4.6/5
G2 rating
seller rating, 49 reviews
Report
Should I Use Filigran (OpenCTI / XTM)?
Embrace a proactive approach with end-to-end cyber threat management, from anticipation to response.
Depends
DependsBuy if you run a staffed SOC or threat-intel function and want an open-source, self-hostable platform with strong ratings.
Credible open-source threat intel for staffed SOC teams; overkill and quote-only pricing for everyone else.
Confidence: Medium
$58M
Latest funding
Series C, October 2025
Yes
Free tier
open-source community edition
2022
Founded
Paris, France
Value for money
4
Free open-source core; paid tiers quote-only
Ease of use
3
Multiple Reddit threads on learning curve
Feature depth
4
End-to-end suite; GigaOm Radar Outperformer
Security posture
4
Publishes security page; open-source, auditable code
Pros
Cons
Gotchas
- highEnterprise pricing is quote-only via private AWS Marketplace offers; no list prices10
- mediumG2 lists 5 pricing tiers; expect a demo call to learn your actual cost²
- mediumOpen-source vs Enterprise feature split — check license gates before committing
- lowSaaS pricing basis undisclosed on the official page12
Best for
- SOC and threat-intel teams
- MSSPs managing multi-client intel
- Orgs wanting self-hosted open-source TIP
- Purple teams running attack simulations
Not for
- Small businesses with no dedicated security staff
- Teams wanting simple plug-and-play threat feeds
- Buyers who need published, transparent pricing
- Companies without analyst time to curate intel
Pricing
Community Edition
Free
- Open-source threat intel platform
- Self-hosted
Enterprise Edition
Not disclosed
- SaaS or self-hosted
- Support and enterprise features
Security
No known public vulnerabilities found in the sources reviewed.
What users say
Reddit threat-intel communities actively evaluate and debate OpenCTI as a TIP, and G2 reviewers rate Filigran 4.6/5.
Alternatives
Compare Filigran (OpenCTI / XTM) with each alternative.
MISP
Free open-source TIP; simpler but rougher around the edges.
Anomali
Commercial threat-intel rival; Filigran publishes its own comparison.
Filigran (OpenCTI / XTM) vs AnomaliDomainTools Iris
Investigation-focused intel tool, ranked alongside Filigran on PeerSpot.
Filigran (OpenCTI / XTM) vs DomainTools IrisFull analysis
Based on 20+ public sources; most review snippets were truncated, limiting verbatim user quotes. No named customer companies appeared in the evidence.
Sources
review
official
- Filigran Raises $58 Million in Series C Fundingsecurityweek.comnews
- OpenCTI maker Filigran raises $16Mtechcrunch.comnews
review
- Trying to Learn OpenCTI — Redditreddit.comreview
- OpenCTI Enterprise Edition — private AWS offeraws.amazon.comofficial
- OpenCTI Enterprise Editionfiligran.ioofficial
- Software as a Servicefiligran.ioofficial
- Product security pageopencti.iosecurity
- Filigran CVEs and Security Vulnerabilities — OpenCVEopencve.alliance.unm.edusecurity
- Filigran vs. Anomali: A Comparative Analysisfiligran.ioofficial
- DomainTools Iris vs Filigran comparisonpeerspot.comreview
- Filigran | Best Intelligence Powered Cybersecurity Platformawards.thehackernews.comnews
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.