TTModeler Pro

emgarde TTModeler Pro is a threat modeling and risk assessment tool designed primarily for embedded systems and IoT devices, with adaptability for other system types.

The tool supports the full threat and risk analysis lifecycle, including:

• Asset identification and system modeling (hardware, software, data flows, use cases, processes)
• Automatic generation of attack scenarios based on the system model
• Risk assessment using configurable, user-defined methodologies
• Automatic countermeasure generation
• Compliance mapping to IEC 62443-4-2 and the EU Cyber Resilience Act (CRA)

TTModeler Pro integrates built-in threat databases including CWE (Common Weakness Enumeration), CAPEC (Common Attack Pattern Enumeration and Classification), EMB3D, and CVE. Users can extend and customize threat libraries, countermeasure libraries, and risk assessment methods.

Reporting and export capabilities include out-of-the-box reports in MS Word, HTML, and LaTeX formats, with data export in Excel, CSV, and JSON.

Collaboration features include integration with GitLab, GitHub, and Azure DevOps for version control and collaborative editing. Additional collaboration tools include file locking, baseline management, and a snapshot system.

The tool is available as both a web application and a desktop application (Windows and Linux), supporting offline and online file storage. Licensing is offered as time-limited Personal or Floating licenses.