# Filigran OpenCTI

Filigran OpenCTI is a Threat Intel Platforms product by Filigran. It runs in the cloud or on-premises (hybrid). Pricing is commercial (contact sales).

Open-source threat intelligence platform for organizing and operationalizing CTI

Checked October 2026.

## What is Filigran OpenCTI?

Filigran OpenCTI is an open-source threat intelligence platform designed to help organizations collect, manage, and operationalize cyber threat intelligence. The platform consolidates disparate threat feeds into a centralized system using a STIX 2.1 data model.

OpenCTI provides a knowledge hypergraph interface that allows analysts to navigate relationships between threat actors, malware, tactics, techniques, procedures (TTPs), and indicators of compromise. The platform includes visual graphs, timelines, and MITRE ATT&CK framework mappings to support threat analysis workflows.

The platform offers customizable dashboards for different use cases including threat monitoring, threat hunting, incident response, and investigation. It includes case management capabilities for centralizing incident-related data and supporting collaborative investigations.

OpenCTI incorporates automation features for processing threat intelligence workflows and generating reports. The platform includes AI-assisted capabilities for tasks such as threat feed import, search, analysis, and report generation.

Access control is managed through role-based access control (RBAC) with data segregation capabilities. The platform supports threat intelligence sharing across teams and organizations through authorized member and organization mechanisms.

OpenCTI is available in multiple deployment options: Community Edition (open source), Enterprise Edition (on-premise or SaaS), and fully managed SaaS hosting. The platform supports over 300 integrations with external threat feeds and security tools through connectors.

Tags: Case Management, MITRE ATT&CK, Open Source, RBAC, STIX, Cyber Threat Intelligence

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.
- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence) · [Threat Intel Platforms](https://cybersectools.com/categories/tip)
- Vendor: [Filigran](https://cybersectools.com/companies/filigran)
- Deployment: Hybrid
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Commercial (contact sales)
- Features: 10 listed
- Website: filigran.io

The full feature and integration lists are on the page for signed-in visitors.

## Where it ranks

Filigran OpenCTI is not a pick on the current [Best Threat Intelligence Platform Solutions for Business](https://cybersectools.com/shortlists/best-threat-intelligence-platforms).

## Filigran OpenCTI FAQ

### What is Filigran OpenCTI?

Filigran OpenCTI is a product by Filigran in the Threat Intel Platforms category. It covers Case Management, MITRE ATT&CK and Open Source.

### What is the pricing for Filigran OpenCTI?

Filigran OpenCTI is a commercial product. For pricing, visit https://filigran.io/products/opencti or contact Filigran.

### What are alternatives to Filigran OpenCTI?

Alternatives to Filigran OpenCTI listed on CybersecTools:

1. [Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/tools/hudson-rock-cybercrime-intelligence-tools) - Cybercrime intelligence tools for searching compromised credentials from infostealers (Free)
2. [EclecticIQ Intelligence Center](https://cybersectools.com/tools/eclecticiq-intelligence-center) - Threat intelligence platform for collecting, analyzing, and sharing CTI data (Commercial)
3. [ThreatBook Advanced Threat Intelligence (ATI)](https://cybersectools.com/tools/threatbook-advanced-threat-intelligence-ati) - Enterprise threat intelligence platform with APAC focus and adversary tracking (Commercial)
4. [Group-IB Threat Intelligence Platform](https://cybersectools.com/tools/group-ib-threat-intelligence-platform) - Enterprise threat intelligence platform for proactive threat detection (Commercial)
5. [Threat Intelligence Platform](https://cybersectools.com/tools/threat-intelligence-platform) - Converts unstructured OSINT & darknet signals into structured STIX 2.1 threat intelligence (Commercial)

Compare all Filigran OpenCTI alternatives at [https://cybersectools.com/alternatives/filigran-opencti](https://cybersectools.com/alternatives/filigran-opencti)

### What deployment and organization size does Filigran OpenCTI fit?

Filigran OpenCTI is available as cloud or on-premises (hybrid). It is listed for small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Filigran for pricing and support terms.

## Compare Filigran OpenCTI with similar solutions

- [Filigran OpenCTI vs Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/compare/filigran-opencti-vs-hudson-rock-cybercrime-intelligence-tools)
- [Filigran OpenCTI vs EclecticIQ Intelligence Center](https://cybersectools.com/compare/eclecticiq-intelligence-center-vs-filigran-opencti)
- [Filigran OpenCTI vs ThreatBook Advanced Threat Intelligence (ATI)](https://cybersectools.com/compare/filigran-opencti-vs-threatbook-advanced-threat-intelligence-ati)

All alternatives to Filigran OpenCTI: [/alternatives/filigran-opencti](https://cybersectools.com/alternatives/filigran-opencti)

---

Source: https://cybersectools.com/tools/filigran-opencti

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Filigran OpenCTI and Filigran: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md