Skip to main content

From zero security knowledge to compliance-ready.

Describe your product. Sytance identifies threats, assesses and mitigates risks, plans security testing, builds traceability, and generates your complete compliance package.

S
S
◇
⌂
□
▱
/ Product context

Product facts

Product name Industrial PLC Gateway
Description Secure remote access and data transfer for PLC systems.
Operating environment Factory floor, on-premise network
Data flows PLC <-> Gateway <-> Cloud
Interfaces Ethernet, Serial, HTTPS
Components Hardware, Firmware, Cloud Service
Trust boundaries Device, Network, Cloud
Assumptions Physically secured, IT managed network
S
S
◇
⌂
□
▱
/ Threat modeling
ThreatsAssetsData flowsInterfaces
Threat Category
Unauthorized remote access Access control
Firmware tampering Tampering
Eavesdropping on data in transit Information disclosure
Weak credential management Access control
Denial of service Availability

Showing 1 to 5 of 15 threats

S
S
◇
⌂
□
▱
/ Compliance documentation

Review-ready documentation

Package content Status
01 Product Context Summary DOCX Mapped
02 Threat Model Report DOCX Mapped
03 Risk Assessment XLSX Ready
04 Security Requirements DOCX Ready

Compliance output

Product context, threats, controls, and evidence stay linked to the final package.

NO SECURITY TEAM REQUIRED

Your product knowledge is enough.

Security frameworks and workflows are built in. No blank templates to complete.

□

Describe Your Product

Answer simple questions using the product knowledge your team already has.

◇

Sytance Completes the Security Work

Threats are identified, risks are mitigated, and security tests are planned for you.

▱

Your Compliance Package Is Ready

Every required document and traceability record is generated together.

GUIDED PRODUCT SETUP

Choose what fits. Sytance builds the rest.

Select a few options about your product. Your first security model takes shape as you choose.

◇   AI product setup Most questions are answered with a click.
PRODUCT TYPEWhat are you building? 1 selected
✓▦Industrial product
⌁IoT product
♡Medical device
</>Software product
OPERATING ENVIRONMENTWhere does it run? 2 selected
✓□Customer site
✓□Factory network
□Public cloud
□Mobile environment
AI builds
as you choose
●  Context→
●  Architecture→
●  Threats→
●  Risk→
●  Security design→
●  Tests→

LIVE RESULTS

Your security work is taking shape

□Field devices
→
□Industrial PLC Gateway
→
□MES
→
□Cloud service
◇ThreatsUnauthorized remote accessFirmware update channel tamperingOperational data disclosure
◇Risks & mitigationsRemote access · Strong authenticationUpdate tampering · Signed firmwareData disclosure · Encrypted transport
◇Security designEnforce signed firmware updatesRequire unique device credentialsEncrypt operational data in transit
◇Security testingReject unsigned update packagesVerify failed-login lockoutTest encrypted communications
With Sytance
About15 minutesCompared with external specialistsSave $15k–$40kin specialist and consulting feesA complete, traceable compliance packageSytance does the security work for you. The methods, scoring, templates, evidence links, and final documents are built in. No spreadsheets or Word files to assemble.Threat modelRisk registerSecurity requirementsTest planSBOMTraceabilityFinal documents

Complete the security work without building a security team.

Normally this means specialist methods, cross-team handoffs, spreadsheet tracking, document work, and a consulting engagement. Sytance builds it all in.

Methods to learnThreat modeling, CVSS, testingTeams to coordinateProduct, security, and qualityFiles to assembleTemplates, spreadsheets, and Word
Without SytanceMultiple teams work in parallel, wait for reviews, and revise.Traditional project length8-12 weeks
W1W4W8W12
Security expertMethods and risk decisionsThreat modelRisk & CVSSRequirements
Product & engineeringProduct facts and implementationProduct contextMitigationsTest plan
Quality & complianceEvidence and release readinessSBOM reviewEvidenceTraceability
Consulting & reviewWorkshops, review cycles, and revisionsWorkshopsReviewsRework & documents
100+specialist hoursAcross the complete security process
Multiple teamsreviews and reworkSecurity, engineering, quality, and consultants

SBOM & VULNERABILITY INTELLIGENCE

Hundreds of vulnerabilities. Know what needs attention.

Manage your SBOM. Scan with our native engine. Use exploitation intelligence to focus your review.

  1. SBOM management

    Keep components, versions, and vulnerability findings connected.

  2. Native scanning engine

    Match software dependencies against multi-source vulnerability data.

  3. Evidence-led triage

    Identify findings that need review, with clear reasons and supporting intelligence.

