Side by side
CAIRIS vs Dethernety
Both stand on threat modeling software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APILinuxMac+3
CAIRIS links system design information with generated views, threat models and security analysis. For demo use, account for public database visibility and nightly rebuilds; Ubuntu is the most tested platform.
Visit CAIRIS
Free plan Open source APISelf-hostedWeb
Choose Dethernety if you need graph-based threat modeling with local hosting, architecture-aware analysis, and CLI automation. Organizations seeking a hosted service should note that Hosted SaaS is planned for later; the currently described open-source edition requires self-hosting and a user-hosted graph database.
Visit DethernetyThe facts
| CAIRIS | Dethernety | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Yes |
| Runs on | API, Linux, Mac, Self-hosted, Web, Windows | API, Self-hosted, Web |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 5 |
| Maker | Not published | Not published |
| Website | cairis.org | dether.net |
| On threat modeling software | #2 of 23 | #1 of 23 |
CAIRIS: what it does well
- Generates 12 design views and threat models.
- Produces requirement specifications and GDPR DPIA documents.
- API supports toolchain integration.
- Free under the Apache Software License.
What to know first
- Internet Explorer is not supported by the web application.
- Live demo databases are visible to everyone.
- The live demo is rebuilt nightly.
Dethernety: what it does well
- Build and explore models in a browser, from code, or from reports.
- Analyzes attack paths, blast radius, and residual risk.
- Maps exposures to MITRE ATT&CK and controls to D3FEND.
- Can run fully offline on infrastructure users control.
- Issue modules can synchronize remediation with external trackers.
What to know first
- Users host and manage their own graph database.
- Hosted SaaS is planned for later.
- BYODt and BYODt Team are described as coming soon.
- Enterprise pricing is by contract, with custom terms.
Alternatives to CAIRIS Alternatives to Dethernety The whole list