Cairn

Plans and prices

Every plan, in full

On the record

AI

AI drafting can redact client names, IPs, and hostnames before model processing, and can run with locally hosted models or in an air-gapped environment.cairnsecurity.com · read 8 Oct 2026

Audience

Cairn describes its platform as built for offensive security teams and penetration testing firms.cairnsecurity.com · read 8 Oct 2026

Client portal

The client portal supports SSO, magic-link or password sign-in, white-label branding, client requests, and unlimited client users across pricing tiers.cairnsecurity.com · read 8 Oct 2026

Compliance

Cairn maps report findings to ISO 27001, SOC 2, NIST CSF, and PCI-DSS controls, but states that Cairn itself is not yet certified and formal third-party attestations are not yet in hand.cairnsecurity.com · read 8 Oct 2026

Deployment

Cairn is offered as hosted multi-tenant SaaS or self-hosted using Docker, Kubernetes, or bare metal, with an air-gapped option.cairnsecurity.com · read 8 Oct 2026

Finding library

Cairn lists approximately 2,476 curated findings across 26 test types, with CWE, CVE, and MITRE ATT&CK references.cairnsecurity.com · read 8 Oct 2026

Imports

Report supports auto-detected imports from 40 scanner and tool formats, including generic CSV and JSON, and supports Open Pentest Format import and export.cairnsecurity.com · read 8 Oct 2026

Integrations

Listed connectors include Salesforce, HubSpot, Pipedrive, ConnectWise, Monday, Jira, ServiceNow, GitHub, Azure DevOps, Linear, DocuSign, and Dropbox Sign.cairnsecurity.com · read 8 Oct 2026

Pricing limits

Pricing is per seat for cloud tiers, and the page says client portal users are not seats and are unlimited on every tier.cairnsecurity.com · read 8 Oct 2026

Product tour

Cairn offers a two-minute click-through product tour with no signup.cairnsecurity.com · read 8 Oct 2026

Purpose

Cairn combines pentest scoping, statements of work, reporting, and a client portal in one platform.cairnsecurity.com · read 8 Oct 2026

Security

The security page lists TLS 1.3 with post-quantum X25519MLKEM768 key exchange, MFA, granular RBAC, tenant isolation, and a cryptographically chained audit trail.cairnsecurity.com · read 8 Oct 2026

Support

Cairn lists community support for Starter, priority support for Team, and priority support plus SLA for Business; its contact page says it usually answers within a business day.cairnsecurity.com · read 8 Oct 2026

Workflow

The platform covers the engagement lifecycle from RFP scoping through findings, report delivery, and retesting.cairnsecurity.com · read 8 Oct 2026

Alternatives to Cairn

D DradisWebWindows+4 P PentesterraWebWindows+5 KL Kali LinuxAndroidWindows+3 OZ OWASP ZAPWindowsMac+4 PW PenTest.WSWebMac+3 C CaidoWebWindows+4 P PentiWebAPI+1 R RedAmonWebWindows+4

Every alternative, ranked