PageSourceSearch

https://vxlabs.ai/threatz/

html vxlabs.ai collected 2026-10-03 21:12:43 UTC 61,614 bytes, 830 lines download raw bytes

1<!doctype html>
2<html lang="en">
3<head>
4  <meta charset="UTF-8">
5  <meta name="viewport" content="width=device-width, initial-scale=1.0">
6  <meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1">
7
8  <!-- Primary Meta -->
9  <title>ThreatZ — AI-Powered Automotive CSMS Platform | VxLabs Security</title>
10  <meta name="description" content="ThreatZ is the living CSMS backbone for automotive — one AI-powered knowledge graph unifying TARA, SBOM, testing and operations. ISO 21434 compliant.">
11
12  <!-- Canonical & Hreflang -->
13  <link rel="canonical" href="https://vxlabs.ai/threatz/">
14  <link rel="alternate" hreflang="en" href="https://vxlabs.ai/threatz/">
15  <link rel="alternate" hreflang="de" href="https://vxlabs.ai/de/threatz/">
16  <link rel="alternate" hreflang="zh" href="https://vxlabs.ai/zh/threatz/">
17  <link rel="alternate" hreflang="x-default" href="https://vxlabs.ai/threatz/">
18
19  <!-- Favicon -->
20  <link rel="icon" type="image/svg+xml" href="/favicon.svg?v=202607241">
21  <link rel="icon" type="image/x-icon" href="/favicon.ico?v=202607241" sizes="48x48 32x32 16x16">
22  <link rel="icon" type="image/png" sizes="96x96" href="/favicon-96x96.png?v=202607241">
23  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png?v=202607241">
24  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png?v=202607241">
25  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png?v=202607241">
26  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=202607241">
27  <link rel="manifest" href="/site.webmanifest">
28  <meta name="theme-color" content="#050a10">
29
30  <!-- Open Graph -->
31  <meta property="og:type" content="website">
32  <meta property="og:site_name" content="VxLabs Security">
33  <meta property="og:title" content="ThreatZ — AI-Powered Automotive CSMS Platform | VxLabs Security">
34  <meta property="og:description" content="One AI-powered knowledge graph connecting design, TARA, SBOM, testing and operations. ISO/SAE 21434 &amp; UNECE R155 compliant.">
35  <meta property="og:image" content="https://vxlabs.ai/img/og-threatz.png">
36  <meta property="og:image:width" content="1200">
37  <meta property="og:image:height" content="630">
38  <meta property="og:image:alt" content="VxLabs Security automotive cybersecurity platform">
39  <meta property="og:url" content="https://vxlabs.ai/threatz/">
40  <meta property="og:locale" content="en_US">
41  <meta property="og:locale:alternate" content="de_DE">
42  <meta property="og:locale:alternate" content="zh_CN">
43
44  <!-- Twitter -->
45  <meta name="twitter:card" content="summary_large_image">
46  <meta name="twitter:site" content="@VxLabsCorp">
47  <meta name="twitter:creator" content="@VxLabsCorp">
48  <meta name="twitter:title" content="ThreatZ — AI-Powered Automotive CSMS Platform | VxLabs Security">
49  <meta name="twitter:description" content="One AI-powered knowledge graph connecting design, TARA, SBOM, testing and operations. ISO/SAE 21434 &amp; UNECE R155 compliant.">
50  <meta name="twitter:image" content="https://vxlabs.ai/img/og-threatz.png">
51
52  <!-- SEO extras -->
53  <meta name="author" content="VxLabs Security">
54  <meta name="publisher" content="VxLabs Security">
55  <meta name="copyright" content="2026 VxLabs Security">
56
57  <!-- Structured Data -->
58  
58<script type="application/ld+json">
59  {
60    "@context": "https://schema.org",
61    "@graph": [
62      {
63        "@type": "Organization",
64        "@id": "https://vxlabs.ai/#organization",
65        "name": "VxLabs Security",
66        "legalName": "VxLabs Security",
67        "url": "https://vxlabs.ai",
68        "logo": "https://vxlabs.ai/img/vxlabs-logo.svg"
69      },
70      {
71        "@type": "WebSite",
72        "@id": "https://vxlabs.ai/#website",
73        "url": "https://vxlabs.ai",
74        "name": "VxLabs Security",
75        "publisher": {"@id": "https://vxlabs.ai/#organization"}
76      },
77      {
78        "@type": "WebPage",
79        "@id": "https://vxlabs.ai/threatz/#webpage",
80        "url": "https://vxlabs.ai/threatz/",
81        "name": "ThreatZ | Automotive TARA, SBOM & Compliance Platform",
82        "description": "ThreatZ is the complete automotive cybersecurity management system covering TARA, SBOM, compliance reporting, security testing, and operations for ISO/SAE 21434 and UNECE R155.",
83        "isPartOf": {"@id": "https://vxlabs.ai/#website"},
84        "publisher": {"@id": "https://vxlabs.ai/#organization"}
85      },
86      {
87        "@type": "SoftwareApplication",
88        "@id": "https://vxlabs.ai/threatz/#software",
89        "name": "ThreatZ",
90        "url": "https://threatz.io",
91        "sameAs": ["https://threatz.io", "https://aws.amazon.com/marketplace/pp/prodview-s6rmk5dl7gstc"],
92        "applicationCategory": "SecurityApplication",
93        "applicationSubCategory": "Automotive Cybersecurity Management System",
94        "operatingSystem": "Web",
95        "description": "The complete automotive cybersecurity management platform covering Threat Analysis and Risk Assessment (TARA), Software Bill of Materials (SBOM), compliance reporting for ISO/SAE 21434 and UNECE R155, security testing and validation, incident management and threat intelligence, and reusable security catalog.",
96        "featureList": [
97          "TARA - Threat Analysis & Risk Assessment with STRIDE methodology",
98          "SBOM management supporting CycloneDX, SPDX v2.3, SPDX v3",
99          "Compliance reporting for ISO/SAE 21434, UNECE R155, GB 44495, EU CRA",
100          "Security testing campaigns with Vector CANoe integration",
101          "Incident management and threat intelligence tracking",
102          "Security catalog with reusable templates and policy manager",
103          "Export formats: PDF, CSV, ReqIF, SARIF 2.1.0, OpenXSAM",
104          "SAST integrations: Semgrep, CodeQL, SonarQube, Cppcheck, Clang SA",
105          "SCA integrations: Black Duck, Snyk, JFrog Xray, FOSSA, Mend",
106          "Binary analysis: GrammaTech CodeSonar, Perforce Klocwork, AbsInt Astrée",
107          "SBOM platforms: OWASP Dependency-Track, GUAC",
108          "Multi-language support (English, German, Chinese)"
109        ],
110        "softwareRequirements": "Modern web browser",
111        "offers": {
112          "@type": "AggregateOffer",
113          "priceCurrency": "USD",
114          "lowPrice": "1199",
115          "highPrice": "100000",
116          "offerCount": "3"
117        },
118        "publisher": {"@id": "https://vxlabs.ai/#organization"},
119        "screenshot": "https://vxlabs.ai/img/threatz-dashboard.png"
120      },
121      {
122        "@type": "FAQPage",
123        "@id": "https://vxlabs.ai/threatz/#faq",
124        "mainEntity": [
125          {
126            "@type": "Question",
127            "name": "What is ThreatZ?",
128            "acceptedAnswer": {
129              "@type": "Answer",
130              "text": "ThreatZ is an AI-powered automotive cybersecurity platform that provides end-to-end CSMS (Cybersecurity Management System) capabilities for OEMs and Tier-1 suppliers. It covers TARA analysis, SBOM management, vulnerability tracking, compliance reporting, and security operations — all unified in a single platform with a knowledge graph backbone."
131            }
132          },
133          {
134            "@type": "Question",
135            "name": "How does ThreatZ automate TARA analysis?",
136            "acceptedAnswer": {
137              "@type": "Answer",
138              "text": "ThreatZ uses AI to automatically identify assets, generate threat scenarios using STRIDE methodology, assess attack feasibility, calculate risk levels per ISO/SAE 21434, and suggest risk treatment options. What traditionally takes weeks of manual effort can be completed in hours, with full traceability from assets to cybersecurity goals."
