EnCo SOX ATA

Paid WebWindows

What EnCo SOX ATA is

EnCo SOX ATA is an attack tree analysis module in EnCo’s engineering workbench. It lets engineering teams map attack paths in hierarchical trees, connect steps with logical AND and OR gates, and link the trees to TARA threat scenarios. Users rate attack steps against feasibility criteria; ATA propagates those ratings through the tree to calculate attack feasibility or threat levels, depending on the selected norm, and highlight critical paths. Threats can be transferred from TARA, linked to attack paths by drag and drop, and returned to TARA with ATA’s calculated feasibility level. Teams can reuse attack paths in other parts of a tree or in other analyses, assign tasks and analysis statuses, and review change history and progress through a central database.

The module connects attack trees with requirements, system design, TARA and cybersecurity goals, with trace views for requirement relationships. Users can attach project assets to ATA elements and exchange engineering information with other systems. Attack tree diagrams can be printed or exported as BMP, GIF, JPG, PNG, RLE or SVG images; results can be reported in Excel, and project documentation can be produced with the integrated Report Designer. EnCo describes SOX as a server database platform for centralized project data and simultaneous work by multidisciplinary teams. The repository is stored on a customer’s internal MySQL server infrastructure, and EnCo also describes a C-SOX web client.

Who it suits

EnCo SOX ATA suits engineering teams in automotive, plant engineering, rail and aerospace who need to model attack paths and assess threat levels. It is also suited to teams connecting cybersecurity analysis with requirements, system design and TARA work.

What it does well

Models hierarchical attack trees with AND and OR gates.
Calculates threat levels and identifies critical paths.
Transfers threats between ATA and TARA.
Supports multi-user collaboration, change history and progress tracking.
Exports diagrams in six image formats and supports printing.
Connects requirements and assets to ATA elements.

What to know first

Pricing is available on request.
The repository is stored on the customer’s internal MySQL server infrastructure.
SOX and licensing support requires active customer status and Service Desk registration.

Getting started

Visit the EnCo SOX ATA website.
Contact EnCo to discuss pricing or ask to test the SOX Modular Workbench without obligation.
Ask EnCo about the SOX deployment and repository on your internal MySQL server infrastructure.
Use the web client or Windows platform.
Contact EnCo’s Service Desk for downloads, tutorials, documentation and support; registration and administrator approval are required for downloads.

Verdict

Choose EnCo SOX ATA if your engineering team needs attack tree modeling linked to TARA, requirements and system design. Its threat propagation, reuse and reporting tools support collaborative analysis. Consider another option if you need a published price or a repository outside customer-managed internal MySQL infrastructure.

Questions

How is EnCo SOX ATA priced?

The pricing model is paid, with pricing available on request.

Can I try the SOX Modular Workbench?

EnCo invites visitors to contact the company to test the workbench without obligation.

Which platforms does EnCo SOX ATA support?

The listed platforms are web and Windows. EnCo also describes a C-SOX web client.

What does the ATA module do?

It models hierarchical attack trees, rates attack steps against feasibility criteria, and calculates attack feasibility or threat levels depending on the selected norm.

Which integrations are listed?

EnCo lists codebeamer, PTC Windchill, Jama Connect, IBM DOORS, Jira and Polarion. The integrations page labels Jira as coming soon.

Where can customers get downloads and support?

EnCo’s Service Desk provides downloads, tutorials, documentation, a knowledge base and support tickets. Downloads require registration and administrator approval, while SOX and licensing support requires active customer status.

Facts from EnCo SOX ATA's own pages

Assets: Project assets can be assigned to any ATA element by drag and drop. · enco-software.com, 9 Oct 2026
Attack feasibility: The ATA module calculates an attack feasibility level or threat level depending on the selected norm. · enco-software.com, 9 Oct 2026
Attack tree modeling: It supports hierarchical attack trees with logical AND and OR gates and connects attack trees with TARA threat scenarios. · enco-software.com, 8 Oct 2026
Collaboration: The product page says analyses use a central database and support multi-user collaboration, change history and progress tracking. · enco-software.com, 8 Oct 2026
Company: EnCo Software GmbH says it was founded in 2005 in Hamburg and is headquartered in Hamburg. · enco-software.com, 9 Oct 2026
Data exchange: The ATA page describes importing existing engineering information, exchanging structured data with other systems and exporting attack tree graphics and analysis results; it does not name specific ATA integrations. · enco-software.com, 8 Oct 2026
Downloads: Current and legacy SOX downloads are available through the service desk, and access requires registration and administrator approval. · enco-software.atlassian.net, 9 Oct 2026
Engineering connections: ATA connects with requirements, system design, TARA and cybersecurity goals, with traceability across related engineering information. · enco-software.com, 8 Oct 2026
Export: ATA diagrams can be exported as BMP, GIF, JPG, PNG, RLE, or SVG images and can be printed. · enco-software.com, 9 Oct 2026
Founded: 2005 · enco-software.com, 28 Sept 2026
Headquarters: Hamburg, Germany · enco-software.com, 28 Sept 2026
Hosting: EnCo says the SOX multi-user repository is stored on a MySQL server installed on the customer’s internal server infrastructure; its page also describes a C-SOX web client. · enco-software.com, 8 Oct 2026
Integrations: EnCo lists integrations with codebeamer, PTC Windchill, Jama Connect, IBM DOORS, Jira, and Polarion; its integrations page labels Jira as coming soon. · enco-software.com, 9 Oct 2026
Intended users: EnCo describes SOX as a safety and security engineering workbench for multidisciplinary engineering teams and says the company serves automotive, plant engineering, rail, and aerospace industries. · enco-software.com, 9 Oct 2026
Platform architecture: EnCo describes SOX as a server database platform supporting centralized project data and simultaneous work by multidisciplinary teams. · enco-software.com, 9 Oct 2026
Platforms: The SOX product information describes a Windows-oriented RCP client and a C-SOX web client; it lists Ubuntu Server or Windows Server for the server environment. · enco-software.com, 8 Oct 2026
Progress tracking: Users can set an analysis status and assign tasks. · enco-software.com, 9 Oct 2026
Purpose: ATA is a top-down method for identifying attack paths from a point of attack to a threat and analyzing those paths. · enco-software.com, 9 Oct 2026
Reporting: Attack trees can be exported as graphics, results reported in Excel, and project documentation created with the integrated Report Designer. · enco-software.com, 8 Oct 2026
Reuse: Transferable attack paths can be reused elsewhere in a tree or in other analyses. · enco-software.com, 8 Oct 2026
Standards: The ATA guide describes calculating threat level under SAE J3061 or attack feasibility under ISO 21434, depending on the selected norm. · enco-software.com, 9 Oct 2026
Support: SOX and licensing queries are handled through EnCo’s Service Desk, which requires registration and active customer status. · enco-software.atlassian.net, 9 Oct 2026
Support resources: EnCo’s download page points visitors to its Service Desk for downloads, SOX tutorials, documentation, a knowledge base and support tickets. · enco-software.com, 8 Oct 2026
TARA connection: ATA can take over threats from TARA, link threat paths by drag and drop, and return its calculated attack feasibility level to TARA. · enco-software.com, 9 Oct 2026

Where EnCo SOX ATA stands on Freedom251

Threat Modeling Software#22 of 23