Windows platforms. Pricing is on request.
Good
- Builds hierarchical attack trees with AND and OR gates
- Calculates threat levels and highlights critical paths
- Connects attack trees with TARA scenarios
- Supports shared work, change history and progress tracking
- Exports diagrams and reports results in Excel
Watch out
- Pricing is available on request
- SOX repository hosting uses the customer’s internal server infrastructure
- Service Desk access requires registration and active customer status
Who it suits
It suits engineering teams assessing cybersecurity threats in automotive, plant engineering, rail or aerospace projects. Teams looking for linked attack-tree and TARA analysis, traceability and shared project work may find its features relevant.
Verdict
EnCo SOX ATA combines attack-tree modeling, feasibility assessment and TARA links with engineering traceability and team workflows.
The facts
Each one read from EnCo SOX ATA's own pages, with the date it was checked.
What it does
- Assets
- Project assets can be assigned to any ATA element by drag and drop.checked 9 Oct 2026
- Attack feasibility
- The ATA module calculates an attack feasibility level or threat level depending on the selected norm.checked 9 Oct 2026
- Attack tree modeling
- It supports hierarchical attack trees with logical AND and OR gates and connects attack trees with TARA threat scenarios.checked 8 Oct 2026
- Collaboration
- The product page says analyses use a central database and support multi-user collaboration, change history and progress tracking.checked 8 Oct 2026
- Data exchange
- The ATA page describes importing existing engineering information, exchanging structured data with other systems and exporting attack tree graphics and analysis results; it does not name specific ATA integrations.checked 8 Oct 2026
- Downloads
- Current and legacy SOX downloads are available through the service desk, and access requires registration and administrator approval.checked 9 Oct 2026
- Engineering connections
- ATA connects with requirements, system design, TARA and cybersecurity goals, with traceability across related engineering information.checked 8 Oct 2026
- Export
- ATA diagrams can be exported as BMP, GIF, JPG, PNG, RLE, or SVG images and can be printed.checked 9 Oct 2026
- Hosting
- EnCo says the SOX multi-user repository is stored on a MySQL server installed on the customer’s internal server infrastructure; its page also describes a C-SOX web client.checked 8 Oct 2026
- Integrations
- EnCo lists integrations with codebeamer, PTC Windchill, Jama Connect, IBM DOORS, Jira, and Polarion; its integrations page labels Jira as coming soon.checked 9 Oct 2026
- Intended users
- EnCo describes SOX as a safety and security engineering workbench for multidisciplinary engineering teams and says the company serves automotive, plant engineering, rail, and aerospace industries.checked 9 Oct 2026
- Progress tracking
- Users can set an analysis status and assign tasks.checked 9 Oct 2026
- Purpose
- ATA is a top-down method for identifying attack paths from a point of attack to a threat and analyzing those paths.checked 9 Oct 2026
- Reporting
- Attack trees can be exported as graphics, results reported in Excel, and project documentation created with the integrated Report Designer.checked 8 Oct 2026
- Reuse
- Transferable attack paths can be reused elsewhere in a tree or in other analyses.checked 8 Oct 2026
- Standards
- The ATA guide describes calculating threat level under SAE J3061 or attack feasibility under ISO 21434, depending on the selected norm.checked 9 Oct 2026
- Support
- SOX and licensing queries are handled through EnCo’s Service Desk, which requires registration and active customer status.checked 9 Oct 2026
- Support resources
- EnCo’s download page points visitors to its Service Desk for downloads, SOX tutorials, documentation, a knowledge base and support tickets.checked 8 Oct 2026
- TARA connection
- ATA can take over threats from TARA, link threat paths by drag and drop, and return its calculated attack feasibility level to TARA.checked 9 Oct 2026
The company
- Company
- EnCo Software GmbH says it was founded in 2005 in Hamburg and is headquartered in Hamburg.checked 9 Oct 2026
- Founded
- 2005checked 28 Sep 2026
- Headquarters
- Hamburg, Germanychecked 28 Sep 2026
Where it runs
- Platform architecture
- EnCo describes SOX as a server database platform supporting centralized project data and simultaneous work by multidisciplinary teams.checked 9 Oct 2026
- Platforms
- The SOX product information describes a Windows-oriented RCP client and a C-SOX web client; it lists Ubuntu Server or Windows Server for the server environment.checked 8 Oct 2026
Alternatives to EnCo SOX ATA
- 1

Dethernety
Free planOpen sourceWebAPISelf-hosted7.2Free plan - 2

ThreatModeler Nexus
Free planWebAPISelf-hosted6.7From $4,000 a year - 3

ThreatOpus
Free planWebAPI6.7From £129.99 a month - 4
ThreatTree
Free planWebAPI6.6From $29 a month - 5
OWASP Threat Dragon
Free planWebLinuxmacOSSelf-hosted6.4Free plan - 6
CAIRIS
Free planWebAPILinuxmacOS6.3Free plan