139            }
140          },
141          {
142            "@type": "Question",
143            "name": "Which compliance standards does ThreatZ support?",
144            "acceptedAnswer": {
145              "@type": "Answer",
146              "text": "ThreatZ supports ISO/SAE 21434, UNECE R155 (WP.29), GB 44495 (China), and the EU Cyber Resilience Act (CRA). The platform generates standard-specific work products, evidence packages for type approval, and audit-ready reports. Enterprise plans also support STIX and AUTOSAR export formats."
147            }
148          },
149          {
150            "@type": "Question",
151            "name": "How does the SBOM management module work?",
152            "acceptedAnswer": {
153              "@type": "Answer",
154              "text": "The SBOM module provides a complete software bill of materials lifecycle — from ingestion of CycloneDX and SPDX formats, through continuous vulnerability monitoring against NVD, CNVD, and OSV databases, to automated risk scoring with CVSS and EPSS metrics. It tracks components across ECU variants and generates VEX (Vulnerability Exploitability Exchange) documents for supply chain communication."
155            }
156          },
157          {
158            "@type": "Question",
159            "name": "Can ThreatZ integrate with our existing tools?",
160            "acceptedAnswer": {
161              "@type": "Answer",
162              "text": "Yes. ThreatZ provides REST API access, webhooks, and native integrations with Jira, Azure DevOps, and common ALM tools. It supports OpenXSAM and STIX export formats for interoperability with other security tools. SSO via SAML 2.0 and OpenID Connect is available on Professional and Enterprise plans."
163            }
164          },
165          {
166            "@type": "Question",
167            "name": "What is the knowledge graph and why does it matter?",
168            "acceptedAnswer": {
169              "@type": "Answer",
170              "text": "ThreatZ's knowledge graph is a connected data model that links every entity in your cybersecurity program — from vehicle architectures and ECU components to threat scenarios, vulnerabilities, and compliance evidence. This enables powerful traceability queries (e.g., \"show all threats affecting components with known CVEs\") and ensures no gaps in your security analysis."
171            }
172          },
173          {
174            "@type": "Question",
175            "name": "Is ThreatZ suitable for Tier-1 suppliers?",
176            "acceptedAnswer": {
177              "@type": "Answer",
178              "text": "Absolutely. ThreatZ was designed specifically for the needs of Tier-1 and Tier-2 suppliers who must demonstrate ISO/SAE 21434 compliance to multiple OEMs simultaneously. The multi-project architecture lets suppliers manage separate TARA analyses per OEM program while sharing common component libraries and threat intelligence across projects."
179            }
180          },
181          {
182            "@type": "Question",
183            "name": "How is ThreatZ deployed?",
184            "acceptedAnswer": {
185              "@type": "Answer",
186              "text": "ThreatZ deploys as private cloud or on-premise &mdash; air-gapped supported. Dedicated infrastructure, EU / China / US data residency options, and AWS Marketplace as a procurement channel for authoring and pilots. Same ThreatZ, two deployment modes."
187            }
188          }
189        ]
190      },
191      {
192        "@type": "BreadcrumbList",
193        "itemListElement": [
194          {"@type": "ListItem", "position": 1, "name": "Home", "item": "https://vxlabs.ai/"},
195          {"@type": "ListItem", "position": 2, "name": "ThreatZ", "item": "https://vxlabs.ai/threatz/"}
196        ]
197      }
198    ]
199  }
200  </script>
200
201  <link rel="stylesheet" href="/css/fonts-core.css">
202  
202<script>if(localStorage.getItem("vxlabs-lang")==="zh"){var l=document.createElement("link");l.rel="stylesheet";l.href="/css/fonts-cjk.css";document.head.appendChild(l)}</script>
202
203  <link rel="preload" href="/img/vxlabs-logo-dark.svg" as="image">
204  <!-- Styles -->
205  <link rel="stylesheet" href="/css/style.min.css?v=202609221837">
206
207  <style>
208    /* Hero badges row */
209    .tz-badges-row{display:flex;flex-wrap:wrap;justify-content:center;gap:.75rem;margin-top:1.75rem}
210    .tz-std-badge{display:inline-flex;align-items:center;gap:.375rem;padding:.375rem .75rem;border-radius:999px;border:1px solid var(--surface-border);background:var(--surface);font-size:.8125rem;font-weight:500;color:var(--text-secondary)}
211    .tz-std-badge svg{flex-shrink:0;color:var(--brand-400)}
212
213    /* Hero proof stats */
214    .tz-hero-stats{display:grid;grid-template-columns:repeat(4,1fr);gap:1.5rem;margin-top:2.5rem;max-width:44rem;margin-left:auto;margin-right:auto}
215    .tz-hero-stat{text-align:center}
216    .tz-hero-stat-value{font-family:var(--font-heading);font-size:clamp(1.75rem,3vw,2.5rem);font-weight:700;color:var(--brand-400);letter-spacing:-.02em}
217    .tz-hero-stat-label{font-size:.8125rem;color:var(--text-muted);line-height:1.4;margin-top:.25rem}
218    @media(max-width:480px){.tz-hero-stats{grid-template-columns:repeat(2,1fr);gap:1rem}}
219
220    /* Standards banner */
221    .tz-standards-bar{display:flex;justify-content:center;flex-wrap:wrap;gap:1.25rem 2rem;padding:2.5rem 0}
222    .tz-std-card{display:flex;align-items:center;gap:.75rem;padding:.875rem 1.5rem;border-radius:var(--radius-lg);background:var(--surface);border:1px solid var(--surface-border);transition:transform var(--transition-base),box-shadow var(--transition-base)}
223    .tz-std-card:hover{transform:translateY(-2px);box-shadow:var(--shadow-md)}
224    .tz-std-card-icon{width:2.5rem;height:2.5rem;border-radius:var(--radius-md);display:flex;align-items:center;justify-content:center;flex-shrink:0}
225    .tz-std-card-name{font-family:var(--font-heading);font-size:1.0625rem;font-weight:700;color:var(--text);letter-spacing:-.01em}
226    .tz-std-card-sub{font-size:.75rem;color:var(--text-muted);margin-top:.125rem}
227    @media(max-width:640px){.tz-standards-bar{gap:1rem}.tz-std-card{padding:.75rem 1.125rem}.tz-std-card-name{font-size:.9375rem}}
228
229    /* Five pillars grid */
230    .tz-pillars-grid{display:grid;grid-template-columns:repeat(4,1fr);gap:1.25rem}
231    @media(max-width:1200px){.tz-pillars-grid{grid-template-columns:repeat(3,1fr)}}
232    @media(max-width:768px){.tz-pillars-grid{grid-template-columns:repeat(2,1fr)}}
233    @media(max-width:480px){.tz-pillars-grid{grid-template-columns:1fr}}
234    .tz-pillar{min-width:0}
235    .tz-pillar{background:var(--surface);border:1px solid var(--surface-border);border-radius:var(--radius-lg);padding:1.75rem;border-top:3px solid;transition:transform var(--transition-base),box-shadow var(--transition-base)}
236    .tz-pillar:hover{transform:translateY(-2px);box-shadow:var(--shadow-md)}
237    .tz-pillar-num{font-family:var(--font-heading);font-size:.8125rem;font-weight:700;color:var(--text-muted);letter-spacing:.05em;margin-bottom:.5rem}
238    .tz-pillar h3{font-size:1.25rem;font-weight:700;margin:0 0 .5rem}
239    .tz-pillar-tagline{font-size:.875rem;color:var(--text-secondary);font-style:italic;margin-bottom:1rem;line-height:1.5}
240
241    /* Architecture diagram (in pillars section) */
