Freedom251 › Risk Assessment Software
CYMETRIS

What CYMETRIS is
CYMETRIS is a software platform for cyber risk analysis and threat analysis and risk assessment (TARA) across a product lifecycle. Its guided workflow aligns with ISO/SAE 21434 and includes automated consistency and logic checks. Teams can visualize attack paths, map risks to system architecture components, prioritize risks, and conduct collaborative reviews using multiple modeling methods and templates. CYMETRIS Lite provides automatic audit-ready reports for ISO/SAE 21434 and UN R155. The maker says AI assistance through MCP can help import architecture, identify assets, develop attack vectors, and query TARA datasets in natural language. A public API is intended to connect with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. Lite costs €99.00 per month, billed net at €99/month, and includes one full TARA project; additional projects cost net €899/year each, with a limit of five active projects and two users. It is available via web, API, and self-hosted deployment. Enterprise pricing is on request.
Who it suits
CYMETRIS Lite is aimed at freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs. Organizations needing more than two collaborators or Lite’s project limits can consider Enterprise, whose price is on request.
What it does well
- Guided TARA workflow aligned with ISO/SAE 21434
- Interactive attack-path views map risks to architecture components
- Lite includes audit-ready ISO/SAE 21434 and UN R155 reports
- Web, API, and self-hosted access options
What to know first
- No free plan
- Lite collaboration is limited to two users
- Lite excludes vulnerability management and vertical TARA integration
- Lite excludes enterprise toolchain connectors
Limits
Lite includes one full TARA project, with up to five active projects; additional projects cost net €899/year each. Collaboration is limited to two users, and Lite excludes vulnerability management, vertical TARA integration, and enterprise toolchain connectors.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| CYMETRIS Lite | net €99/month · 1 full TARA project included · additional projects net €899/year each, up to 5 active projects · collaboration limited to 2 users | €99 a month |
| CYMETRIS Enterprise | On request · Individual project bundles · unlimited users · priority support with dedicated contact and SLA | On request |
As cymetris.com lists them, read 3 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://www.cymetris.com/
- Choose CYMETRIS Lite at €99.00 per month or request Enterprise pricing
- Use the web platform, API, or self-hosted access
- Start a TARA project; Lite includes one full project
- Add projects as needed, up to five active projects on Lite
Verdict
CYMETRIS combines a standards-aligned TARA workflow with attack-path analysis, reporting, and several deployment options. Check the Lite collaboration and project limits, and note that some listed vulnerability-management functionality remains in a selected-customer prototype phase.
Questions
How much does CYMETRIS cost?
CYMETRIS Lite is €99.00 per month, billed net at €99/month. Enterprise pricing is on request.
Is there a free plan?
No. CYMETRIS is a paid platform.
What does Lite include?
Lite includes one full TARA project and automatic audit-ready reports for ISO/SAE 21434 and UN R155. It supports up to five active projects, with additional projects costing net €899/year each.
Which access options are available?
CYMETRIS offers web, API, and self-hosted access. The maker says its cloud service uses server locations in Germany.
Does CYMETRIS integrate with other tools?
A public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. Lite excludes enterprise toolchain connectors, with Jira, Codebeamer, and Enterprise Architect given as examples.
What support comes with each plan?
Lite support is ticket-based, with responses within less than one week. Enterprise includes priority support with a dedicated contact and SLA.
Facts from CYMETRIS's own pages
- AI
- CYMETRIS says AI assistance via MCP can support architecture import, asset identification, attack vector development, and natural-language queries across TARA datasets. · cymetris.com, 3 Oct 2026
- Attack paths
- The platform offers interactive attack path visualization and maps risks to system architecture components. · cymetris.com, 3 Oct 2026
- Headquarters
- CYMETRIS GmbH lists its address in Munich, Germany. · cymetris.com, 3 Oct 2026
- Integrations
- The public API is intended to connect CYMETRIS with external requirements, architecture, PLM, ticketing, ALM, and reporting systems. · cymetris.com, 3 Oct 2026
- Intended users
- The maker describes CYMETRIS Lite as suitable for freelance security engineers, consultancies, mobility and vehicle-development startups, automotive supply-chain security teams, and service providers running TARAs. · cymetris.com, 3 Oct 2026
- Lite limitation
- CYMETRIS Lite collaboration is limited to two users, and the page says it excludes vulnerability management, vertical TARA integration, and enterprise toolchain connectors. · cymetris.com, 3 Oct 2026
- Named connectors
- The Lite page lists Jira, Codebeamer, and Enterprise Architect as examples of enterprise toolchain connectors excluded from Lite. · cymetris.com, 3 Oct 2026
- Purpose
- CYMETRIS is a software platform for cyber risk analysis and TARA across the product lifecycle. · cymetris.com, 3 Oct 2026
- Reports
- CYMETRIS Lite includes automatic audit-ready reports for ISO/SAE 21434 and UN R155. · cymetris.com, 3 Oct 2026
- Security
- The maker says its cloud service uses server locations in Germany, offers on-premise deployment, and is GDPR compliant. · cymetris.com, 3 Oct 2026
- Support
- Lite support is ticket-based with responses within less than one week; Enterprise includes priority support with a dedicated contact and SLA. · cymetris.com, 3 Oct 2026
- TARA workflow
- The platform provides a guided TARA workflow aligned with ISO/SAE 21434 and automated consistency and logic checks. · cymetris.com, 3 Oct 2026
- TISAX
- The About page lists a TISAX assessment ID, AXDY4Y. · cymetris.com, 3 Oct 2026
- Vulnerability management
- CYMETRIS describes importing vulnerabilities from CVE databases, vendor advisories, or internal analyses and mapping them to affected components; the cited release page says the feature was in a selected-customer prototype phase. · cymetris.com, 3 Oct 2026
Where CYMETRIS stands on Freedom251
- Risk Assessment Software#2 of 15
- Threat Modeling Software#15 of 23
