shouldiuse.io

Categories

VERDICT

Filigran Review

Depends

Should I use Filigran?

Embrace a proactive approach with end-to-end cyber threat management, from anticipation to response. - filigran.io

· 1 month ago

Buy if you run a SOC or CTI function and want an open-source threat intelligence backbone with paid enterprise upgrades. Skip it if you're a small team without dedicated security analysts — you won't have the staff to operate it.

Confidence

Medium. Based on ~20 public sources: G2, PeerSpot, Reddit, SoftwareFinder, funding news, and Filigran's own pages.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo customer support data in sources
  • Security posture

Pricing

Free

Community (open-source)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Enterprise editionsCustom quote

Best for

  • SOC and CTI teams
  • MSSPs selling threat intel services
  • Public sector and large orgs
  • Teams wanting an open-source TIP

Not for

  • Small businesses without dedicated security staff
  • Solo IT admins who just need basic alerting
  • Buyers demanding transparent published pricing
  • Teams needing a battle-tested attack simulation tool

Gotchas - check before you buy

medium

Quote-only pricing means sales negotiation and unclear renewal costs.

medium

Community edition is free, but enterprise features sit behind 5 paid editions.

medium

OpenAEV is young — too few G2 reviews to judge reliability before committing.

low

Expect a real onboarding effort; even Reddit beginners ask how to use OpenCTI.

Pros and cons

Pros

  • 4.6/5 on G2 across 49 verified reviews
  • Open-source core with free self-hosted option
  • Named Outperformer in 2026 GigaOm Threat Intelligence Radar
  • Trusted by over 6,000 organizations globally
  • Users say it centralizes intelligence and offers good value

Cons

  • OpenAEV has too few G2 reviews to even rate
  • No public pricing; every quote is custom
  • Learning curve; Reddit users struggle with OpenCTI use cases
  • Only 1.0% mindshare in threat intel platforms per PeerSpot

Sources & method

- 14 sources - No known vulnerabilities found in the sources reviewed.

official x3review x8news x3

Key stats

  • Value for money: 4/5

    Rating

  • Free

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 4/5. Free open core; G2 users cite good value
  • Ease of use: 3/5. Reddit users report learning curve
  • Feature depth: 4/5. Threat intel plus attack simulation suite
  • Support quality. No customer support data in sources
  • Security posture: 3/5. Open-source transparency; no major issues found
  • 4.6/5 G2 rating 49 verified reviews
  • Custom quote Starting price No public pricing; 5 editions per G2
  • Yes Free tier Open-source core
  • $115M Total funding 4 rounds, incl. $58M Series C

Pricing

Community (open-source)

Free

  • Open-source OpenCTI threat intelligence
  • Self-hosted

Enterprise editions

Not disclosed

  • 5 pricing editions per G2
  • SaaS available via Azure/AWS Marketplace

Security

No known vulnerabilities found in the sources reviewed.

What users say

Users praise OpenCTI for centralizing threat intelligence at good value, but many report a genuine learning curve.

“The platform offers good value by centralizing intelligence”
G2, OpenCTI by Filigran reviews
“My organization is evaluating using OpenCTI as a TIP”
Reddit, r/threatintel
“Trying to Learn OpenCTI – Need Help Understanding Use Cases”
Reddit, r/threatintel

Alternatives

Compare Filigran with each alternative.

  • MISP

    Free open-source threat sharing platform; less polished, no sales process

  • Anomali ThreatStream

    Established enterprise TIP; Filigran publishes its own comparison

    Filigran vs Anomali ThreatStream
  • Recorded Future

    Commercial threat intelligence leader for funded security teams

  • vPenTest

    G2-listed alternative if you only want attack simulation

Companies that use it

  • Centrica
Full analysis

Based on ~20 public sources: G2, PeerSpot, Reddit, SoftwareFinder, funding news, and Filigran's own pages.

Solid open-source threat intel platform (4.6/5 G2) for security teams — overkill without a dedicated SOC.

Methodology

Based on ~20 public sources: G2, PeerSpot, Reddit, SoftwareFinder, funding news, and Filigran's own pages.

Read how a report is made.

Sources

  1. review
  2. review
  3. review
  4. review
  5. review
  6. review
  7. review
  8. news
  9. news
  10. news
  11. official
  12. official
  13. official
  14. review

Add this review to your site

This check for Filigran says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.