242    .tz-arch-visual{max-width:72rem;margin:2.5rem auto 0;border-radius:var(--radius-lg);overflow:hidden;padding:2rem;background:var(--surface);border:1px solid var(--surface-border)}
243    .tz-arch-visual svg{width:100%;height:auto;display:block}
244    .tz-arch-caption{text-align:center;margin-top:1rem;font-size:.8125rem;color:var(--text-muted);letter-spacing:.02em}
245
246    /* Knowledge graph visual */
247    .tz-kg-visual{max-width:72rem;margin:0 auto;border-radius:var(--radius-lg);overflow:hidden;padding:1.5rem 2rem;background:var(--surface);border:1px solid var(--surface-border)}
248    .tz-kg-visual img{width:100%;height:auto;display:block}
249    .tz-kg-visual .kg-light{display:none}
250
251    /* Entity pills */
252    .tz-entity-pills{display:flex;flex-wrap:wrap;justify-content:center;gap:.5rem;margin-top:1rem}
253    .tz-pill{padding:.375rem .875rem;border-radius:var(--radius-full);border:1px solid rgba(0,229,150,.3);background:rgba(0,229,150,.06);font-size:.8125rem;font-weight:500;color:var(--brand-400);white-space:nowrap}
254
255    /* Transformation grid */
256    .tz-transform-grid{display:grid;grid-template-columns:repeat(5,1fr);gap:1.25rem;max-width:52rem;margin:0 auto}
257    .tz-transform-item{text-align:center;background:var(--surface);border:1px solid var(--surface-border);border-radius:var(--radius-lg);padding:1.5rem 1rem}
258    .tz-transform-label{font-size:.75rem;font-weight:600;text-transform:uppercase;letter-spacing:.06em;color:var(--text-muted);margin-bottom:1rem}
259    .tz-transform-old{font-size:1rem;color:var(--text-muted);text-decoration:line-through;opacity:.6}
260    .tz-transform-new{font-size:1.125rem;font-weight:700;color:var(--brand-400);margin-top:.5rem}
261    @media(max-width:768px){.tz-transform-grid{grid-template-columns:repeat(3,1fr)} }
262    @media(max-width:480px){.tz-transform-grid{grid-template-columns:repeat(2,1fr)} }
263
264    /* KPI tiles */
265    .tz-kpi-grid{display:grid;grid-template-columns:repeat(4,1fr);gap:1.25rem;max-width:52rem;margin:0 auto}
266    .tz-kpi-tile{background:var(--surface);border:1px solid var(--surface-border);border-radius:var(--radius-lg);padding:1.5rem;text-align:center}
267    .tz-kpi-tile h4{font-size:.9375rem;font-weight:600;margin:0 0 1rem}
268    .tz-kpi-old{font-size:.9375rem;color:var(--text-muted);text-decoration:line-through;opacity:.6}
269    .tz-kpi-arrow{font-size:1.25rem;color:var(--text-muted);margin:.375rem 0}
270    .tz-kpi-new{font-size:1.25rem;font-weight:700;color:var(--brand-400)}
271    @media(max-width:640px){.tz-kpi-grid{grid-template-columns:repeat(2,1fr)} }
272
273    /* Value propositions grid */
274    .tz-vp-grid{display:grid;grid-template-columns:1fr 1fr;gap:1.25rem;max-width:52rem;margin:0 auto}
275    .tz-vp{display:flex;gap:1rem;align-items:flex-start;background:var(--surface);border:1px solid var(--surface-border);border-radius:var(--radius-lg);padding:1.25rem}
276    .tz-vp-num{flex-shrink:0;width:2rem;height:2rem;border-radius:50%;background:rgba(0,229,150,.1);color:var(--brand-400);font-family:var(--font-heading);font-weight:700;font-size:.875rem;display:flex;align-items:center;justify-content:center}
277    .tz-vp strong{display:block;margin-bottom:.25rem}
278    .tz-vp p{font-size:.875rem;color:var(--text-secondary);margin:0;line-height:1.5}
279    @media(max-width:640px){.tz-vp-grid{grid-template-columns:1fr} }
280
281    /* Scale flow */
282    .tz-scale-flow{display:flex;align-items:center;justify-content:center;gap:1.25rem;margin-top:2rem;flex-wrap:wrap}
283    .tz-scale-step{display:flex;flex-direction:column;align-items:center;gap:.5rem}
284    .tz-scale-icon{width:3.5rem;height:3.5rem;border-radius:var(--radius-lg);display:flex;align-items:center;justify-content:center;background:rgba(0,182,198,.08);border:1px solid rgba(0,182,198,.2);color:var(--brand-400)}
285    .tz-scale-step span{font-size:.875rem;font-weight:600}
286    .tz-scale-arrow{font-size:1.5rem;color:var(--text-muted);font-weight:300}
287
288    /* Hero dashboard — real product style */
289    .hero-dash-row{display:grid;grid-template-columns:1fr 1fr;gap:.625rem;margin-top:.625rem}
290    .hero-dash-card{background:var(--surface-hover);border-radius:var(--radius-md);padding:.875rem}
291    .hero-dash-card-title{font-size:.6875rem;font-weight:600;color:var(--text-muted);text-transform:uppercase;letter-spacing:.04em;margin-bottom:.625rem}
292    .hero-donut-wrap{display:flex;justify-content:center;margin-bottom:.375rem}
293    .hero-dash-hint{font-size:.6875rem;color:var(--text-muted);text-align:center}
294    .hero-risk-bars{display:flex;flex-direction:column;gap:.4rem}
295    .hero-risk-row{display:flex;align-items:center;gap:.375rem}
296    .hero-risk-dot{width:.375rem;height:.375rem;border-radius:50%;flex-shrink:0}
297    .hero-risk-label{font-size:.75rem;color:var(--text-secondary);width:3.25rem;flex-shrink:0}
298    .hero-risk-bar{height:.375rem;border-radius:999px;flex-shrink:0}
299    .hero-risk-val{font-size:.75rem;font-weight:600;color:var(--text);margin-left:auto}
300    .hero-modules{display:flex;flex-direction:column;gap:.4rem}
301    .hero-mod-row{display:flex;align-items:center;gap:.5rem}
302    .hero-mod-label{font-size:.75rem;color:var(--text-secondary);width:7rem;flex-shrink:0}
303    .hero-mod-track{flex:1;height:.375rem;border-radius:999px;background:var(--surface-border);overflow:hidden}
304    .hero-mod-fill{height:100%;border-radius:999px}
305    .hero-mod-pct{font-size:.75rem;font-weight:600;color:var(--text);width:2rem;text-align:right;flex-shrink:0}
306
307    /* ── Light theme overrides ── */
308  </style>
309<script>function initApollo(){var n=Math.random().toString(36).substring(7),o=document.createElement("script");o.src="https://assets.apollo.io/micro/website-tracker/tracker.iife.js?nocache="+n;o.async=!0;o.defer=!0;o.integrity="sha384-xr4jD1Wp129ncq8edvVoHYIbpmFCMMiGvJ0lMh0N9vHgqhBvfZ5OGkoqarGCeTF/";o.crossOrigin="anonymous";o.onload=function(){window.trackingFunctions.onLoad({appId:"69c93e55b3d3120011f3acbc"})};document.head.appendChild(o)}initApollo();</script>
309
310</head>
311<body>
312<a href="#main" class="skip-to-main">Skip to main content</a>
313
314<!-- ====== NAVIGATION ====== -->
315<!-- @@HEADER@@ -->
316<nav class="nav" role="navigation" style="color-scheme:dark" aria-label="Main navigation">
317  <div class="container nav-inner">
318    <a href="/" class="nav-logo">
319      <div class="nav-logo-icon"><img src="/img/vxlabs-logo-dark.svg" alt="VxLabs Security logo" width="76" height="24"></div>
320    </a>
321
322    <div class="nav-links">
323      <a href="/" class="nav-link" data-i18n="nav.home">Home</a>
324      <div class="nav-link-dropdown">
325        <button type="button" class="nav-link" aria-haspopup="true" aria-expanded="false"><span data-i18n="nav.products">Products</span> <svg width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" class="nav-caret" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg></button>
326        <div class="nav-dropdown">
327          <a href="/threatz/">
328            <span class="logo-circle sm teal"><img src="/img/threatz-logo.svg" alt="" aria-hidden="true" width="24" height="24"></span>
329            <span><strong>ThreatZ</strong><br><small data-i18n="nav.threatz.label">TARA, SBOM, Compliance</small></span>
330          </a>          <hr class="nav-divider">
331          <a href="/threatz/integrations/" class="nav-dropdown-compact">
