The parts of the platform that cut across every tool.
On-prem AI, flexible deployment, real integrations, and a curated finding library. The capabilities that make Scope, Report, and the Client Portal one system instead of three apps.
AI drafting, without your data leaving the building.
Client evidence is the most sensitive data an offensive team holds. Cairn is the only platform in the category that will run its AI drafting entirely inside your own network, so findings, logs, and PII never reach an external model.
Model hosting
- Point Cairn at a model you host: self-hosted GPU or a local runtime
- Bring your own endpoint or an approved provider
- Local models via Ollama, no per-token cloud cost
- The prompt path is yours to audit
Redaction-first
- Client names, IPs, and hostnames redacted before the model
- Provider keys encrypted per organization at rest
- Human-in-the-loop review before anything is applied
Air-gapped
- Run fully disconnected, with no outbound calls
- Ship updates as signed offline bundles
- A dozen report-focused agents, editable prompt templates
SaaS in minutes, or your vault, air-gapped if you need it.
The same product either way. Start on our multi-tenant SaaS and move on-prem when a customer’s security policy requires it, or the reverse. Your data and templates come with you.
SaaS
- Multi-tenant, hosted, up and running in minutes
- Managed TLS, backups, and updates
- Per-seat pricing, published up front
Self-hosted
- Docker, Kubernetes, or bare-metal
- RSA-signed annual licenses with offline update bundles
- Your data never touches our cloud
- Dedicated onboarding and support
Hardened by default
- TLS 1.3 with post-quantum key exchange, HSTS, strict CSP
- Secrets in a managed vault, encrypted at rest
- Cryptographically chained audit trail
Fits the stack you already run.
Cairn syncs with the CRM, ticketing, signing, and delivery tools your team lives in, so it slots into your workflow instead of replacing it. Real connectors, not a webhook and a promise.
CRM (bidirectional sync)
Ticketing (two-way)
E-signature
Delivery & alerts
Identity
Scanner import
Start every report ahead.
A curated, maintained finding library so authoring is by selection, not a blank page, alongside your own reusable, copy-on-write findings that improve every engagement.
2,476curated findings, and countingCoverage
- ~2,476 curated findings across 26 test types
- 215 categories, CWE / CVE / MITRE ATT&CK referenced
- CVSS 3.1 scored with base, temporal, environmental
Tiers
- Global, community, and organization-private tiers
- Copy-on-write: fork a global finding, keep your edits
- Save a report finding back as a reusable template
Reuse
- Search plus severity, test-type, category, CWE filters
- Named filter presets and saved searches
- Auto-match imported scan findings to library entries
Walk the whole platform, no signup.
Take the two-minute product tour, or talk to us about on-prem and air-gapped deployment for the contracts that demand it.
← Back to the platform