选择适合
您的方案
选择满足您团队需求的方案。所有方案均包含核心CSMS功能，为成长型组织提供高级功能。
面向小型团队的核心TARA和威胁建模
Billed annually ($14,388/yr)
免费试用- Users & Projects
- Unlimited internal users
- Up to 3 projects (+$99/mo each)
- TARA & Risk
- Full security catalog
- System scoping & threat modeling
- STRIDE analysis
- Risk assessment & heatmaps
- Risk treatment planning
- Attack path analysis
- Risk relationship graph
- Compliance & Reporting
- Compliance reporting (ISO/SAE 21434)
- PDF & Excel exports
- Integrations
- MATLAB System Composer import
- Platform
- RBAC (basic roles)
- Team collaboration
- Multi-language (EN, DE, ZH)
- Support
- Email support (48h SLA)
包含SBOM、测试和情报的完整CSMS生命周期
5–50 users · Billed annually
申请演示- Users & Projects
- 5–50 users
- Up to 15 projects (+$99/mo each)
- SBOM & Vulnerability
- SBOM management (CycloneDX, SPDX)
- Vulnerability tracking
- Weakness tree visualization
- SCA/SAST code analysis
- License tracking
- Releases
- Security blueprints catalog
- Project baselines & releases
- Project freeze & unfreeze
- Platform & Security
- Two-factor authentication (2FA)
- Report sharing (LiveLink + Snapshot)
- Multi-framework compliance
- Integrations
- SW architecture import (EA, Cameo, Rhapsody)
- Jira, GitHub & GitLab
- Support
- Priority email support (24h SLA)
面向全球OEM和一级供应商的定制部署
Starting at $100K/yr
联系销售- Users & Projects
- Unlimited users & projects
- Programs & Releases
- Unlimited programs
- Project baselines & releases
- 3D vehicle architecture canvas
- Security Testing
- Testing campaigns & evidence collection
- Vector CANoe integration
- TestBench Agent Fuzzing included
- Network & Signal Analysis
- Vehicle signal modeling & network communication matrix
- DBC import (CAN, LIN, FlexRay) & VSS v6.0 signal mapping
- Signal threat auto-generation, compliance & access control
- Service interface modeling (SOME/IP, DDS)
- Security & Governance
- SSO / OIDC
- Advanced RBAC & governance
- Platform & API
- Multi-language (EN, DE, ZH)
- REST API access
- Email notifications
- Custom integrations
- Advanced reporting
- AI & Operations
- AI Power Pack included
- Incident management
- Security event monitoring
- VSOC integration (2 connectors)
- Ops data retention 6–36 months
- Intelligence & Exports
- Threat intelligence & multi-source feeds
- STIX / AUTOSAR exports
- Support & SLA
- Dedicated CSM
- 4-hour SLA
- 99.9% uptime guarantee
- On-premise available
计算您的
ThreatZ ROI
根据您的团队调整假设。每年节省的工时、成本节省、扣除 ThreatZ 后的净节省、ROI 以及回收期——全部实时计算。
您使用 ThreatZ 的节省
Available
Add-Ons
Enhance ThreatZ with powerful add-ons. Available on any plan unless otherwise noted.
AI Power Pack
AI-driven threat identification, automated risk scoring, and intelligent test case generation powered by knowledge graphs.
Free 1st year, then +$29/user/mo
TestBench Agent Fuzzing
Deploy the ThreatZ TestBench Agent on your test bench for CWE-driven fuzzing with 36+ protocol fuzzers, 5-level safety escalation, and hardware-agnostic execution. Included in Enterprise.
Custom — contact sales
VSOC Connector
Bi-directional integration with your Vehicle Security Operations Center. Real-time event ingestion and alert correlation.
+$500/mo per connector
Managed TARA Service
Our cybersecurity engineers perform the full TARA assessment for your project. Includes threat modeling, risk analysis, and compliance reports.
From $5,000/project
Training Module
In-app learning module with guided demos, hands-on exercises in a sandbox environment, and interactive walkthroughs covering ISO/SAE 21434 methodology and TARA best practices.
$2,000/year
Additional Projects
Need more than your plan's included projects? Add extra project slots to any Team or Professional subscription.
$99/mo per project
On-Premise Deployment
Run ThreatZ on your own infrastructure with air-gapped support, dedicated resources, and custom SLA terms. Enterprise only.
+40% of cloud pricing
Custom Integration
Bespoke integrations with your internal tools, PLM systems, or CI/CD pipelines. Delivered as consumable story points scoped to your requirements.
$2,500/story point
Starter Package
Full onboarding and migration service. We set up your workspace, configure your vehicle architectures, and migrate all existing projects to ThreatZ so you can hit the ground running.