332            <span class="nav-dropdown-text">Integrations</span>
333          </a>
334          <a href="/threatz/compare/" class="nav-dropdown-compact">
335            <span class="nav-dropdown-text">Compare</span>
336          </a>
337        </div>
338      </div>
339      <div class="nav-link-dropdown">
340        <button type="button" class="nav-link" aria-haspopup="true" aria-expanded="false"><span data-i18n="nav.solutions">Solutions</span> <svg width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" class="nav-caret" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg></button>
341        <div class="nav-dropdown">
342          <a href="/solutions/oem-csms-teams/" class="nav-dropdown-compact">
343            <span class="nav-dropdown-text">For OEM CSMS Teams</span>
344          </a>
345          <a href="/solutions/tier-1-suppliers/" class="nav-dropdown-compact">
346            <span class="nav-dropdown-text">For Tier-1 Suppliers</span>
347          </a>
348          <hr class="nav-divider">
349          <a href="/solutions/tara-pilot/" class="nav-dropdown-compact">
350            <span class="nav-dropdown-text">TARA-First Pilot (6-8 weeks)</span>
351          </a>
352          <a href="/threatz/compare/build-vs-current-setup/" class="nav-dropdown-compact">
353            <span class="nav-dropdown-text">Compare Your Current Setup</span>
354          </a>
355          <hr class="nav-divider">
356          <a href="/solutions/" class="nav-dropdown-compact">
357            <span class="nav-dropdown-text">All Solutions</span>
358          </a>
359        </div>
360      </div>
361            <a href="/services/" class="nav-link" data-i18n="nav.services">Services</a>
362      <a href="/pricing/" class="nav-link" data-i18n="nav.pricing">Pricing</a>
363      <div class="nav-link-dropdown"><button type="button" class="nav-link" aria-haspopup="true" aria-expanded="false"><span data-i18n="nav.resources">Resources</span> <svg aria-hidden="true" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" class="nav-caret"><path d="m6 9 6 6 6-6"/></svg></button><div class="nav-dropdown"><a href="/resources/"><span class="nav-dropdown-text" data-i18n="nav.allResources">All Resources</span></a><a href="/case-studies/"><span class="nav-dropdown-text" data-i18n="nav.caseStudies">Case Studies</span></a><a href="/glossary/"><span class="nav-dropdown-text">Glossary</span></a><a href="/press/"><span class="nav-dropdown-text" data-i18n="nav.press">Press</span></a><a href="/events/"><span class="nav-dropdown-text" data-i18n="nav.events">Events</span></a></div></div>
364      <div class="nav-link-dropdown"><button type="button" class="nav-link" aria-haspopup="true" aria-expanded="false"><span data-i18n="nav.company">Company</span> <svg aria-hidden="true" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" class="nav-caret">
364<path d="m6 9 6 6 6-6"/></svg></button><div class="nav-dropdown"><a href="/about/"><span class="nav-dropdown-text" data-i18n="nav.about">About</span></a><a href="/contact/"><span class="nav-dropdown-text" data-i18n="nav.contact">Contact</span></a></div></div>
365    </div>
366
367    <div class="nav-actions">
368      <div class="nav-lang-wrap">
369        <button class="nav-lang-btn" aria-label="Language: EN"><svg aria-hidden="true" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="10"/><line x1="2" y1="12" x2="22" y2="12"/><path d="M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"/></svg> <span id="langLabel">EN</span> <svg aria-hidden="true" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><path d="m6 9 6 6 6-6"/></svg></button>
370        <div class="nav-lang-dropdown">
371          <button onclick="setLanguage('en')" data-lang="en" class="active">English</button>
372          <a href="/de/threatz/" data-lang="de" class="nav-lang-link">Deutsch</a>
373          <a href="/zh/threatz/" data-lang="zh" class="nav-lang-link">中文</a>
374        </div>
375      </div>
376      <a href="/demo/" class="btn btn-sm btn-primary" data-modal="demo"><span data-i18n="btn.requestDemo">Request Demo</span></a>
377      <button class="mobile-toggle" id="mobileToggle" aria-label="Toggle navigation menu">
378        <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="18" x2="21" y2="18"/></svg>
379        <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>
380      </button>
381    </div>
382  </div>
383</nav>
384
385<!-- Mobile menu -->
386<nav class="mobile-menu" id="mobileMenu" aria-label="Mobile navigation">
387  <a href="/" data-i18n="nav.home">Home</a>
388  <div class="mobile-divider"></div>
389  <details class="mobile-group">
390    <summary><span data-i18n="nav.products">Products</span></summary>
391    <a href="/threatz/" data-i18n="mob.threatz">ThreatZ Platform</a>
392    <a href="/threatz/integrations/" data-i18n="nav.integrations">Integrations</a>
393    <a href="/threatz/compare/">Compare</a>
394  </details>
395<details class="mobile-group">
396    <summary><span data-i18n="nav.solutions">Solutions</span></summary>
397    <a href="/solutions/oem-csms-teams/">For OEM CSMS Teams</a>
398    <a href="/solutions/tier-1-suppliers/">For Tier-1 Suppliers</a>
399    <a href="/solutions/tara-pilot/">TARA-First Pilot (6-8 weeks)</a>
400    <a href="/threatz/compare/build-vs-current-setup/">Compare Your Current Setup</a>
401    <a href="/solutions/">All Solutions</a>
402  </details>
403    <a href="/services/" data-i18n="nav.services">Services</a>
404  <a href="/pricing/" data-i18n="nav.pricing">Pricing</a>
405  <details class="mobile-group">
406    <summary><span data-i18n="nav.resources">Resources</span></summary>
407    <a href="/resources/" data-i18n="nav.allResources">All Resources</a>
408    <a href="/case-studies/" data-i18n="nav.caseStudies">Case Studies</a>
409    <a href="/glossary/">Glossary</a>
410    <a href="/press/">Press</a>
411    <a href="/events/">Events</a>
412  </details>
413  <details class="mobile-group">
414    <summary><span data-i18n="nav.company">Company</span></summary>
415    <a href="/about/" data-i18n="nav.about">About</a>
416    <a href="/contact/" data-i18n="nav.contact">Contact</a>
417  </details>
418  <button onclick="setLanguage('en')" data-lang="en">English</button><a href="/de/threatz/" data-lang="de" class="nav-lang-link">Deutsch</a><a href="/zh/threatz/" data-lang="zh" class="nav-lang-link">中文</a>
419  <div class="mobile-divider"></div>
420  <a href="/demo/" class="btn btn-primary btn-block" data-modal="demo"><span data-i18n="btn.requestDemo">Request Demo</span></a>
421</nav>
422<!-- @@/HEADER@@ -->
423
424<main id="main">
425
426<!-- ====== 1 · HERO ====== -->
427<section class="hero threatz-hero" id="hero">
428  <div class="hero-bg" aria-hidden="true"></div>
429  <div class="container">
430    <div class="hero-grid">
431      <div class="hero-content">
432        <div class="section-badge">
433          <div class="pulse-dot"></div>
434          <span data-i18n="threatz.hero.badge">AI-Powered Automotive CSMS</span>
435        </div>
436        <h1 data-i18n="threatz.hero.title" data-i18n-html="">
437          The <span class="text-gradient">living</span> CSMS backbone for automotive.
438        </h1>
439        <p class="hero-description" data-i18n="threatz.hero.desc">
440          One AI-powered knowledge graph connecting design, TARA, SBOM, testing and operations &mdash; your cybersecurity case that updates itself.
