CAIRIS

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

CAIRIS is ranked #5 of 22 in threat modeling software on Inferse. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

Compared on threat modeling software

Free plan: Yescairis.org
Attack-path analysis: Yescairis.org
Risk prioritization: Yescairis.org
Collaborative review: Yescairis.org
Templates and frameworks: Yescairis.org
Modeling methods: multiplecairis.org
Deployment: bothcairis.org

Facts

Purpose: CAIRIS is an open source platform for eliciting, specifying, and validating secure and usable systems.cairis.org · 28 Sept 2026
Design data: It supports security, usability, and requirements data including assets, countermeasures, factoids, personas, requirements, and architectural components.cairis.org · 28 Sept 2026
Visualizations: It can automatically generate 12 views of an emerging design from perspectives including people, risks, requirements, architecture, and physical location.cairis.org · 28 Sept 2026
Threat modeling: It can automatically generate threat models such as Data Flow Diagrams as an early stage design evolves.cairis.org · 28 Sept 2026
Security analysis: It uses attack and architectural patterns to help measure attack surface and validate designs for known security problems and potential GDPR compliance issues.cairis.org · 28 Sept 2026
Documentation: It generates documentation including Volere compliant requirement specifications and GDPR DPIA documents.cairis.org · 28 Sept 2026
API: The CAIRIS API can be used to build design apps or integrate CAIRIS into an existing toolchain.cairis.org · 28 Sept 2026
Deployment: CAIRIS can be installed using Docker or Vagrant, or from source on platforms supported by its open source dependencies; Ubuntu is the most tested platform.docs.cairis.org · 28 Sept 2026
Client access: The web application works in modern browsers except Microsoft Internet Explorer; Microsoft Edge is supported.docs.cairis.org · 28 Sept 2026
Integrations: The Persona Helper Chrome Extension can create document references from highlighted text on a web page and connect to a CAIRIS server.docs.cairis.org · 28 Sept 2026
Demo limits: The live demo is rebuilt nightly, and accounts other than its recreated test account are deleted on Sunday morning each week.docs.cairis.org · 28 Sept 2026
Demo data visibility: The live demo guidance says all databases are visible to everyone and advises exporting models to avoid losing work when the container is rebuilt nightly.cairis.org · 28 Sept 2026
Support: The maker asks users to report problems or feature requests by raising an issue on GitHub or getting in touch.cairis.org · 28 Sept 2026