ThreatZ
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers handling vehicle security and supply-chain evidence.
What ThreatZ is
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers handling vehicle security and supply-chain evidence. It connects TARA, software bills of materials, attack paths, incidents, and compliance evidence in a knowledge graph. Threat modeling supports STRIDE TARA, AI-assisted threat scenarios, and attack paths with feasibility ratings. The platform generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024; the latter requires a PRC-region deployment. Its integrations page lists more than 30 tools and data formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube. Interchange formats include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV, and Excel. Team and Professional are hosted AWS Marketplace subscriptions; Enterprise supports private cloud, on-premises, and air-gapped deployment. A four-week trial uses sample vehicle data, while Professional and Enterprise trials require approval. The listed plans have differing project limits and prices, and pricing details include annual billing. ThreatZ is TISAX AL3 assessed and lists controls including encryption, tenant segregation, SAML SSO, and audit logging.
Good
- Connects TARA, SBOMs, incidents, and evidence.
- Supports STRIDE TARA and feasibility-rated attack paths.
- Generates work products for three listed standards.
- Enterprise supports air-gapped deployment.
Watch out
- No free plan is listed.
- Team is limited to three projects.
- Professional and Enterprise trials require approval.
- GB 44495 support requires PRC-region deployment.
Who it suits
ThreatZ is intended for automotive OEMs and Tier-1 suppliers managing vehicle cybersecurity and supply-chain evidence. It may suit teams that need threat modeling, compliance work products, and multiple deployment options.
Verdict
ThreatZ brings automotive threat analysis and compliance evidence into one knowledge graph, with integrations and deployment choices that vary by plan. Check the project's limits, annual pricing details, and trial conditions against your needs.
Plans and prices
From ThreatZ's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Enterprise | $100 a year | unlimited projects & users · Custom |
| Professional | $499 a year | 5–50 users · up to 15 projects · billed annually |
| Team | $14,388 a year | up to 3 projects · Billed annually ($14,388/yr) |
The facts
Each one read from ThreatZ's own pages, with the date it was checked.
What it does
- Compliance
- It generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024, with GB 44495 support via PRC-region deployment.checked 4 Oct 2026
- Data exchange
- Listed interchange formats include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV, and Excel.checked 4 Oct 2026
- Deployment
- The pricing page says Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises, and air-gapped deployment.checked 4 Oct 2026
- Integrations
- The integrations page lists 30+ tools and data formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube.checked 4 Oct 2026
- Product
- ThreatZ is an automotive cybersecurity management platform that connects TARA, SBOMs, attack paths, incidents, and compliance evidence in one knowledge graph.checked 4 Oct 2026
- Security
- ThreatZ is TISAX AL3 assessed; its trust page says ISO 27001 alignment is on the roadmap.checked 4 Oct 2026
- Security controls
- The trust page lists TLS 1.3 encryption in transit, encryption at rest, tenant data segregation, role-based access controls, SAML SSO, and audit logging.checked 4 Oct 2026
- Support
- The trust page says ThreatZ has offices and support in Germany, the United States, and Egypt, and commits to responding to vulnerability reports within 48 hours.checked 4 Oct 2026
- Threat modeling
- ThreatZ supports STRIDE TARA with AI-assisted threat scenarios and aggregates attack paths with feasibility ratings.checked 4 Oct 2026
- Use cases
- The platform is designed for OEMs and Tier-1 suppliers managing vehicle cybersecurity and supply-chain evidence.checked 4 Oct 2026
The company
- Founded
- VxLabs Security says it was founded in January 2022.checked 4 Oct 2026
- Headquarters
- Regensburg, Germanychecked 28 Sep 2026
- Maker
- VxLabs Security identifies itself as the parent company behind ThreatZ and lists its headquarters in Dover, Delaware, USA.checked 4 Oct 2026
Money
- Plan limits
- Pricing states that supplier-share guests who only view shared evidence are free and that program count is unlimited on all paid plans.checked 4 Oct 2026
- Trial
- The pricing page describes a free four-week trial using sample vehicle data; Professional and Enterprise trials are available on approval.checked 4 Oct 2026
Alternatives to ThreatZ
- 1
Dethernety
Free planOpen sourceWebAPISelf-hosted7.2Free plan - 2
ThreatModeler Nexus
Free planWebAPISelf-hosted6.7From $4,000 a year - 3
ThreatOpus
Free planWebAPI6.7From £129.99 a month - 4
ThreatTree
Free planWebAPI6.6From $29 a month - 5
OWASP Threat Dragon
Free planWebLinuxmacOSSelf-hosted6.4Free plan - 6
CAIRIS
Free planWebAPILinuxmacOS6.3Free plan