441        </p>
442        <div class="hero-cta">
443          <a class="btn btn-primary btn-lg" href="/demo/?utm_source=threatz&amp;utm_medium=hero-primary&amp;utm_campaign=book-demo" data-modal="demo">
444            <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><rect x="2" y="3" width="20" height="14" rx="2"/><line x1="8" y1="21" x2="16" y2="21"/><line x1="12" y1="17" x2="12" y2="21"/></svg>
445            <span data-i18n="threatz.hero.primary">Book a demo</span>
446          </a>
447          <a class="btn btn-secondary btn-lg" href="/pricing/?utm_source=threatz&amp;utm_medium=hero-secondary&amp;utm_campaign=pricing">
448            <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><line x1="12" y1="1" x2="12" y2="23"/><path d="M17 5H9.5a3.5 3.5 0 0 0 0 7h5a3.5 3.5 0 0 1 0 7H6"/></svg>
449            <span data-i18n="threatz.hero.secondary">View pricing</span>
450          </a>
451        </div>
452        <ul class="threatz-hero-stats">
453          <li><span class="threatz-hero-stat">85%</span><span class="threatz-hero-stat-label" data-i18n="threatz.stat.paths">auto path coverage</span></li>
454          <li><span class="threatz-hero-stat">73%</span><span class="threatz-hero-stat-label" data-i18n="threatz.stat.speed">faster TARA, measured</span></li>
455          <li><span class="threatz-hero-stat">100%</span><span class="threatz-hero-stat-label" data-i18n="threatz.stat.cve">CVE traceability</span></li>
456          <li><span class="threatz-hero-stat">24/7</span><span class="threatz-hero-stat-label" data-i18n="threatz.stat.monitor">monitoring</span></li>
457        </ul>
458      </div>
459
460      <div class="hero-visual">
461        <div class="tz-dash" role="img" aria-label="ThreatZ project dashboard: Headlamp ISO 21434 programme — 34 linked assets, 18 linked risks, 12 security goals, 72% compliance score, risk distribution across critical, high, medium and low, and module completion">
462          <div class="tz-dash-head">
463            <span class="tz-dash-title">Headlamp &mdash; ISO 21434</span>
464            <span class="tz-dash-live" aria-hidden="true"></span>
465          </div>
466          <div class="tz-dash-kpis">
467            <div class="tz-dash-kpi"><span class="tz-dash-kpi-label">Linked Assets</span><span class="tz-dash-kpi-value">34</span></div>
468            <div class="tz-dash-kpi"><span class="tz-dash-kpi-label">Linked Risks</span><span class="tz-dash-kpi-value">18</span></div>
469            <div class="tz-dash-kpi"><span class="tz-dash-kpi-label">Security Goals</span><span class="tz-dash-kpi-value">12</span></div>
470          </div>
471          <div class="tz-dash-row">
472            <div class="tz-dash-panel tz-dash-score">
473              <span class="tz-dash-panel-label">Compliance Score</span>
474              <svg viewBox="0 0 80 80" width="68" height="68" aria-hidden="true"><circle cx="40" cy="40" r="32" fill="none" stroke="#0E2130" stroke-width="7"/><circle cx="40" cy="40" r="32" fill="none" stroke="#34d399" stroke-width="7" stroke-dasharray="144.5 56.5" stroke-linecap="round" transform="rotate(-90 40 40)"/><text x="40" y="45" text-anchor="middle" fill="#34d399" font-size="16" font-weight="700" font-family="Outfit,sans-serif">72%</text></svg>
475            </div>
476            <div class="tz-dash-panel">
477              <span class="tz-dash-panel-label">Risk Distribution</span>
478              <ul class="tz-dash-risks">
479                <li><span class="tz-dash-risk-name">Critical</span><span class="tz-dash-bar tz-dash-bar--critical" style="width:22%"></span><span class="tz-dash-risk-n">4</span></li>
480                <li><span class="tz-dash-risk-name">High</span><span class="tz-dash-bar tz-dash-bar--high" style="width:44%"></span><span class="tz-dash-risk-n">8</span></li>
481                <li><span class="tz-dash-risk-name">Medium</span><span class="tz-dash-bar tz-dash-bar--med" style="width:28%"></span><span class="tz-dash-risk-n">5</span></li>
482                <li><span class="tz-dash-risk-name">Low</span><span class="tz-dash-bar tz-dash-bar--low" style="width:8%"></span><span class="tz-dash-risk-n">1</span></li>
483              </ul>
484            </div>
485          </div>
486          <div class="tz-dash-panel">
487            <span class="tz-dash-panel-label">Module Completion</span>
488            <ul class="tz-dash-modules">
489              <li><span class="tz-dash-mod-name">Threat Modeling</span><span class="tz-dash-track"><span class="tz-dash-fill tz-dash-fill--ok" style="width:100%"></span></span><span class="tz-dash-pct">100%</span></li>
490              <li><span class="tz-dash-mod-name">Risk Assessment</span><span class="tz-dash-track"><span class="tz-dash-fill tz-dash-fill--ok" style="width:85%"></span></span><span class="tz-dash-pct">85%</span></li>
491              <li><span class="tz-dash-mod-name">SBOM &amp; Supply Chain</span><span class="tz-dash-track"><span class="tz-dash-fill tz-dash-fill--warn" style="width:60%"></span></span><span class="tz-dash-pct">60%</span></li>
492              <li><span class="tz-dash-mod-name">Validation &amp; Testing</span><span class="tz-dash-track"><span class="tz-dash-fill tz-dash-fill--warn" style="width:40%"></span></span><span class="tz-dash-pct">40%</span></li>
493            </ul>
494          </div>
495        </div>
496      </div>
497    </div>
498  </div>
499</section>
500
501<!-- ====== 2 · FOUR PATHS ====== -->
502<section class="section threatz-paths" id="paths" aria-labelledby="threatz-paths-title">
503  <div class="container">
504    <div class="section-header">
505      <h2 id="threatz-paths-title" data-i18n="threatz.paths.title">Four paths into ThreatZ &mdash; pick yours.</h2>
506    </div>
507    <div class="threatz-paths-grid">
508      <a class="threatz-path threatz-path--oem" href="/solutions/oem-csms-teams/?utm_source=threatz&amp;utm_medium=paths&amp;utm_campaign=oem">
509        <span class="threatz-path-eyebrow" data-i18n="threatz.path.oem.eyebrow">For OEMs</span>
510        <span class="threatz-path-title" data-i18n="threatz.path.oem.title">CSMS teams &amp; type approval</span>
511        <span class="threatz-path-cta" data-i18n="threatz.path.oem.cta">OEM path &rarr;</span>
512      </a>
513      <a class="threatz-path threatz-path--tier1" href="/solutions/tier-1-suppliers/?utm_source=threatz&amp;utm_medium=paths&amp;utm_campaign=tier1">
514        <span class="threatz-path-eyebrow" data-i18n="threatz.path.tier1.eyebrow">For Tier-1s</span>
515        <span class="threatz-path-title" data-i18n="threatz.path.tier1.title">Product security, multi-OEM reuse</span>
516        <span class="threatz-path-cta" data-i18n="threatz.path.tier1.cta">Tier-1 path &rarr;</span>
517      </a>
518      <a class="threatz-path threatz-path--neutral" href="/solutions/tara-pilot/?utm_source=threatz&amp;utm_medium=paths&amp;utm_campaign=pilot">
519        <span class="threatz-path-eyebrow" data-i18n="threatz.path.pilot.eyebrow">Evaluating</span>
520        <span class="threatz-path-title" data-i18n="threatz.path.pilot.title">6&ndash;8 week TARA-first pilot</span>
521        <span class="threatz-path-cta" data-i18n="threatz.path.pilot.cta">Pilot scope &rarr;</span>
522      </a>
523      <a class="threatz-path threatz-path--neutral" href="/threatz/compare/build-vs-current-setup/?utm_source=threatz&amp;utm_medium=paths&amp;utm_campaign=compare">
524        <span class="threatz-path-eyebrow" data-i18n="threatz.path.compare.eyebrow">Switching</span>
525        <span class="threatz-path-title" data-i18n="threatz.path.compare.title">Compare your current setup</span>
526        <span class="threatz-path-cta" data-i18n="threatz.path.compare.cta">Compare &rarr;</span>
527      </a>
528    </div>
529  </div>
530</section>
531
532<!-- ====== 3 · NINE MODULES ====== -->
