Skip to main content

qtara

Threat Analysis & Risk Assessment (TARA) framework for Neural Security.

The qtara package provides programmatic access to the TARA registry (161 techniques), NISS (Neural Impact Scoring System) calculators, physics feasibility tiers, and STIX 2.1 exporters.

Installation

pip install qtara

Features

  • TARA Registry: Query 161 verified BCI threat techniques with full enrichment data.
  • Physics Feasibility Tiers: Filter techniques by physics feasibility (T0: feasible now, T1: mid-term, T2: far-term, T3: no physics gate).
  • NISS Scorer: Calculate neural impact scores based on physics-derived metrics.
  • CVSS + Neurorights: Access CVSS 4.0 mappings and neuroright impact data per technique.
  • STIX 2.1: Export threat data for industry-standard security tools.
  • CLI: Instant access to threat intelligence from the terminal.

Quick Start

from qtara.core import TaraLoader

loader = TaraLoader()
loader.load()

# List all techniques
techniques = loader.list_techniques()
print(f"{len(techniques)} techniques loaded")

# Get a specific technique
t = loader.get_technique("QIF-T0001")
print(t.attack, t.severity, t.physics_feasibility.tier_label)

# Filter by physics tier
tier0 = loader.list_by_physics_tier(0)
print(f"{len(tier0)} techniques feasible now")

# Filter by severity
critical = loader.list_by_severity("critical")
print(f"{len(critical)} critical techniques")

# Get statistics
stats = loader.get_statistics()
print(stats)

CLI Usage

# List all techniques
qtara list

# Filter by physics feasibility tier (0=feasible now, 1=mid-term, 2=far-term, 3=no gate)
qtara list --tier 0

# Filter by severity
qtara list --severity critical

# Filter by neural band
qtara list --band N1

# Get detailed info for a technique
qtara info QIF-T0001

# Show statistics
qtara stats

# Export to STIX 2.1
qtara stix --output threats.json

# Get citation
qtara cite

Physics Feasibility Tiers

Each technique is classified by its physics feasibility:

Tier Label Timeline Description
T0 feasible_now now Attack is possible with current technology
T1 mid_term 5-10 years Requires technology advances expected within a decade
T2 far_term 10+ years Requires fundamental breakthroughs
T3 no_physics_gate n/a No physics constraint (software/protocol attacks)

Development

git clone https://github.com/qinnovates/neurosecurity
cd shared/qtara
pip install -e .

License

MIT

Metadata

Release files for qtara 0.3.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for qtara 0.3.0
File Size Uploaded
qtara-0.3.0.tar.gz 170.3 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for qtara 0.3.0
File Interpreter ABI Platform
qtara-0.3.0-py3-none-any.whl Python 3 none any Details

Total release size: 345.4 kB

Release files / qtara-0.3.0.tar.gz

Download URL qtara-0.3.0.tar.gz
Size 170.3 kB
Tags Source
SHA-256 checksum
How to use checksums
624f52a41bc0f53ab622b4e2228abb0d9a2d52b1ebe55520907e9809323d4d9e
BLAKE2b-256 checksum
How to use checksums
96bf11b56eb2483f26ad805d374b428a27a8aa9e6a97b76691a79a2a80375b31
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 7, 2026.

Transparency log

Release files / qtara-0.3.0-py3-none-any.whl

Download URL qtara-0.3.0-py3-none-any.whl
Size 175.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
1d4d86e2cd900f877b9dbda8c8858f8d8af9a980ff580396c4082f5c6e0f7d18
BLAKE2b-256 checksum
How to use checksums
5b090f14ad76fd62b396e331c6cd5c035899cbd2f651955eb20630f6dc22bedc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 7, 2026.

Transparency log

Release history Release notifications | RSS feed

0.4.0

2 release files

This release

0.3.0 This release

2 release files

0.2.0

2 release files

0.1.3

2 release files

0.1.2

2 release files

0.1.1

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page