Cairn
cairnsecurity.com
Spec sheet
- Purpose
- Cairn combines pentest scoping, statements of work, reporting, and a client portal in one platform.Read 8 Oct 2026 · cairnsecurity.com
- Audience
- Cairn describes its platform as built for offensive security teams and penetration testing firms.Read 8 Oct 2026 · cairnsecurity.com
- Deployment
- Cairn is offered as hosted multi-tenant SaaS or self-hosted using Docker, Kubernetes, or bare metal, with an air-gapped option.Read 8 Oct 2026 · cairnsecurity.com
- Integrations
- Listed connectors include Salesforce, HubSpot, Pipedrive, ConnectWise, Monday, Jira, ServiceNow, GitHub, Azure DevOps, Linear, DocuSign, and Dropbox Sign.Read 8 Oct 2026 · cairnsecurity.com
- Security
- The security page lists TLS 1.3 with post-quantum X25519MLKEM768 key exchange, MFA, granular RBAC, tenant isolation, and a cryptographically chained audit trail.Read 8 Oct 2026 · cairnsecurity.com
- Compliance
- Cairn maps report findings to ISO 27001, SOC 2, NIST CSF, and PCI-DSS controls, but states that Cairn itself is not yet certified and formal third-party attestations are not yet in hand.Read 8 Oct 2026 · cairnsecurity.com
- Support
- Cairn lists community support for Starter, priority support for Team, and priority support plus SLA for Business; its contact page says it usually answers within a business day.Read 8 Oct 2026 · cairnsecurity.com
- AI
- AI drafting can redact client names, IPs, and hostnames before model processing, and can run with locally hosted models or in an air-gapped environment.Read 8 Oct 2026 · cairnsecurity.com
- Client portal
- The client portal supports SSO, magic-link or password sign-in, white-label branding, client requests, and unlimited client users across pricing tiers.Read 8 Oct 2026 · cairnsecurity.com
- Finding library
- Cairn lists approximately 2,476 curated findings across 26 test types, with CWE, CVE, and MITRE ATT&CK references.Read 8 Oct 2026 · cairnsecurity.com
- Imports
- Report supports auto-detected imports from 40 scanner and tool formats, including generic CSV and JSON, and supports Open Pentest Format import and export.Read 8 Oct 2026 · cairnsecurity.com
- Pricing limits
- Pricing is per seat for cloud tiers, and the page says client portal users are not seats and are unlimited on every tier.Read 8 Oct 2026 · cairnsecurity.com
- Product tour
- Cairn offers a two-minute click-through product tour with no signup.Read 8 Oct 2026 · cairnsecurity.com
- Workflow
- The platform covers the engagement lifecycle from RFP scoping through findings, report delivery, and retesting.Read 8 Oct 2026 · cairnsecurity.com
Plans and prices
Starter $99 a month annually; month-to-month available at about 20 percent more $99 seat / mo · 1 DOCX/PDF template · community support Read 8 Oct 2026 · cairnsecurity.com
Team $149 a month annually; month-to-month available at about 20 percent more $149 seat / mo · unlimited DOCX/PDF templates · priority support Read 8 Oct 2026 · cairnsecurity.com
Business $249 a month annually; month-to-month available at about 20 percent more $249 seat / mo · unlimited DOCX/PDF templates · priority support + SLA Read 8 Oct 2026 · cairnsecurity.com
On-prem & air-gapped $30,000 a year per organization / year; from $30,000 Self-hosted or air-gapped platform · RSA-signed licenses · dedicated support Read 8 Oct 2026 · cairnsecurity.com
Where Specifiction places it
- Penetration Testing Software#15 of 347.8
Alternatives to CairnAll alternatives →
Burp Suite DAST 8.7 Visit 
AttackForge From $50/mo 8.4 Visit