Cairn
The facts below are what the maker publishes about Cairn, checked and dated. Our editors have not written about it yet.
Plans and prices
From Cairn's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Starter | $99 a month | $99 seat / mo · 1 DOCX/PDF template · community support · annually; month-to-month available at about 20 percent more |
| Team | $149 a month | $149 seat / mo · unlimited DOCX/PDF templates · priority support · annually; month-to-month available at about 20 percent more |
| Business | $249 a month | $249 seat / mo · unlimited DOCX/PDF templates · priority support + SLA · annually; month-to-month available at about 20 percent more |
| On-prem & air-gapped | $30,000 a year | Self-hosted or air-gapped platform · RSA-signed licenses · dedicated support · per organization / year; from $30,000 |
The facts
Each one read from Cairn's own pages, with the date it was checked.
What it does
- AI
- AI drafting can redact client names, IPs, and hostnames before model processing, and can run with locally hosted models or in an air-gapped environment.checked 8 Oct 2026
- Audience
- Cairn describes its platform as built for offensive security teams and penetration testing firms.checked 8 Oct 2026
- Client portal
- The client portal supports SSO, magic-link or password sign-in, white-label branding, client requests, and unlimited client users across pricing tiers.checked 8 Oct 2026
- Compliance
- Cairn maps report findings to ISO 27001, SOC 2, NIST CSF, and PCI-DSS controls, but states that Cairn itself is not yet certified and formal third-party attestations are not yet in hand.checked 8 Oct 2026
- Deployment
- Cairn is offered as hosted multi-tenant SaaS or self-hosted using Docker, Kubernetes, or bare metal, with an air-gapped option.checked 8 Oct 2026
- Finding library
- Cairn lists approximately 2,476 curated findings across 26 test types, with CWE, CVE, and MITRE ATT&CK references.checked 8 Oct 2026
- Imports
- Report supports auto-detected imports from 40 scanner and tool formats, including generic CSV and JSON, and supports Open Pentest Format import and export.checked 8 Oct 2026
- Integrations
- Listed connectors include Salesforce, HubSpot, Pipedrive, ConnectWise, Monday, Jira, ServiceNow, GitHub, Azure DevOps, Linear, DocuSign, and Dropbox Sign.checked 8 Oct 2026
- Pricing limits
- Pricing is per seat for cloud tiers, and the page says client portal users are not seats and are unlimited on every tier.checked 8 Oct 2026
- Product tour
- Cairn offers a two-minute click-through product tour with no signup.checked 8 Oct 2026
- Purpose
- Cairn combines pentest scoping, statements of work, reporting, and a client portal in one platform.checked 8 Oct 2026
- Security
- The security page lists TLS 1.3 with post-quantum X25519MLKEM768 key exchange, MFA, granular RBAC, tenant isolation, and a cryptographically chained audit trail.checked 8 Oct 2026
- Support
- Cairn lists community support for Starter, priority support for Team, and priority support plus SLA for Business; its contact page says it usually answers within a business day.checked 8 Oct 2026
- Workflow
- The platform covers the engagement lifecycle from RFP scoping through findings, report delivery, and retesting.checked 8 Oct 2026
Alternatives to Cairn
- 1
Pentesterra
Free planWebAPIExtensionLinux7.7From €23 a month - 2
Kali Linux
Free planOpen sourceAndroidLinuxmacOSSelf-hosted7.6Free plan - 3
OWASP ZAP
Free planOpen sourceAPIExtensionLinuxmacOS7.6Free plan - 4
Dradis
Free planWebAPILinuxmacOS7.1From $3,600 a year - 5
w3af
Free planWebAPILinuxmacOS6.8Free plan - 6
Caido
Free planWebAPILinuxmacOS6.6Free plan