CAIRIS

7.3easy start · #2 of 22
in Threat Modeling Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Web, Windows.

CAIRIS is ranked #2 of 22 in threat modeling software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

CAIRIS plans and pricing

All plans

Free Free Freely available under Apache Software License cairis.org · 28 Sept 2026

Compared on threat modeling software

Free plan: Yes
Attack-path analysis: Yes
Risk prioritization: Yes
Collaborative review: Yes
Templates and frameworks: Yes
Modeling methods: multiple
Deployment: both

Best CAIRIS alternatives

See all 12

ThreatOpus 0 of 4 in the starter kit Lesson 17.7 OWASP Threat Dragon 0 of 4 in the starter kit Lesson 37.3 ThreatModeler Nexus 0 of 4 in the starter kit Lesson 47.1 ThreatTree 0 of 4 in the starter kit Lesson 56.9 AWS Threat Composer 0 of 4 in the starter kit Lesson 66.8 IriusRisk 0 of 4 in the starter kit Lesson 76.8

The record

Purpose: CAIRIS is an open source platform for eliciting, specifying, and validating secure and usable systems.
Design data: It supports security, usability, and requirements data including assets, countermeasures, factoids, personas, requirements, and architectural components.
Visualizations: It can automatically generate 12 views of an emerging design from perspectives including people, risks, requirements, architecture, and physical location.
Threat modeling: It can automatically generate threat models such as Data Flow Diagrams as an early stage design evolves.
Security analysis: It uses attack and architectural patterns to help measure attack surface and validate designs for known security problems and potential GDPR compliance issues.
Documentation: It generates documentation including Volere compliant requirement specifications and GDPR DPIA documents.
API: The CAIRIS API can be used to build design apps or integrate CAIRIS into an existing toolchain.
Client access: The web application works in modern browsers except Microsoft Internet Explorer; Microsoft Edge is supported.
Integrations: The Persona Helper Chrome Extension can create document references from highlighted text on a web page and connect to a CAIRIS server.
Demo limits: The live demo is rebuilt nightly, and accounts other than its recreated test account are deleted on Sunday morning each week.
Demo data visibility: The live demo guidance says all databases are visible to everyone and advises exporting models to avoid losing work when the container is rebuilt nightly.
Support: The maker asks users to report problems or feature requests by raising an issue on GitHub or getting in touch.
Price from: Free

Where it ranks on The Geeks Club

Best Threat Modeling Software in 2026#2 of 22

Is CAIRIS yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote CAIRIS

Sources

cairis.org· checked 28 Sept 2026
docs.cairis.org/en/latest/starting.html· checked 28 Sept 2026
docs.cairis.org/en/latest/personas.html· checked 28 Sept 2026
docs.cairis.org/en/latest/gettingstarted.html· checked 28 Sept 2026
cairis.org/cairis/cloud/· checked 28 Sept 2026
cairis.org/about/· checked 28 Sept 2026