Blog
Cyber Security
The TARA Arrives, Its References Don't
Why a TARA loses its references on the way from supplier to OEM, what openXSAM gets back, and why that takes a model.
Read Article
Jens Bühl
8 min readTools for safety-critical development
Three products. One engineering standard.
itemis ANALYZE, itemis CREATE and itemis SECURE cover traceability, model-based development and threat analysis. Each tool stands on its own – together they show their full strength.
Requirements Traceability for Engineering Toolchains
The vendor-independent traceability platform connects DOORS, Enterprise Architect, Polarion, Jira and more — without touching the source systems. Compliance evidence for ISO 26262, ISO/SAE 21434 and ASPICE is generated as a by-product. In production use — among others — at I.G. Bauerhin and KOSTAL.
Learn more about itemis ANALYZE
the engineering workbench for state machines
Visual modelling, simulation and code generation in C, C++, Java, Python and more — as an Eclipse workbench, VS Code extension or web-based. In production use — among others — at BSH Hausgeräte, MAN Energy Solutions and Dräger.
Learn more about itemis CREATE
the cybersecurity engineering tool
TARA, threat modelling, attack trees, vulnerability management — with native support for ISO/SAE 21434 and the EU Cyber Resilience Act. AI-assisted automation reduces TARA effort by up to 80% with full human-in-the-loop control. In production use — among others — at OEMs, Tier-1 suppliers and medical device manufacturers.
Learn more about itemis SECURE
Insights
The latest on our products
Jens Bühl
8 min read
Blog
Cyber Security
Threat Scenarios and Attack Paths: The What and the How of an Attack
Threat scenario, attack path and attack feasibility belong together: what makes a scenario, why the path gets rated, and how the method shifts the result.
Read Article
Jens Bühl
13 min read
Blog
Model-Driven Software Development
Model state machines instead of hand-coding them: using existing C, C++ and Java code directly in the model
The statechart sketch gets implemented by hand, and then the two drift apart. How itemis CREATE pulls existing C, C++ and Java code straight into the model.
Read Article
Axel Terfloth
10 min read
Blog
Model-Driven Software Development
Statechart Tools Compared: MathWorks Stateflow vs. IBM Rhapsody vs. itemis CREATE
An honest, detailed comparison of three leading statechart tools — MathWorks Stateflow, IBM Rhapsody, and itemis CREATE — covering features, pricing, and which tool fits which team.
Read Article
Axel Terfloth
8 min read
Blog
Requirements Traceability
Sit, Stay, Fetch: How to Train Your AI for ASPICE
Six guardrails for AI agents in ASPICE assessments: scripts over prompts, persisted results and progress, batching, closed questions, prohibitions, flagging.
Read Article
Pierre Dammé
6 min read
Blog
Cyber Security
Asset Identification and Impact Rating: Whose Damage Are You Actually Counting?
Asset identification and impact rating supply one half of the risk value: when an element of the item becomes an asset, whose damage a damage scenario describes, why the safety rating is not security's to set alone, and what keeps ratings comparable across projects.
Read Article
Jens Bühl
15 min read