OpenCTI by Filigran Reviews & Product Details

From a technical standpoint, It's open-source, meaning that you have the possibility to contribute to it easily. Then, the number of connectors for enrichers, external sources are very varied, meaning that a lot of external sources are easy to integrate.

The customer support is responsive, efficient, and mostly knowledgeable about their product. Review collected by and hosted on G2.com.

Even though there are a lot of connectors, most of the ones for commercial sources have not been prooftested (enough?) before deployment, which is a hassle when you are a paying customer for the source and opencti, and you end up with a poor result on the platform.

In that instance, incentivising Filigran to improve the connectors is quite difficult and it takes a long time to get any improvement made.

Lastly, the pycti library could benefit from more thorough documentation. To use it properly, we often need to read its source code to see available methods and their arguments, which is not normal. Review collected by and hosted on G2.com.

I greatly appreciate the ability of OpenCTI by Filigran to integrate with a multitude of other tools thanks to its open-source connectors. This allows for smooth interconnection and makes the platform extremely versatile. The automation features, including playbooks, are a major asset, facilitating automated processing and enrichment of notifications as well as the management of the platform's observables. Moreover, the installation and migration were simple and well-managed experiences, making the transition to OpenCTI very pleasant. The interconnection with more than fifty connectors, partly developed by our company or from the community, strengthens our cyber ecosystem. The quality of service is also notable and essential for us, which encourages us to continue using and renewing our trust in OpenCTI. This is confirmed by the fact that I give a score of 9.5 out of 10 regarding the likelihood of recommending OpenCTI by Filigran. Review collected by and hosted on G2.com.

. Review collected by and hosted on G2.com.

Previous Response: Thanks to OpenCTI, we can now use the platform to manage data related to our threat actors, but also to centralize indicators that will be disseminated via our CTI program. We also make extensive use of the relationship visualization features and the STIX 2.1 data model, which allow us to map every piece of information related to our investigations. Another strong point is the fine-grained management of access rights across organizations, groups, and custom markings. Review collected by and hosted on G2.com.

There isn't much that I dislike about the platform, actually. Review collected by and hosted on G2.com.

I really appreciate the ability to manage all intelligence in a centralized platform, which allows for seamless enrichment of any segment or indicator. The integration capabilities offered by the product are excellent.

Additionally, I truly value the company’s approach and the support provided by the team, they are always helpful and guide us step-by-step to improve how we use the platform. This kind of support is extremely important to us! Review collected by and hosted on G2.com.

Sometimes certain features or implementations can be a bit too complex, which makes them challenging to apply effectively. Review collected by and hosted on G2.com.

Comprehensive feature set even in the community version. Ability to try before you buy. Great bi-directional integration with many types of sources to serve many intelligence use cases. Self hosted option gives flexibility when it comes to sensitivity requirements or compliance requirements. Community and response to bugs/issues on Github is highly responsive. Review collected by and hosted on G2.com.

Raw platform contains no inclusive data sources that leaves Enterprise pricing feeling expensive. Community version is obviously a mitigating factor to this at a loss of the enterprise features. Review collected by and hosted on G2.com.

It's Open Source and flexible. Has so many great features (impossible to mention one-by-one) and they help push CTI best practices forward. They are easy to integrate with other CTI vendors and that helps so much. Review collected by and hosted on G2.com.

I don't really have any complaints. Even their price point is reasonable, and the fact that they are a start-up it gives them the speed necessary on this fast-paced part of the industry. Review collected by and hosted on G2.com.

Broad community support for open source project allows for rapid development and product improvement. Platform is also very approachable from a user perspective and easy to understand. Review collected by and hosted on G2.com.

Case management system still needs fine-tuning to compete with dedicated case management platforms. Review collected by and hosted on G2.com.

Supportive and timely customer support.

The platform is easy to adopt and has transformed our way of working, helping to foster greater collaboration and awareness amongst multiple teams. The platform has become a core component of our work stream and is used daily.

Furthermore, OpenCTI supports integrations with multiple tools core to our security function, with support from the OpenCTI team to facilitate implementation. Review collected by and hosted on G2.com.

The platform often has minor bugs and the user interface could be better Review collected by and hosted on G2.com.

OpenCTI allows us to centralize all the platforms we are using, and create overviews we were unable to do before. The Customer support is great, they are very eager to help. The Python library also allows us to write integrations quite easily. The goal is to move as much to this platform and start using it every day. Review collected by and hosted on G2.com.

The dashboards show a lot of potential, but currently they are quite limited in terms of what can be displayed. It would be very helpful if we could add custom columns using GraphQL queries.

Additionally, it would be useful to have support for adding subnets as infrastructures that we can set alerts on, such as triggering alerts for any IP within a subnet. At the moment, we have to resolve several /15 or larger networks individually, which makes the platform feel cluttered and takes up unnecessary storage. Review collected by and hosted on G2.com.

OpenCTI is at the heart of our cyber intelligence and we therefore use it daily. It is a tool that is very easy to use with many features. The support, which we regularly request, is also responsive and knows how to take our priorities into account. Review collected by and hosted on G2.com.

There are still some minor improvements to be made, particularly in terms of UX. Review collected by and hosted on G2.com.