Cain

AI penetration testing agent built for real-world authorized assessments across major clouds.

Desktopfree

Cain is an open-source AI penetration testing agent, built on the Claude Agent SDK, aimed at real-world authorized security assessments rather than CTF challenges. It maintains attack state across an engagement, adapts to WAF and risk-control conditions, and includes a built-in cloud module covering AWS, Azure, GCP, and major Chinese cloud providers. It focuses on business logic flaws, authentication chains, and cloud misconfigurations, producing an evidence chain and reproducible proof of concept for each finding.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Cain - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Cain to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Cain (or something else) actually fits.

Try a problem