Caido vs Dradis
Caido
caido.ioDradis
dradis.comSide by side
| Figure | Caido | Dradis |
|---|---|---|
| Price from | Free | $300/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 4 |
| Spec score · Penetration Testing Software | 8.2 (#9) | 8.6 (#4) |
| Automation | Its node-based workflows support ad-hoc automation, and its core feature page describes automated attacks using custom payloads and placeholders. | Dradis provides a REST API, webhooks, and a rules engine for integrating tools and automating workflows. |
| Founded | 2021 | 2007 |
| Integrations | Caido's homepage says AI agents can access Caido programmatically through its Client SDK. | Dradis lists 47+ scanner, ticketing, and SSO integrations, including Nessus, Burp Suite, Nmap, Qualys, Jira, and Okta. |
| Intended users | Caido presents the product for pentesters, security engineers, and bug bounty hunters. | Assess is presented for teams that deliver findings, while Remediate is for internal security teams that also track fixes. |
| Support | The pricing page lists public Discord support for Basic and Individual, and a dedicated support channel for Team. | Paid plans include email and live chat support, and Community Edition users can ask questions on the forum. |
Plans
Caido
- BasicFree
- Education PlanFree
- EnterprisePriced on request
- IndividualPrice not published
- TeamPrice not published
Dradis
- Community EditionFree
- Assess$3,600 a year
- Remediate$7,200 a year
- EnterprisePriced on request
In their own words
Caido
Caido is a web security auditing toolkit for scaling manual testing through AI and teamwork. Its proxy intercepts and monitors HTTP and WebSocket traffic, with history for intercepted traffic and WebSocket messages. HTTPQL filtering lets users search requests and responses. Node-based workflows support ad-hoc automation, and automated attacks can use custom payloads and placeholders. Users can connect existing LLM providers, including Anthropic, Google, OpenAI, and providers available through OpenRouter. AI agents can access Caido programmatically through its Client SDK. Community plugins and custom extensions are supported; the Basic plan allows three plugins. Basic is free forever and includes two projects, seven workflows, five filter presets, and one pipeline session at a time. The pricing note lists paid access from $20/user/mo, while the opened pricing page did not display prices for Individual, Team, or Enterprise. Caido lists Linux, macOS, Windows, web, API, and self-hosted platforms, and presents the product for pentesters, security engineers, and bug bounty hunters.
Dradis
Dradis supports security assessment work from kickoff through collaboration, reporting, remediation and workflow automation. It organizes assessment information with structured data, templates and automation to create consistent deliverables, and its review process lets teams examine work in a PR-style format before it reaches a report. Risk tools include CVSSv4, DREAD and MITRE ATT&CK calculators, with OWASP, PTES, OSCP, HIPAA, PCI and custom methodologies. Dradis lists more than 47 integrations across scanners, ticketing and SSO, including Nessus, Burp Suite, Nmap, Qualys, Jira and Okta. A REST API, webhooks and rules engine support integrations and automated workflows. Remediate adds tracking of fixes and integrations with Jira, Azure DevOps and ServiceNow. The software is self-hosted and can run without an internet connection; the maker says it cannot access customer data. Community Edition is free for one project at a time. Assess costs $3,600 a year and Remediate costs $7,200 a year, each with a three-seat minimum.