$7,900 one-time
功能对比
详情
A detailed breakdown of what's included in every ThreatZ plan so you can choose the perfect fit.
| Feature | Team | Professional | Enterprise |
|---|---|---|---|
| Pricing | |||
| Monthly price (annual) | $1,199/mo flat | $499/user/mo | Custom |
| Monthly price (monthly) | $1,449/mo flat | $599/user/mo | Custom |
| Users | Unlimited | 5–50 | Unlimited |
| Projects included | 3 (+$99/mo each) | 15 (+$99/mo each) | Unlimited |
| TARA & Risk Analysis | |||
| Security catalog | ✓ | ✓ | ✓ |
| System scoping & threat modeling | ✓ | ✓ | ✓ |
| STRIDE analysis | ✓ | ✓ | ✓ |
| Risk assessment & heatmaps | ✓ | ✓ | ✓ |
| Risk treatment planning | ✓ | ✓ | ✓ |
| Attack path analysis | ✓ | ✓ | ✓ |
| Risk relationship graph | ✓ | ✓ | ✓ |
| Programs & Release Management | |||
| Programs & vehicle architecture | ✗ | ✗ | Unlimited |
| Security blueprints catalog | ✗ | ✓ | ✓ |
| 3D vehicle architecture canvas | ✗ | ✗ | ✓ |
| Project baselines & releases | ✗ | ✓ | ✓ |
| Release comparison & metrics | ✗ | ✓ | ✓ |
| Project freeze & unfreeze | ✗ | ✓ | ✓ |
| SBOM & Vulnerability Management | |||
| SBOM management (CycloneDX, SPDX) | ✗ | ✓ | ✓ |
| Vulnerability tracking | ✗ | ✓ | ✓ |
| Weakness tree visualization | ✗ | ✓ | ✓ |
| SCA / SAST code analysis | ✗ | ✓ | ✓ |
| License tracking | ✗ | ✓ | ✓ |
| Security Testing | |||
| Testing campaigns & evidence collection | ✗ | ✗ | ✓ |
| Vector CANoe integration | ✗ | ✗ | ✓ |
| TestBench Agent Fuzzing | ✗ | ✗ | ✓ |
| Network Communication | |||
| Network communication matrix | ✗ | ✗ | ✓ |
| DBC file import (CAN, LIN, FlexRay) | ✗ | ✗ | ✓ |
| VSS v6.0 signal mapping | ✗ | ✗ | ✓ |
| Signal threat auto-generation (STRIDE) | ✗ | ✗ | ✓ |
| Signal compliance assessment | ✗ | ✗ | ✓ |
| Data flow visualization | ✗ | ✗ | ✓ |
| Signal access control policies | ✗ | ✗ | ✓ |
| Service interface modeling (SOME/IP, DDS) | ✗ | ✗ | ✓ |
| Policy manager | ✓ | ✓ | ✓ |
| Intelligence & Operations | |||
| Threat intelligence | ✗ | ✗ | ✓ |
| Multi-source threat intel | ✗ | ✗ | ✓ |
| Incident management | ✗ | ✗ | ✓ |
| Security event monitoring | ✗ | ✗ | ✓ |
| VSOC integration | ✗ | ✗ | 2 connectors included |
| Ops data retention | ✗ | ✗ | 6–36 months |
| Compliance & Reporting | |||
| ISO/SAE 21434 compliance reports | ✓ | ✓ | ✓ |
| Multi-framework compliance | ✗ | ✓ | ✓ |
| PDF & Excel exports | ✓ | ✓ | ✓ |
| Report sharing (LiveLink + Snapshot) | ✗ | ✓ | ✓ |
| STIX / AUTOSAR exports | ✗ | ✗ | ✓ |
| Advanced reporting | ✗ | ✗ | ✓ |
| ReqIF export | ✗ | ✓ | ✓ |
| Integrations | |||
| MATLAB System Composer | ✓ | ✓ | ✓ |
| SW architecture (EA, Cameo, Rhapsody) | ✗ | ✓ | ✓ |
| Jira, GitHub & GitLab | ✗ | ✓ | ✓ |
| REST API access | ✗ | ✗ | ✓ |
| Email notifications | ✗ | ✗ | ✓ |
| Custom integrations | ✗ | ✗ | ✓ |
| Platform & Security | |||
| Multi-language support (EN, DE, ZH) | ✓ | ✓ | ✓ |
| Team collaboration | ✓ | ✓ | ✓ |
| RBAC (basic roles) | ✓ | ✓ | ✓ |
| Two-factor authentication | ✗ | ✓ | ✓ |
| SSO / OIDC | ✗ | ✗ | ✓ |
| Advanced RBAC & governance | ✗ | ✗ | ✓ |
| AI Power Pack | Free 1st yr | Free 1st yr | Included |
| Support & SLA | |||
| Email support | 48h SLA | 24h SLA | 4h SLA |
| Dedicated CSM | ✗ | ✗ | ✓ |
| Uptime guarantee | ✗ | ✗ | 99.9% |
| On-premise deployment | ✗ | ✗ | ✓ |
| Private cloud deployment | ✗ | ✗ | ✓ |
常见
问题
Everything you need to know about ThreatZ pricing, plans, and features.
我可以随时切换方案吗？
Team和Professional方案有什么区别？
年付有折扣吗？
支持哪些合规框架？
大型团队有批量折扣吗？
ThreatZ 如何授权？
供应商需要各自的授权吗？
什么算一个项目？
可以本地部署吗？
Team方案的"无限用户"是什么意思？
有免费试用吗？
What about custom user roles, project hierarchies, or OEM/Tier-1 collaboration?
不确定哪个方案合适？
与工程师一起梳理您的项目配置 — 30 分钟，没有 PPT。