Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Feature

Standard

Enterprise

Enterprise +

Automated Threat Modeling

(tick)

(tick)

(tick)

Threat Modeling Profiles

Expand
titleMore info

Threat modeling engine uses profiles to build contextualized attack tree and threat model

3

15

customized

Issues Tracking

Expand
titleMore info

Repo of security weakness found in threat modeling.

(tick)

(tick)

(tick)

AppSec Knowledge Base

Expand
titleMore info

Developer gets real-time help to understand the security issues and how to remediate with the knowledge base (KB) embedded in threat modeling session. KB are based on CWE and OWASP

(tick)

(tick)

(tick)

Jira Single-Sing-on

Expand
titleMore info

Users login CyberSage with their Jira accounts. Seamlessly integrates security threat modeling into development workflow

(tick)

(tick)

Issues management in Jira

Expand
titleMore info

Developers manages the life-cycle security tasks using their Jira development workflow.

(tick)

(tick)

Release management dashboard

Expand
titleMore info

Supports risk-based software release management and CI/CD pipeline.

(tick)

(tick)

ChatGpt integration

Expand
titleMore info

Support developers with security expertise by integrating with OpenAI ChatGPT. Need customer’s ChatGPT API account.

(tick)

(tick)

Issues security risk rating

Expand
titleMore info

Prioritize remediation of security weakness. Risk rating considers both likelihood and impact to business.

Basic

Advanced

Advanced

Risk and control repository & certification

Expand
titleMore info

Threat modeling engine uses risk and control facts to produce accurate threat model.Security professionals certifies these facts to be accurate so these facts are re-used in all threat modeling sessions to produce accurate results.

(tick)

(tick)

Application inherent risk information info Repo

Expand
titleMore info

Enterprise’s Applications catalog along with their essential inherent risk info. Can be synchronized with enterprise’s book of record

(tick)

(tick)

Create threat modeling policies

Expand
titleMore info

Configure threat modeling profiles for applications when application and business features change. (Configuration is done with out-of-box profiles set)

(tick)

Risk and impact analysis

Expand
titleMore info

Analyze risks to applications and their business features, establishes impacts to business impact and impact rating.

(tick)

Report and charts

Expand
titleMore info

Graphic reports and charts for real-time security risk status and trends.

(tick)

...