533<section class="section section-alt threatz-pillars" id="pillars" aria-labelledby="threatz-pillars-title">
534  <div class="container">
535    <div class="section-header">
536      <h2 id="threatz-pillars-title" data-i18n="threatz.pillars.title">Everything you need for automotive cybersecurity.</h2>
537      <p data-i18n="threatz.pillars.desc">Nine modules, one graph &mdash; each links deeper into the platform.</p>
538    </div>
539    <ul class="threatz-pillars-grid">
540      <li class="threatz-pillar"><a href="/threatz/design/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">01</span><h3 class="threatz-pillar-name" data-i18n="threatz.pillar.01.t">Design &amp; Architecture</h3><p data-i18n="threatz.pillar.01.d">Model items, assets and interfaces once &mdash; reuse everywhere.</p></a></li>
541      <li class="threatz-pillar"><a href="/threatz/tara/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">02</span>
541<h3 class="threatz-pillar-name" data-i18n="threatz.pillar.02.t">TARA</h3><p data-i18n="threatz.pillar.02.d">AI-assisted threat analysis with 85% automated path coverage.</p></a></li>
542      <li class="threatz-pillar"><a href="/threatz/sbom/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">03</span><h3 class="threatz-pillar-name" data-i18n="threatz.pillar.03.t">SBOM &amp; Supply Chain</h3><p data-i18n="threatz.pillar.03.d">CycloneDX/SPDX ingest, CVE matching, supplier evidence.</p></a></li>
543      <li class="threatz-pillar"><a href="/threatz/security-testing/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">04</span><h3 class="threatz-pillar-name" data-i18n="threatz.pillar.04.t">Security Testing</h3><p data-i18n="threatz.pillar.04.d">Campaigns with evidence collection; TestBench fuzzing add-on.</p></a></li>
544      <li class="threatz-pillar"><a href="https://threatz.io/vulnerability-management/" rel="noopener?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">05</span><h3 class="threatz-pillar-name" data-i18n="threatz.pillar.05.t">Vulnerability Management</h3><p data-i18n="threatz.pillar.05.d">CVE to an approved V-SOC impact assessment in under 4 hours, with full traceability.</p></a></li>
545      <li class="threatz-pillar"><a href="/threatz/compliance/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">06</span><h3 class="threatz-pillar-name" data-i18n="threatz.pillar.06.t">Compliance</h3><p data-i18n="threatz.pillar.06.d">ISO 21434, R155, GB 44495, EU CRA evidence packs on demand.</p></a></li>
546      <li class="threatz-pillar"><a href="/threatz/operations/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">07</span><h3 class="threatz-pillar-name" data-i18n="threatz.pillar.07.t">Operations</h3><p data-i18n="threatz.pillar.07.d">Living cybersecurity case &mdash; monitoring feeds the same graph.</p></a></li>
547      <li class="threatz-pillar"><a href="/threatz/collaboration/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">08</span><h3 class="threatz-pillar-name" data-i18n="threatz.pillar.08.t">Collaboration</h3><p data-i18n="threatz.pillar.08.d">OEM &harr; Tier-1 &harr; Tier-2 federated execution and handover.</p></a></li>
548      <li class="threatz-pillar"><a href="/threatz/governance/?utm_source=threatz&amp;utm_medium=pillars&amp;utm_campaign=module"><span class="threatz-pillar-num">09</span><h3 class="threatz-pillar-name">Governance</h3><p>Policies, approvals and a complete audit trail.</p></a></li>
549    </ul>
550  </div>
551</section>
552
553<!-- ====== 4 · INTEGRATIONS + STANDARDS ====== -->
554<section class="section threatz-connect" id="integrations" aria-labelledby="threatz-integrations-title">
555  <div class="container">
556    <div class="threatz-connect-grid">
557      <div>
558        <h2 id="threatz-integrations-title" data-i18n="threatz.integrations.title">Connects to your engineering workflow.</h2>
559        <p data-i18n="threatz.integrations.desc">Jira, GitHub, MATLAB, SonarQube, Vector CANoe, Sparx EA and 30+ tools &mdash; plus 40+ vehicle protocols, modeled and tested.</p>
560        <ul class="threatz-chips">
561          <li>Jira</li><li>GitHub</li><li>MATLAB</li><li>SonarQube</li><li>Vector CANoe</li><li>Sparx EA</li>
562          <li class="threatz-chip-more" data-i18n="threatz.integrations.more">+ 24 more</li>
563        </ul>
564        <p class="threatz-connect-link">
565          <a href="/threatz/integrations/">
566            <span data-i18n="threatz.integrations.cta">All integrations</span>
567            <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><line x1="5" y1="12" x2="19" y2="12"/><polyline points="12 5 19 12 12 19"/></svg>
568          </a>
569        </p>
570      </div>
571      <div>
572        <h2 data-i18n="threatz.standards.title">Built for the world&rsquo;s most demanding standards.</h2>
573        <ul class="threatz-standards">
574          <li><a href="/iso-21434/"><span class="threatz-standard-name">ISO/SAE 21434</span><span class="threatz-standard-desc" data-i18n="threatz.standard.iso">Work products &amp; cybersecurity case</span></a></li>
575          <li><a href="/unece-r155/"><span class="threatz-standard-name">UNECE R155</span><span class="threatz-standard-desc" data-i18n="threatz.standard.r155">CSMS &amp; type-approval evidence</span></a></li>
576          <li><a href="/gb-44495/"><span class="threatz-standard-name">GB 44495</span><span class="threatz-standard-desc" data-i18n="threatz.standard.gb">China market compliance</span></a></li>
577          <li>
577<a href="/resources/eu-cra-vs-unece-r155/"><span class="threatz-standard-name">EU CRA</span><span class="threatz-standard-desc" data-i18n="threatz.standard.cra">Cyber Resilience Act readiness</span></a></li>
578        </ul>
579      </div>
580    </div>
581  </div>
582</section>
583
584<!-- ====== 5 · PROOF ====== -->
585<section class="section section-alt threatz-proof" id="proof" aria-labelledby="threatz-proof-title">
586  <div class="container">
587    <div class="section-header">
588      <h2 id="threatz-proof-title" data-i18n="threatz.proof.title">Proof the model works</h2>
589    </div>
590    <blockquote class="threatz-proof-quote">
591      <p data-i18n="threatz.proof.quote">&ldquo;Four domain-controller ECUs on an EV SUV: ISO 21434 + R155 + GB 44495 evidence, 14 attack paths surfaced, zero major assessment findings.&rdquo;</p>
592      <cite data-i18n="threatz.proof.cite">Tier-1 supplier case study</cite>
593    </blockquote>
594    <p class="threatz-proof-link">
595      <a href="/case-studies/?utm_source=threatz&amp;utm_medium=proof&amp;utm_campaign=case-study">
596        <span data-i18n="threatz.proof.cta">Read the case study</span>
597        <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><line x1="5" y1="12" x2="19" y2="12"/><polyline points="12 5 19 12 12 19"/></svg>
598      </a>
599    </p>
600  </div>
601</section>
602
603<!-- ====== FAQ ====== -->
604<section class="section section-alt" id="faq">
605  <div class="container">
606    <div class="section-header">
607      <div class="section-badge">
608        <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><circle cx="12" cy="12" r="10"/><path d="M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg>
609        <span data-i18n="threatz.faq.badge">Frequently Asked Questions</span>
610      </div>
611      <h2 data-i18n="threatz.faq.title" data-i18n-html="">Frequently Asked<br><span class="text-gradient">Questions</span></h2>
612      <p>Everything you need to know about ThreatZ, from capabilities and compliance to deployment and integrations.</p>
613    </div>
614
615    <div class="faq-list">
616      <details class="faq-item">
617        <summary data-i18n="threatz.faq.q1">What is ThreatZ?</summary>
