Prove it's secure.
Keep proving it.

Model what you ship, catch what threatens it and hand your auditor the proof. One platform, from the first design to the last patch.

Book a demo See the platform

Built on the standards your auditors read.
Automotive, rail, maritime and industrial.

Automotive

Railway

Maritime

Industrial

ISO/SAE 21434

UNECE R155

UNECE R156

IEC 62443

CLC/TS 50701

IEC 63452

IACS UR E26 · E27

Cyber Resilience Act

GB 44495

ASPICE for Cybersecurity

Run product security from one place

Model what you ship,
chips and all

Wake only the teams
it affects

Hold every zone
to its target

Turn an advisory into a fix

SSH

OpenSSH security advisory

Published just now

Race in the sshd signal handler allows remote code execution

CVE-2024-6387CVSS 8.1Fixed in 9.8p1

New CVE

SDO Center

Matching to your bills of materials2 of 4 programmes affected

SecBerg Core/sdo-center

Affected programmesCVE-2024-6387

ProgrammeComponentStatusOwner

ADAS domain controllerOpenSSH 9.3p1 CheckingAffected SSara · CSM

Telematics control unitOpenSSH 9.6p1 CheckingAffected OOmar · CSE

Compressor stationOpenSSH 9.8p1 CheckingNot affected No alert

Infotainment head unitNo OpenSSH CheckingNot used No alert

2 owners notified. The other 2 teams were not disturbed.

TARA agentADAS domain controller

Step 2 of AP-002 now reaches the gateway. Feasibility rises to High.
TS-003 is back above your risk threshold.
Fix: upgrade OpenSSH to 9.8p1 on the gateway.

Review AcceptTicket TKT-0014 opened

Start a TARA with
one sentence

Keep one BOM from
build to audit

One model under
everything

THE TARA AGENT

Meet the TARA agent

One sentence in. A first-draft TARA out, in minutes, waiting for your approval.

Plans before it acts

It lays out its steps before it starts, so you see what it will do to your model, and the draft waits for your approval.

Book a demo

PlanTelematics unit and gateway

Read the system model
Find damage and threat scenarios
Rate the attack paths
Propose the risk treatmentWaiting for you

Every module
on one model

TARA, monitoring, requirements, suppliers and the security case all read the same model. Change it once and every module sees it.

+: Connected modules
+: Specialised AI agents
+: Reusable catalogue items
+: Industries supported

TARA SDO Center Supplier management Bills of materials Security testing Security case Cryptography Agentic system Requirements Project review Software library Security concepts Chipset library Cost analysis

Run it where your data lives

Cloud SaaSManaged for you, with automatic updates.

On-premiseYour servers, air-gapped if needed.

Your AIFrontier, Bedrock, Vertex, AI Foundry or a local model.

Your toolsJira, Polarion, DOORS Next, GitLab and ServiceNow.

Tenant-isolated data

Single sign-on over OIDC

Every change on the audit ledger

Standard or Premium SLA

Pick where it runs. We quote the pilot.

Our cloud or your servers, the AI of your choice, one programme first. Tell us about it and we send a quote.

See pricing Get a quote

Month 1DeploymentPlatform live, integrations connected, users onboarded.
Months 2 to 3Adoption and validationTeam trained and the pilot validated on real work.
Years 1 to 3Long-term successSupport, upgrades and compliance updates.

Questions

How long does onboarding take?

Live in the first month. The pilot is validated on one real programme by the end of month three.

Can we bring our existing workbooks?

Requirement documents import from Word, PDF and Excel. Existing analyses move over during the pilot, with our engineers.

Where is our data hosted?

In our managed cloud, or on your own servers, air-gapped if needed.

Is our data used to train models?

No. You choose the model the agent runs on, including a local one that never leaves your site.

Can suppliers work in the same project?

Yes. Assign a supplier their part of the model, with its own reviews and interface agreements.

Which standards do you cover?

ISO/SAE 21434 with UNECE R155 and R156, IEC 62443, CLC/TS 50701 and IEC 63452, IACS UR E26 and E27, GB 44495 and the Cyber Resilience Act.

From the blog

All articles

Regulation

Start with one programme

Live within a month. Proven on real work within three.

Book a demo See pricing

01Book a workshopBring one programme and the standards it answers to.
02Model it togetherOur engineers build it with yours, live in the platform.
03Run the pilotReal work, real evidence, signed off in three months.

Prove it's secure.
Keep proving it.

Built on the standards your auditors read.
Automotive, rail, maritime and industrial.