Emgarde

emgarde is a German cybersecurity company that develops TTModeler Pro, a threat modeling and risk assessment software tool designed primarily for embedded systems and IoT devices, with adaptability for other system types. TTModeler Pro supports the full threat and risk analysis lifecycle, including: - Asset identification and system modeling (hardware, software, data flows, processes) - Automatic generation of attack scenarios based on the system model - Risk assessment using configurable methodologies - Countermeasure generation - Compliance mapping with IEC 62443-4-2 and the EU Cyber Resilience Act (CRA) - Reporting in MS Word, HTML, and LaTeX formats - Data export in Excel, CSV, and JSON The tool integrates established threat intelligence databases including CWE (Common Weakness Enumeration), CAPEC (Common Attack Pattern Enumeration and Classification), EMB3D, and CVE. Users can customize threat libraries, countermeasure libraries, risk assessment methods, and categories to fit their specific workflows. TTModeler Pro supports team collaboration through integration with GitLab, GitHub, and Azure DevOps, offering version control, file locking, baseline management, and snapshot functionality. It is available as both a desktop and web application, with offline use supported under the Personal License. Licensing is offered on a time-limited basis (1–2 years) in two models: a Personal License for individual users and small teams, and a Floating License for larger teams requiring shared concurrent access. The tool targets product manufacturers, security consultants, and engineering organizations working on embedded and IoT product security compliance.