618        <div class="faq-answer" data-i18n="threatz.faq.a1" data-i18n-html="">ThreatZ is an AI-powered automotive cybersecurity platform that provides end-to-end CSMS (Cybersecurity Management System) capabilities for OEMs and Tier-1 suppliers. It covers TARA analysis, SBOM management, vulnerability tracking, compliance reporting, and security operations &mdash; all unified in a single platform with a knowledge graph backbone.</div>
619      </details>
620
621      <details class="faq-item">
622        <summary data-i18n="threatz.faq.q2">How does ThreatZ automate TARA analysis?</summary>
623        <div class="faq-answer" data-i18n="threatz.faq.a2" data-i18n-html="">ThreatZ uses AI to automatically identify assets, generate threat scenarios using STRIDE methodology, assess attack feasibility, calculate risk levels per ISO/SAE 21434, and suggest risk treatment options. What traditionally takes weeks of manual effort can be completed in hours, with full traceability from assets to cybersecurity goals.</div>
624      </details>
625
626      <details class="faq-item">
627        <summary data-i18n="threatz.faq.q3">Which compliance standards does ThreatZ support?</summary>
628        <div class="faq-answer" data-i18n="threatz.faq.a3" data-i18n-html="">ThreatZ supports ISO/SAE 21434, UNECE R155 (WP.29), GB 44495 (China), and the EU Cyber Resilience Act (CRA). The platform generates standard-specific work products, evidence packages for type approval, and audit-ready reports. Enterprise plans also support STIX and AUTOSAR export formats.</div>
629      </details>
630
631      <details class="faq-item">
632        <summary data-i18n="threatz.faq.q4">How does the SBOM management module work?</summary>
633        <div class="faq-answer" data-i18n="threatz.faq.a4" data-i18n-html="">The SBOM module provides a complete software bill of materials lifecycle &mdash; from ingestion of CycloneDX and SPDX formats, through continuous vulnerability monitoring against NVD, CNVD, and OSV databases, to automated risk scoring with CVSS and EPSS metrics. It tracks components across ECU variants and generates VEX (Vulnerability Exploitability Exchange) documents for supply chain communication.</div>
634      </details>
635
636      <details class="faq-item">
637        <summary data-i18n="threatz.faq.q5">Can ThreatZ integrate with our existing tools?</summary>
638        <div class="faq-answer" data-i18n="threatz.faq.a5" data-i18n-html="">Yes. ThreatZ provides REST API access, webhooks, and native integrations with Jira, Azure DevOps, and common ALM tools. It supports OpenXSAM and 
638STIX export formats for interoperability with other security tools. SSO via SAML 2.0 and OpenID Connect is available on Professional and Enterprise plans.</div>
639      </details>
640
641      <details class="faq-item">
642        <summary data-i18n="threatz.faq.q6">What is the knowledge graph and why does it matter?</summary>
643        <div class="faq-answer" data-i18n="threatz.faq.a6" data-i18n-html="">ThreatZ's knowledge graph is a connected data model that links every entity in your cybersecurity program &mdash; from vehicle architectures and ECU components to threat scenarios, vulnerabilities, and compliance evidence. This enables powerful traceability queries (e.g., &ldquo;show all threats affecting components with known CVEs&rdquo;) and ensures no gaps in your security analysis.</div>
644      </details>
645
646      <details class="faq-item">
647        <summary data-i18n="threatz.faq.q7">Is ThreatZ suitable for Tier-1 suppliers?</summary>
648        <div class="faq-answer" data-i18n="threatz.faq.a7" data-i18n-html="">Absolutely. ThreatZ was designed specifically for the needs of Tier-1 and Tier-2 suppliers who must demonstrate ISO/SAE 21434 compliance to multiple OEMs simultaneously. The multi-project architecture lets suppliers manage separate TARA analyses per OEM program while sharing common component libraries and threat intelligence across projects.</div>
649      </details>
650
651      <details class="faq-item">
652        <summary data-i18n="threatz.faq.q8">How is ThreatZ deployed?</summary>
653        <div class="faq-answer" data-i18n="threatz.faq.a8" data-i18n-html="">ThreatZ deploys as private cloud or on-premise &mdash; air-gapped supported. Dedicated infrastructure, EU / China / US data residency options, and AWS Marketplace as a procurement channel for authoring and pilots. Same ThreatZ, two deployment modes.</div>
654      </details>
655    </div>
656  </div>
657</section>
658
659<!-- ====== 7 · FINAL CTA ====== -->
660<section class="cta-section threatz-final-cta" id="cta">
661  <div class="cta-bg" aria-hidden="true"></div>
662  <div class="container">
663    <div class="cta-content">
664      <h2 data-i18n="threatz.cta.title">Start managing automotive cybersecurity the right way.</h2>
665      <p data-i18n="threatz.cta.desc">See your first program on the graph in a 30-minute demo.</p>
666      <div class="cta-buttons">
667        <a class="btn btn-primary btn-lg" href="/demo/?utm_source=threatz&amp;utm_medium=final-cta&amp;utm_campaign=book-demo" data-modal="demo">
668          <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><rect x="2" y="3" width="20" height="14" rx="2"/><line x1="8" y1="21" x2="16" y2="21"/><line x1="12" y1="17" x2="12" y2="21"/></svg>
669          <span data-i18n="threatz.cta.primary">Book a demo</span>
670        </a>
671        <a class="btn btn-outline btn-lg" href="/solutions/tara-pilot/?utm_source=threatz&amp;utm_medium=final-cta&amp;utm_campaign=pilot">
672          <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><path d="M9 11H5a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-7a2 2 0 0 0-2-2h-4"/><polyline points="9 11 12 2 15 11"/></svg>
673          <span data-i18n="threatz.cta.secondary">Scope a TARA pilot</span>
674        </a>
675      </div>
676      <div class="cta-trust">
677        <a class="cta-trust-item" href="/iso-21434/?utm_source=threatz&amp;utm_medium=cta-trust&amp;utm_campaign=standards"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><polyline points="20 6 9 17 4 12"/></svg> ISO/SAE 21434</a>
678        <a class="cta-trust-item" href="/unece-r155/?utm_source=threatz&amp;utm_medium=cta-trust&amp;utm_campaign=standards"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><polyline points="20 6 9 17 4 12"/></svg> UNECE R155</a>
679        <a class="cta-trust-item" href="/gb-44495/?utm_source=threatz&amp;utm_medium=cta-trust&amp;utm_campaign=standards"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><polyline points="20 6 9 17 4 12"/></svg> GB 44495</a>
680        <a class="cta-trust-item" href="/resources/eu-cra-vs-unece-r155/?utm_source=threatz&amp;utm_medium=cta-trust&amp;utm_campaign=standards"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><polyline points="20 6 9 17 4 12"/></svg> EU CRA</a>
681      </div>
682    </div>
683  </div>
684</section>
685
686</main>
687
688<!-- ====== FOOTER ====== -->
689<!-- @@FOOTER@@ -->
690<footer class="footer" role="contentinfo">
691  <div class="container">
692    <div class="footer-grid">
693      <!-- Brand -->
694      <div class="footer-brand">
695        <div class="footer-brand-logo">
696          <img src="/img/vxlabs-logo-dark.svg" alt="VxLabs Security logo" width="76" height="24" loading="lazy">
697        </div>
698        <p class="footer-brand-desc" data-i18n="footer.brand">AI-powered automotive cybersecurity and embedded software platforms. Securing connected vehicles from design to road.</p>
699        <div class="footer-social">
700          <a href="https://www.linkedin.com/company/vxlabs-de" target="_blank" rel="noopener noreferrer" aria-label="LinkedIn"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><path d="M16 8a6 6 0 0 1 6 6v7h-4v-7a2 2 0 0 0-2-2 2 2 0 0 0-2 2v7h-4v-7a6 6 0 0 1 6-6z"/><rect x="2" y="9" width="4" height="12"/><circle cx="4" cy="4" r="2"/></svg></a>
