Isograph’s Attack Tree Software
AttackTree Threat Modelling Software
The Mantua Group delivers AttackTree implementation, threat analysis and risk assessment services — helping you model system vulnerability, identify weakspots and improve security posture across automotive, aerospace, defence and industrial control system domains.
- Threat analysis & risk assessment
- Consequence-driven attack trees
- Mitigation tree modelling
- Cyber-physical system safety
- ISO/SAE 21434 automotive cyber
- DO-356 / ED-203 aerospace
- Jama Connect® integration
- Independent security review
Integrated since 2009
Implementation
Software Deployed
Professionals on staff
Why Choose AttackTree
AttackTree is the recognised industry standard for threat modelling, vulnerability assessment and security analysis. TMG provides end-to-end expertise to help you build defensible, standards-compliant security evidence.
Consequence-Driven Attack Trees
AttackTree allows users to define consequences and attach them to any gate within an attack tree. TMG helps you model the real-world impact of successful attacks against your target system — quantifying operational, financial and safety consequences for risk-based decision-making.
Standards-Compliant Threat Analysis
Perform threat analysis and risk assessment to recognised standards including ISO/SAE 21434, SAE J3061, ISO 26262, DO-356 and ED-203. TMG engineers prepare the artefacts your TARA (Threat Analysis and Risk Assessment) and security case need for regulator and customer acceptance.
Mitigation Tree Design
Mitigation trees model the effects of countermeasures on attack consequences. TMG helps you balance defence-in-depth investment against residual risk — quantifying the security uplift each control delivers and identifying where gaps remain.
Rapid Model Building
AttackTree's GUI lets analysts construct large attack trees rapidly. Custom report designer outputs Word and PDF documents. Import/export to Excel, SQL Server and XML integrates cleanly with existing risk registers and security GRC platforms.
Requirements Traceability
Link AttackTree models to Jama Connect®, IBM DOORS® and reqSuite® RM through Isograph’s Data Link Manager. TMG configures the integration so security requirements, threats and mitigations stay synchronised across your toolchain.
Training & Capability Building
TMG delivers AttackTree and threat modelling training tailored to your team. Foundational TARA methodology through to advanced automotive cybersecurity workflows. Public and onsite programs available across Australia and the United States.
How The Mantua Group Works With You
Whether you need hands-on TARA delivery, independent security audit, or your team trained to self-sufficient capability — we match our engagement to where you are on your cyber-safety journey.
We Do — You Learn
For organisations beginning their threat modelling journey, TMG can lead the full AttackTree implementation: asset identification, threat scenario development, attack tree construction, consequence assessment and mitigation design. Your team participates throughout to build capability organically.
We Do Together
Our most common engagement model. TMG security engineers work alongside your safety, cyber and engineering teams in structured TARA workshops, combining their system knowledge with our threat modelling methodology. AttackTree models emerge from genuine cross-functional collaboration.
We Train — You Do
TMG delivers structured AttackTree training covering threat modelling fundamentals, ISO/SAE 21434 workflows, mitigation design and requirements integration through Data Link Manager. Available as public courses or dedicated onsite delivery.
Independent Review & Audit
TMG provides independent technical review of existing AttackTree models, security cases and TARA submissions. We assess methodology rigour, threat coverage, mitigation defensibility and standards compliance — particularly valuable ahead of automotive type approval or DAL/SAL determinations.
Start Your Threat Modelling Programme
Whether you’re standing up an ISO/SAE 21434 capability for the first time, performing a TARA refresh on an in-service product, or need expert support for a regulatory cyber submission — The Mantua Group is ready to help.
Contact Us Today+61 (0) 439 118 714
+1 (330) 294-3744