Vulnerability review

Illustrative assessment
  1. Component matching
  2. Exploit intelligence
  3. Review

SELECTED FINDING

Example dependency

version 1.0

Component and version match confirmed

CISA KEV
Known exploitation
Public exploit
Available
EPSS
Review threshold exceeded

Needs review

Confirm affected functionality, exposure, and reachable entry points.

Intelligence → assessment → security record

Multi-source vulnerability intelligence

  • NVD
  • OSV

Vulnerability coverage

  • CISA KEV
  • EPSS

Exploitation signals

  • Exploit Database
  • Metasploit

Public exploit intelligence

DOCUMENTATION AND COMPLIANCE

One complete security record. Ready for every requirement.

Detailed security documentation, generated together and structured for every applicable requirement.

GENERATED SECURITY PACKAGE Generated together from the same reviewed record.
Threat model System context, assets, trust boundaries, attack paths, and threat scenarios
Risk assessment & CVSS Impact, likelihood, scoring rationale, treatment, and residual risk
Security requirements & design Security objectives, mitigations, design decisions, and assurance requirements
Verification & test plan Test methods, acceptance criteria, verification results, and supporting evidence
SBOM & vulnerability decisions Component inventory, supplier information, findings, and remediation decisions
Evidence & traceability Threat → Risk → Requirement → Test → Evidence
Technical documentation Architecture, secure configuration, operational guidance, and final compliance documentation
PACKAGED FOR
EU CRA•IEC 62443-4-1•Medical Device•Customer Assurance

Product Security Documentation

Table of contents
1Product and system context1
1.1Product scope and intended use2
1.2Architecture and trust boundaries4
1.3Assets, interfaces, and data flows6
2Threat modeling9
2.1Threat scenarios and assumptions10
2.2Attack paths and affected assets13
2.3Threat disposition17
3Risk assessment20
3.1Impact and likelihood analysis21
3.2CVSS vector and scoring rationale24
3.3Treatment and residual risk28
4Security requirements and design32
4.1Security objectives and requirements33
4.2Mitigation and design decisions38
5Verification and evidence44
5.1Test methods and acceptance criteria45
5.2Results, evidence, and traceability50
6SBOM and vulnerability management58
7Final technical documentation62

PRICING

Start with one product. Scale across every release.

Build product security evidence in one workflow, from threat modeling and risk assessment to security requirements, test planning, and SBOM vulnerability review. Validate the workflow with Evaluation, deliver formal documents with Business, and add organisational governance and portfolio capacity with Enterprise.

Evaluation

Free
14 days

For teams validating security and compliance workflows with a real product.

Explore threat modeling, risk assessment, and evidence readiness. Includes a limited, watermarked preview; personalized formal documents and complete packages require an upgrade.

Start Evaluation
PLAN CAPABILITIES
✓1 active product to validate the workflow
✓1 product version
✓1 standard framework
✓60 AI units over 14 days for AI-assisted analysis
✓Document catalog, evidence traceability, and readiness checks
✓Watermarked Threat Model PDF preview with limited risk content
✓Complete personalized document package export with a Business upgrade

Business

RECOMMENDED
€8,999 €12,999
Early access price ends soonper year, excluding applicable tax

For teams delivering product security documents and review packages across releases.

Move from evaluation previews to personalized formal output: editable DOCX, PDF, and complete packages for multiple products and ongoing releases.

Choose Business Online
PLAN CAPABILITIES
✓Up to 5 active products with security evidence in one place
✓Unlimited versions per active product for ongoing releases
✓Up to 2 standard frameworks per product
✓1,000 AI units per month for analysis and document drafting
✓1 concurrent document export
✓Personalized HTML previews, PDF, editable DOCX, and complete packages

Enterprise

Custom quote
annual subscription

For enterprises combining organisational governance with a larger product portfolio.

Includes all Business document output capabilities plus 1 governance workspace, five times the product and monthly AI capacity, and more concurrent exports.

Talk to Enterprise Sales
PLAN CAPABILITIES
✓Up to 25 active products for a larger portfolio
✓Unlimited versions per active product for ongoing releases
✓Up to 2 standard frameworks per product
✓5,000 AI units per month: 5 times Business capacity
✓3 concurrent document exports for parallel delivery
✓All Business document output capabilities + 1 governance workspace

Included with every plan

Available online: the Business early-access annual subscription is €8,999 for a limited time (normally €12,999). Enterprise is a tailored contract. Capacity is defined by active products and included AI usage.

✓Guided product setup
✓Threat modeling and risk assessment
✓Security requirements and test planning
✓SBOM and vulnerability review
✓Document catalog and traceability

Start with one product. Prove the workflow before committing.

Build real product evidence, use the guided workflow, and inspect readiness inside the platform. Upgrade to Business when you need personalized formal output.

FIRST REVIEW-READY PACKAGE About 15 minutes. No security team required.