As a Threat Intelligence Platform, OpenCTI offers valuable capabilities for managing cyber threat intelligence, particularly across tactical, technical, and strategic intelligence layers.
The strength of the platform lies in its powerful ability to ingest cyber threat intelligence through widely recognized frameworks such as STIX, TAXII, and MITRE ATT&CK. This enables seamless data sharing across a wide range of security tools (TIPs, EDR, SIEM, XDR, etc.).
A large number of data ingestion connectors are available, allowing me to centralize all intelligence within a single platform. Filigran, having developed this solution through an open-source approach, benefits from a broad community of internal and external contributors, which is quite unique in the market. This also allows Filigran to build its roadmap based on user feedback and to remain closely aligned with user needs. Review collected by and hosted on G2.com.
The platform is evolving rapidly to increase the number of connectors to third-party services. However, it is essential that the services provided through these connectors are equivalent to those offered directly by the third parties themselves.
For example, if a data connector I’m using does not provide the same level of information as a direct query to the third-party source, and I’m forced to access the third-party platform directly instead of relying solely on OpenCTI, then the connector loses its value. Review collected by and hosted on G2.com.
Validated through Google using a business email account
Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate.