701          <a href="https://www.youtube.com/@vxlabs_security" target="_blank" rel="noopener noreferrer" aria-label="YouTube"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><path d="M22.54 6.42a2.78 2.78 0 0 0-1.94-2C18.88 4 12 4 12 4s-6.88 0-8.6.46a2.78 2.78 0 0 0-1.94 2A29 29 0 0 0 1 11.75a29 29 0 0 0 .46 5.33A2.78 2.78 0 0 0 3.4 19.1c1.72.46 8.6.46 8.6.46s6.88 0 8.6-.46a2.78 2.78 0 0 0 1.94-2 29 29 0 0 0 .46-5.25 29 29 0 0 0-.46-5.33z"/><polygon points="9.75 15.02 15.5 11.75 9.75 8.48 9.75 15.02"/></svg></a>
702          <a href="mailto:[email protected]" aria-label="Email"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" aria-hidden="true"><path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg></a>
703        </div>
704      </div>
705
706      <!-- Products -->
707      <div class="footer-col">
708        <div class="footer-col-title" data-i18n="footer.products">Products</div>
709        <a href="/threatz/">ThreatZ TARA</a>
710        <a href="/threatz/sbom/">ThreatZ SBOM</a>        <a href="/pricing/" data-i18n="footer.pricing">Pricing</a><a href="/pricing/aws-marketplace/">AWS Marketplace</a>
711        <a href="/threatz/integrations/">Integrations</a>
712      </div>
713
714      <!-- Company -->
715      <div class="footer-col">
716        <div class="footer-col-title" data-i18n="footer.company">Company</div>
717        <a href="/about/" data-i18n="footer.about">About VxLabs Security</a>
718        <a href="/services/" data-i18n="footer.services">Services</a>
719        <a href="/threatz/integrations/#partners">Partners</a>
720        <a href="/contact/" data-i18n="footer.contact">Contact</a>
721        <a href="/careers/">Careers</a>
722        <a href="/investors/" data-i18n="footer.investors">Investors</a>
723        <a href="/changelog/">Changelog</a>
724      </div>
725
726      <!-- Resources -->
727      <div class="footer-col">
728        <div class="footer-col-title" data-i18n="footer.resourcesTitle">Resources</div>
729        <a href="/resources/" data-i18n="footer.res.browseAll">Browse All Resources</a>
730        <a href="/glossary/" data-i18n="footer.res.glossary">Glossary</a>
731        <a href="/case-studies/" data-i18n="footer.res.caseStudies">Case Studies</a>
732        <a href="/automotive-tara/">Automotive TARA</a>
733        <a href="/csms/">CSMS Guide</a>
734        <a href="/press/" data-i18n="footer.res.press">Press</a>
735        <a href="/events/" data-i18n="footer.res.events">Events</a>
736      </div>
737      <!-- Legal -->
738      <div class="footer-col">
739        <div class="footer-col-title" data-i18n="footer.legal">Legal</div>
740        <a href="/privacy/" data-i18n="footer.privacy">Privacy Policy</a>
741        <a href="/terms/" data-i18n="footer.terms">Terms of Service</a>
742        <a href="/gdpr/" data-i18n="footer.gdpr">GDPR Compliance</a>
743        <a href="/security/" data-i18n="footer.security">Security</a>
744        <button type="button" onclick="showCookieBanner()" class="cookie-btn">Cookie Settings</button>
745      </div>
746    </div>
747
748    <div class="footer-legal">
749      <div class="footer-legal-copy">
750        <span class="footer-copy" data-i18n="footer.copy">&copy; 2026 VxLabs Security. All rights reserved.</span>
751        <span class="footer-sep" aria-hidden="true">&middot;</span>
752        <span>Dover, USA</span>
753        <span class="footer-sep" aria-hidden="true">&middot;</span>
754        <span>Regensburg, Germany</span>
755        <span class="footer-sep" aria-hidden="true">&middot;</span>
756        <span>Giza, Egypt</span>
757        <span class="footer-sep" aria-hidden="true">&middot;</span>
758        <a href="/imprint/" data-i18n="footer.imprint">Imprint</a>
759      </div>
760      <div class="footer-legal-standards" title="Standards our platform supports">
761        <span>ISO/SAE 21434</span>
762        <span class="footer-sep" aria-hidden="true">&middot;</span>
763        <span>UNECE R155</span>
764        <span class="footer-sep" aria-hidden="true">&middot;</span>
765        <span>GB 44495</span>
766        <span class="footer-sep" aria-hidden="true">&middot;</span>
767        <span>TISAX AL3</span>
768        <span class="footer-sep" aria-hidden="true">&middot;</span>
769        <span>GDPR</span>
770        <span class="footer-sep" aria-hidden="true">&middot;</span>
771        <a href="https://aws.amazon.com/marketplace/pp/prodview-s6rmk5dl7gstc" target="_blank" rel="noopener noreferrer">AWS Marketplace</a>
772      </div>
773    </div>
774  </div></footer>
775<!-- @@/FOOTER@@ -->
776
777<!-- ====== MODALS ====== -->
778<!-- HubSpot Modal -->
779<div class="modal-overlay" id="hsModal" role="dialog" aria-modal="true" aria-labelledby="hsModalTitle" onclick="closeHubSpotModal()">
780  <div class="modal-box" onclick="event.stopPropagation()">
781    <div class="modal-header">
782      <h3 class="modal-title" id="hsModalTitle">Get Started</h3>
783      <button class="modal-close" onclick="closeHubSpotModal()" aria-label="Close"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg></button>
784    </div>
785    <p class="modal-desc"></p>
786    <div class="hs-form-frame"></div>
787  </div>
788</div>
789
790<!-- Legal Modal -->
791<div class="modal-overlay" id="legalModal" role="dialog" aria-modal="true" aria-labelledby="legalTitle" onclick="closeLegalModal(event)">
792  <div class="modal-box modal-lg" onclick="event.stopPropagation()">
793    <div class="modal-header">
794      <h3 class="modal-title" id="legalTitle">Legal Document</h3>
795      <button class="modal-close" onclick="closeLegalModal()" aria-label="Close"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg></button>
796    </div>
797    <div class="legal-content"><p>Loading content...</p></div>
798  </div>
799</div>
800
801<!-- Integration Partner Form Modal -->
802<div class="modal-overlay" id="partnerFormModal" role="dialog" aria-modal="true" aria-labelledby="partnerFormTitle" onclick="closeCustomFormModal('partnerFormModal')">
803  <div class="modal-box" onclick="event.stopPropagation()">
804    <div class="modal-header">
805      <h3 class="modal-title" id="partnerFormTitle">Become an Integration Partner</h3>
806      <button class="modal-close" onclick="closeCustomFormModal('partnerFormModal')" aria-label="Close"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg></button>
807    </div>
808    <p class="modal-desc">Tell us about your tool and we will explore how to build an integration with ThreatZ.</p>
809    <div class="hs-form-frame" data-region="eu1" data-form-id="5e5f675e-15c0-4bbd-a11a-8112ddf35ed8" data-portal-id="47698823"></div>
810  </div>
811</div>
812
813<!-- Reseller Form Modal -->
814<div class="modal-overlay" id="resellerFormModal" role="dialog" aria-modal="true" aria-labelledby="resellerFormTitle" onclick="closeCustomFormModal('resellerFormModal')">
815  <div class="modal-box" onclick="event.stopPropagation()">
816    <div class="modal-header">
817      <h3 class="modal-title" id="resellerFormTitle">Become a Reseller</h3>
818      <button class="modal-close" onclick="closeCustomFormModal('resellerFormModal')" aria-label="Close"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg></button>
819    </div>
820    <p class="modal-desc">Join our global channel program and bring automotive cybersecurity solutions to your region.</p>
821    <div class="hs-form-frame" data-region="eu1" data-form-id="0982e7c0-0316-4861-9126-68851ad3855b" data-portal-id="47698823"></div>
822  </div>
823</div>
824
825<!-- Scripts -->
826<script src="/js/main.min.js?v=202609240115" defer></script>
vendor: 1 bytes, line 826
826
827<script>window.addEventListener("load",function(){var s=document.createElement("script");s.src="/js/i18n.min.js?v=202609240115";document.body.appendChild(s)})</script>
vendor: 1 bytes, line 827
827
828<script src="https://js-eu1.hsforms.net/forms/embed/47698823.js" defer></script>
828
829</body>
830</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.