Skip to main content

qtara

Deprecated. qtara is no longer maintained. 0.4.0 (2026-10-17) is the final release, and its bundled registry will not be updated.

Use the public data instead, which stays current:

Why: almost no one installs the package, and every registry change had to be mirrored in it. TARA, NISS and QIF are a proposed framework that has not been independently validated; the package will be reconsidered if outside users ask for a Python client.

Threat Analysis & Risk Assessment (TARA) framework for Neural Security.

The qtara package provides programmatic access to a snapshot of the TARA registry (176 techniques as of 0.4.0), NISS (Neural Impact Scoring System) scores, physics feasibility tiers, and STIX 2.1 export.

Installation

pip install qtara

Features

  • TARA Registry: Query a snapshot of 176 proposed BCI threat techniques with enrichment data. Most are theoretical; check each technique's evidence tier.
  • Physics Feasibility Tiers: Filter techniques by physics feasibility (T0: feasible now, T1: mid-term, T2: far-term, T3: no physics gate).
  • NISS Scorer: Calculate neural impact scores based on physics-derived metrics.
  • CVSS + Neurorights: Access CVSS 4.0 mappings and neuroright impact data per technique.
  • STIX 2.1: Export threat data for industry-standard security tools.
  • CLI: Instant access to threat intelligence from the terminal.

Quick Start

from qtara.core import TaraLoader

loader = TaraLoader()
loader.load()

# List all techniques
techniques = loader.list_techniques()
print(f"{len(techniques)} techniques loaded")

# Get a specific technique
t = loader.get_technique("QIF-T0001")
print(t.attack, t.severity, t.physics_feasibility.tier_label)

# Filter by physics tier
tier0 = loader.list_by_physics_tier(0)
print(f"{len(tier0)} techniques feasible now")

# Filter by severity
critical = loader.list_by_severity("critical")
print(f"{len(critical)} critical techniques")

# Get statistics
stats = loader.get_statistics()
print(stats)

CLI Usage

# List all techniques
qtara list

# Filter by physics feasibility tier (0=feasible now, 1=mid-term, 2=far-term, 3=no gate)
qtara list --tier 0

# Filter by severity
qtara list --severity critical

# Filter by neural band
qtara list --band N1

# Get detailed info for a technique
qtara info QIF-T0001

# Show statistics
qtara stats

# Export to STIX 2.1
qtara stix --output threats.json

# Get citation
qtara cite

Physics Feasibility Tiers

Each technique is classified by its physics feasibility:

Tier Label Timeline Description
T0 feasible_now now Attack is possible with current technology
T1 mid_term 5-10 years Requires technology advances expected within a decade
T2 far_term 10+ years Requires fundamental breakthroughs
T3 no_physics_gate n/a No physics constraint (software/protocol attacks)

Development

git clone https://github.com/qinnovates/neurosecurity
cd neurosecurity/datalake/qtara
pip install -e .

License

Apache-2.0

Metadata

Release files for qtara 0.4.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for qtara 0.4.0
File Size Uploaded
qtara-0.4.0.tar.gz 174.4 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for qtara 0.4.0
File Interpreter ABI Platform
qtara-0.4.0-py3-none-any.whl Python 3 none any Details

Total release size: 353.1 kB

Release files / qtara-0.4.0.tar.gz

Download URL qtara-0.4.0.tar.gz
Size 174.4 kB
Tags Source
SHA-256 checksum
How to use checksums
97f00fd3e5c9055e5e4ef00dbb8907f1209a41ba3c0ff16d9ec32ed492dca2b7
BLAKE2b-256 checksum
How to use checksums
cf60f0e3aaeee6868ccf5ee48a68ca79f797a1ff8354116c700283555f7f8d50
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 17, 2026.

Transparency log

Release files / qtara-0.4.0-py3-none-any.whl

Download URL qtara-0.4.0-py3-none-any.whl
Size 178.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
bf902f1d8fa4c62e27099bff9400326a0107fa6cad6213ea226ddfbd8132c3dd
BLAKE2b-256 checksum
How to use checksums
222979f10fe4265767cc48ae17651190fd740050b8a25b9429beea483a35e701
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 17, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

0.4.0 This release

2 release files

0.3.0

2 release files

0.2.0

2 release files

0.1.3

2 release files

0.1.2

2 release files

0.1.1

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page