Everyone else starts at the finding.
Cairn starts at the deal.
Scope the deal, write the statement of work (SoW), get it signed. That same record flows into findings, the report, and the client portal, with nothing typed twice. Deploy it as SaaS or on your own infrastructure, air-gapped if you need it, with AI drafting that never sends evidence off your network. Built by people who run engagements.
One platform, every step, from RFP to retest.
Every stage below happens inside Cairn, not in a handoff between separate tools. Hover any stage to see which part of the platform runs it.
- 01RFPScope
- 02Scoping questionnaireScope
- 03SoW & proposalScope
- 04KickoffScope
- 05ExecutionReport
- 06Findings & evidenceReport
- 07Tech reviewReport
- 08Ops reviewReport
- 09DeliveryClient
- 10RetestReport
Not a mockup. The actual product.
What you see is what you get: real screens from a live Cairn tenant, not marketing art. Click through the tools. Every one is built, thoroughly tested, in use, and shipping today.
Revenue you can forecast
Weighted pipeline, stage-by-stage win rates, acceptance rate and time-to-sign, reconstructed from your own closed-deal history. No other pentest platform starts here.
Three tools, one record.
Scope, Report, and the Client Portal are live and running real engagements today. They read and write the same record, so the client, the scope, and the findings you captured while winning the deal are already there when you sit down to write the report.
Scope
Pre-sales, scoping, SoWsClients, proposals, service catalog, and the questionnaire that auto-populates SoW fields. Day-based pricing, recurring templates, pipeline forecasting.
- Pipeline forecasting
- Scoping questionnaire → SoW
- Recurring SoW templates
Report
Findings, authoring, delivery40 scanner imports plus generic CSV/JSON, a reusable findings library, multi-reviewer authoring with track changes and section locking, custom DOCX/PDF templating, retest cycles, and AI drafting that can run on-prem.
- 40 scanners + CSV/JSON
- Findings library + templates
- Track changes + review workflow
Client Portal
Delivery & client requestsA portal your clients log into directly, not a PDF over email: branded, scoped, with SSO and magic-link sign-in, per-org SMTP, and auto-disclosure of Critical and High findings the moment a report is delivered.
- Auto-disclose Crit/High on delivery
- SSO + per-org SMTP (AES-256)
- Client request workflow
Built on one data model, the backbone the platform grows on.
Dozens of features per tool.
Most tools in this space ship one slice of the job. Scope, Report, and the Client Portal each carry the feature set below, built from running actual engagements. This is a representative cut, not the full inventory.
Scope
Pre-sales, scoping & the deal- Client, contact & full engagement history
- Opportunity pipeline with enforced stage transitions
- Win / loss analysis with competitor tracking
- Pipeline forecasting from per-stage historical win rates
- Public intake forms
- Scoping questionnaire that auto-populates the SoW
- Historical-percentile effort estimation
- SoW engine with a 12-stage review-and-sign lifecycle
- Five pricing models: day-rate, fixed, T&M, retainer, call-off
- Atomic call-off / day-bank drawdown tracking
- Magic-link client view, accept & reject
- E-signature via DocuSign, HelloSign or built-in signer
- NDA lifecycle that gates the SoW until signed
- Recurring SoW templates with one-click renewal
- Field-level delta diff on every renewal
- Bidirectional CRM sync: Salesforce, HubSpot, Pipedrive, ConnectWise, Monday
- Per-org service catalog
- Handoff checklists with critical-item gating
Report
Findings, authoring & delivery- 40 scanner parsers plus generic CSV / JSON
- Format auto-detection on every import
- Finding-DNA hybrid exact + fuzzy deduplication
- ~2,493 curated findings across 26 test types
- CWE, CVE & MITRE ATT&CK references per finding
- Copy-on-write library: global, org-private & community tiers
- Reusable finding & report templates
- Multi-reviewer track changes and inline comments
- Live presence with entity-level section locking
- CVSS 3.1 calculator: base, temporal & environmental
- Compliance crosswalks: ISO 27001, NIST CSF, PCI-DSS, SOC 2
- Custom DOCX template engine and Gotenberg PDF export
- Retest cycles with per-finding status & trending
- Auto-generated retest verification checklists
- Cross-report finding timeline & history
- Flash reports, executive summaries & appendices
- Redaction-first AI drafting, self-hostable
- Ticketing sync: Jira, ServiceNow, GitHub, Azure DevOps, Linear
- Compare reports side by side
- Full audit trail
Client Portal
Delivery & client requests- Scoped client role, middleware-enforced on every query
- SSO via OIDC or SAML, magic link, or password
- Per-org white-label branding: logo, favicon, fonts, colors
- Custom domain with DNS verification
- Light and dark themes
- Auto-disclosure of Critical and High findings on report delivery
- Per-org SMTP with AES-256-GCM encrypted credentials
- Client requests: disputes, amendments, evidence, inquiries
- Client-initiated retest requests with admin review
- Per-finding remediation status & full retest history
- Client-facing finding & remediation analytics
- Threaded messaging and notifications
- Team management per client
- Hashed delivery tokens, short expiry, single-use MFA
Nobody else covers the whole engagement.
Every incumbent owns one slice. To match a single Cairn tenant you’d bolt a CRM and a proposal tool onto a reporting app, and you still wouldn’t get pipeline forecasting or self-hostable AI drafting.
| Capability | Cairn | PlexTrac | AttackForge | Dradis | PentestPad |
|---|---|---|---|---|---|
| Full engagement lifecycle, scope to delivery | ✓✓ | ◐ | ◐ | – | ◐ |
| Pre-sales scoping, SoW & pricing models | ✓✓ | ◐ | ◐ | – | ◐ |
| Pipeline forecasting & win/loss | ✓✓ | – | – | – | ◐ |
| Scanner import parsers | ✓✓ | ✓ | ✓ | ✓✓ | ✓ |
| Findings dedup & correlation | ✓✓ | ✓ | ◐ | ◐ | ◐ |
| AI drafting, redaction-first & self-hostable | ✓✓ | ◐ | – | – | ✓ |
| Real-time collaborative authoring | ✓ | ✓ | ✓ | ◐ | ✓ |
| Curated findings library | ✓ | ✓✓ | ◐ | ◐ | ◐ |
| White-label client portal | ✓ | ✓ | ✓ | ◐ | ✓✓ |
| Self-host and SaaS | ✓✓ | ◐ | ◐ | ◐ | ✓ |
Competitor capabilities are drawn from public 2026 sources and are directional, not hands-on tested. Certifications and market track record are where a newer platform is still earning its place: we lead on capability, and we are catching up on proof.
AI that drafts findings, without your data leaving the building.
Run Cairn as multi-tenant SaaS in minutes, or entirely inside a customer’s vault: same AI drafting, same workflow, either way. Client evidence is the most sensitive data an offensive team holds, so Cairn is built to keep it wherever you need it: the option no one else offers is on-prem with RSA-signed licenses and zero data egress, for the contracts that demand it.
- On-device model agentsFindings, summaries, and remediation drafts are generated by a model you host: self-hosted GPU or a local runtime.
- Air-gapped, offline bundlesRun fully disconnected. Ship updates as signed offline bundles, with no outbound calls, ever.
- Bring your own modelPoint Cairn at your own endpoint, or an approved provider. The prompt path is yours to audit.
Your reporting tool doesn’t know the deal exists.
Cairn runs the engagement from the first scoping call to the signed-off retest on a single record, so nothing gets duplicated or lost between winning the work and shipping the report. See it for yourself in the two-minute tour, or get in touch and we’ll walk you and your team through it.