CYMETRIS

6.2easy start · #9 of 22
in Threat Modeling Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, self-hosted, Web. Paid plans from €99/mo.

CYMETRIS is ranked #9 of 22 in threat modeling software on The Geeks Club. It runs on API, Self-hosted, Web. There is no free plan. Paid plans start at €99/mo.

CYMETRIS plans and pricing

All plans

CYMETRIS Lite €99/mo net €99/month 1 full TARA project included · additional projects net €899/year each, up to 5 active projects · collaboration limited to 2 users cymetris.com · 3 Oct 2026

CYMETRIS Enterprise Not published On request Individual project bundles · unlimited users · priority support with dedicated contact and SLA cymetris.com · 3 Oct 2026

Compared on threat modeling software

Free plan: No
Project limit: 5 projects
Attack-path analysis: Yes
Risk prioritization: Yes
Collaborative review: Yes
Templates and frameworks: Yes
Modeling methods: multiple
Deployment: both

Best CYMETRIS alternatives

See all 12

ThreatOpus 0 of 4 in the starter kit Lesson 17.7 CAIRIS 0 of 4 in the starter kit Lesson 27.3 OWASP Threat Dragon 0 of 4 in the starter kit Lesson 37.3 ThreatModeler Nexus 0 of 4 in the starter kit Lesson 47.1 ThreatTree 0 of 4 in the starter kit Lesson 56.9 AWS Threat Composer 0 of 4 in the starter kit Lesson 66.8

The record

Purpose: CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle.
TARA workflow: The platform provides a guided TARA workflow aligned with ISO/SAE 21434 and automated consistency and logic checks.
Attack paths: The platform offers interactive attack path visualization and maps risks to system architecture components.
Reports: CYMETRIS Lite includes automatic audit-ready reports for ISO/SAE 21434 and UN R155.
AI: CYMETRIS says AI assistance via MCP can support architecture import, asset identification, attack vector development, and natural-language queries across TARA datasets.
Integrations: The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems.
Named connectors: The Lite page lists Jira, Codebeamer, and Enterprise Architect as examples of enterprise toolchain connectors excluded from Lite.
Security: The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant.
TISAX: The About page lists a TISAX assessment ID, AXDY4Y.
Support: Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA.
Lite limitation: CYMETRIS Lite collaboration is limited to two users, and the page says it excludes vulnerability management, vertical TARA integration, and enterprise toolchain connectors.
Intended users: The maker describes CYMETRIS Lite as suitable for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs.
Headquarters: Munich, Germany
Price from: €99/mo

Where it ranks on The Geeks Club

Best Threat Modeling Software in 2026#9 of 22

Is CYMETRIS yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote CYMETRIS

Sources

cymetris.com/platform-overview/· checked 3 Oct 2026
cymetris.com/lite/· checked 3 Oct 2026
cymetris.com/ai-integration-via-model-context-protoc· checked 3 Oct 2026
cymetris.com/public-api-v1-0-released/· checked 3 Oct 2026
cymetris.com/about-us/· checked 3 Oct 2026
cymetris.com· checked 28 Sept 2026