Freedom251 › Threat Modeling Software
ThreatZ
What ThreatZ is
ThreatZ is an automotive cybersecurity management platform for OEMs and Tier-1 suppliers working with vehicle security and supply-chain evidence. It brings TARA, software bills of materials, attack paths, incidents, and compliance evidence into a shared knowledge graph. Its threat-modeling tools support STRIDE TARA, AI-assisted scenarios, and attack paths with feasibility ratings. ThreatZ generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024; the last requires PRC-region deployment. Its integrations page lists more than 30 tools and formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube. Exchange formats include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV, and Excel. Team and Professional are hosted AWS Marketplace subscriptions; Enterprise supports private cloud, on-premises, and air-gapped deployment. A four-week trial uses sample vehicle data, while Professional and Enterprise trials need approval. Paid plans allow unlimited programs, and evidence-viewing guests are free. Pricing lists Team at $1,199 per year, billed annually, with up to three projects.
Who it suits
ThreatZ suits OEMs and Tier-1 suppliers managing vehicle cybersecurity and supply-chain evidence. It may fit teams that need threat modeling, compliance work products, and flexible deployment options.
What it does well
- Connects TARA, SBOMs, incidents, and compliance evidence.
- Supports STRIDE TARA and AI-assisted scenarios.
- Generates work products for three named standards.
- Enterprise supports air-gapped deployment.
- Free four-week trial with sample vehicle data.
What to know first
- No free plan.
- Team plan is limited to three projects.
- Professional and Enterprise trials require approval.
- GB 44495 support requires PRC-region deployment.
Limits
The Team plan allows up to three projects. The free trial lasts four weeks and uses sample vehicle data; Professional and Enterprise trials require approval.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Enterprise | Custom · unlimited projects & users | $100 a year |
| Team | Billed annually ($14,388/yr) · up to 3 projects | $14,388 a year |
| Professional | billed annually · 5–50 users · up to 15 projects | $499 a year |
As threatz.io lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the ThreatZ website
- Choose API, web, or self-hosted access
- Select Team, Professional, or Enterprise deployment
- Request the free four-week trial using sample vehicle data
- Obtain approval for a Professional or Enterprise trial when required
- Connect supported tools or import an exchange format
Verdict
ThreatZ combines automotive threat modeling, evidence management, and compliance outputs for vehicle programs. Review its plan details and deployment requirements, particularly the trial approval and regional deployment conditions.
Questions
How much does ThreatZ cost?
The pricing note says from $1,199/mo when billed annually. Listed plans are Team at $1,199 a year, Professional at $499 a year billed annually, and Enterprise at $100 a year with custom billing.
Is there a free plan or trial?
There is no free plan. A free four-week trial uses sample vehicle data; Professional and Enterprise trials are available on approval.
What deployment options are available?
ThreatZ is offered through API, web, and self-hosted platforms. Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises, and air-gapped deployment.
Which standards can ThreatZ support?
It generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024. GB 44495 support uses a PRC-region deployment.
What integrations and formats are supported?
More than 30 tools and data formats are listed, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube. Formats include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV, and Excel.
Who makes ThreatZ?
VxLabs Security identifies itself as ThreatZ’s parent company.
Facts from ThreatZ's own pages
- Compliance
- It generates work products for ISO/SAE 21434, UN R155, and GB 44495-2024, with GB 44495 support via PRC-region deployment. · threatz.io, 4 Oct 2026
- Data exchange
- Listed interchange formats include ReqIF, SARIF, OpenXSAM, STIX, AUTOSAR, PDF, CSV, and Excel. · threatz.io, 4 Oct 2026
- Deployment
- The pricing page says Team and Professional are hosted AWS Marketplace subscriptions, while Enterprise supports private cloud, on-premises, and air-gapped deployment. · threatz.io, 4 Oct 2026
- Founded
- VxLabs Security says it was founded in January 2022. · vxlabs.ai, 4 Oct 2026
- Headquarters
- Regensburg, Germany · threatz.io, 28 Sept 2026
- Integrations
- The integrations page lists 30+ tools and data formats, including Vector CANoe, MATLAB System Composer, Jira, GitHub, and SonarQube. · threatz.io, 4 Oct 2026
- Maker
- VxLabs Security identifies itself as the parent company behind ThreatZ and lists its headquarters in Dover, Delaware, USA. · vxlabs.ai, 4 Oct 2026
- Plan limits
- Pricing states that supplier-share guests who only view shared evidence are free and that program count is unlimited on all paid plans. · threatz.io, 4 Oct 2026
- Product
- ThreatZ is an automotive cybersecurity management platform that connects TARA, SBOMs, attack paths, incidents, and compliance evidence in one knowledge graph. · threatz.io, 4 Oct 2026
- Security
- ThreatZ is TISAX AL3 assessed; its trust page says ISO 27001 alignment is on the roadmap. · threatz.io, 4 Oct 2026
- Security controls
- The trust page lists TLS 1.3 encryption in transit, encryption at rest, tenant data segregation, role-based access controls, SAML SSO, and audit logging. · threatz.io, 4 Oct 2026
- Support
- The trust page says ThreatZ has offices and support in Germany, the United States, and Egypt, and commits to responding to vulnerability reports within 48 hours. · threatz.io, 4 Oct 2026
- Threat modeling
- ThreatZ supports STRIDE TARA with AI-assisted threat scenarios and aggregates attack paths with feasibility ratings. · threatz.io, 4 Oct 2026
- Trial
- The pricing page describes a free four-week trial using sample vehicle data; Professional and Enterprise trials are available on approval. · threatz.io, 4 Oct 2026
- Use cases
- The platform is designed for OEMs and Tier-1 suppliers managing vehicle cybersecurity and supply-chain evidence. · threatz.io, 4 Oct 2026
Where ThreatZ stands on Freedom251
- Threat Modeling Software#17 of 23