--- title: OpenCTI by Filigran Reviews meta\_title: 'OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 47 reviews by the users' company size, role or industry to find out how OpenCTI by Filigran works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 47 scale: '5' date\_modified: '2026-08-07' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- ### OpenCTI by Filigran Pros and Cons: Top 5 Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users commend the **ease of use** of OpenCTI, enabling seamless integration and efficient threat analysis from day one. [(18 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2030927&qs=pros-and-cons#reviews) Users praise OpenCTI's **powerful automation and flexibility** , facilitating actionable intelligence and enhancing team collaboration. [(18 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2030929&qs=pros-and-cons#reviews) Users commend the **excellent customer support** of OpenCTI, highlighting their eagerness to assist and improve experiences. [(11 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2053425&qs=pros-and-cons#reviews) Users praise the **seamless integrations** of OpenCTI, enhancing their ability to centralize and utilize diverse data sources. [(10 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2078359&qs=pros-and-cons#reviews) Users value the **strong integration capabilities** of OpenCTI, enhancing threat intelligence and response workflows effectively. [(9 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2030926&qs=pros-and-cons#reviews) Users find the **graphing and dashboard limitations** hinder flexibility and overall effectiveness of OpenCTI's features. [(6 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2326987&qs=pros-and-cons#reviews) Users find the **complexity of outputs and workflows** challenging, impacting effective application and overall user experience. [(5 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2326648&qs=pros-and-cons#reviews) Users often face **poor customer support** , resulting in challenges with connector quality and documentation issues. [(4 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2078346&qs=pros-and-cons#reviews) Users report **poor documentation** , making it challenging to effectively utilize OpenCTI and its features. [(4 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2078311&qs=pros-and-cons#reviews) Users find the **dashboard limitations** frustrating, with restricted displays and limited customization options affecting usability. [(3 mentions)](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2327191&qs=pros-and-cons#reviews) ### 5 Pros or Advantages of OpenCTI by Filigran ##### 1. Ease of Use Users commend the **ease of use** of OpenCTI, enabling seamless integration and efficient threat analysis from day one. [ See 18 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2030927&qs=pros-and-cons#reviews) See Related User Reviews JD Jeroen d. Enterprise (\> 1000 emp.) 5.0/5 "OpenCTI: The Threat Intelligence Platform That Lets Us Focus on Intelligence" What do you like about OpenCTI by Filigran? The ability for as a team to use OpenCTI to create an automated feedback loop between our CTI team and the SOC is really powerful. When our SOC collea CP Cody P. 4.0/5 "Centralized Threat Intel with Some Setup Challenges" What do you like about OpenCTI by Filigran? I really appreciate OpenCTI by Filigran for its open-source OSINT focus and community mentality. The playbook and dashboard functionality are particul ##### 2. Features Users praise OpenCTI's **powerful automation and flexibility** , facilitating actionable intelligence and enhancing team collaboration. [ See 18 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2030929&qs=pros-and-cons#reviews) See Related User Reviews JD Jeroen d. Enterprise (\> 1000 emp.) 5.0/5 "OpenCTI: The Threat Intelligence Platform That Lets Us Focus on Intelligence" What do you like about OpenCTI by Filigran? The ability for as a team to use OpenCTI to create an automated feedback loop between our CTI team and the SOC is really powerful. When our SOC collea CP Cody P. 4.0/5 "Centralized Threat Intel with Some Setup Challenges" What do you like about OpenCTI by Filigran? I really appreciate OpenCTI by Filigran for its open-source OSINT focus and community mentality. The playbook and dashboard functionality are particul ##### 3. Customer Support Users commend the **excellent customer support** of OpenCTI, highlighting their eagerness to assist and improve experiences. [ See 11 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2053425&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "OpenCTI SaaS is a fantastic product and our support team is even better!" What do you like about OpenCTI by Filigran? OpenCTI is an extremely versatile tool and I'm absolutely loving my experience with OpenCTI SaaS right now. Although the tool is great, I must say o ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.5/5 "Powerful CTI platform with wide range of features" What do you like about OpenCTI by Filigran? The platform offers a wide range of features corresponding to CTI variable needs and is very powerful to collect, store, and export intelligence. The ##### 4. Integrations Users praise the **seamless integrations** of OpenCTI, enhancing their ability to centralize and utilize diverse data sources. [ See 10 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2078359&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Small-Business (50 or fewer emp.) 4.5/5 "Eye-Catching OpenCTI Interface with Strong Integrations and Knowledge Linking" What do you like about OpenCTI by Filigran? The OpenCTI interface, functions and integration are nice, with Knowledge function which can link up with data sources are eye catching. ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "Comprehensive Features and Flexible Integration Options" What do you like about OpenCTI by Filigran? Comprehensive feature set even in the community version. Ability to try before you buy. Great bi-directional integration with many types of sources ##### 5. Integration Capabilities Users value the **strong integration capabilities** of OpenCTI, enhancing threat intelligence and response workflows effectively. [ See 9 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2030926&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Small-Business (50 or fewer emp.) 4.5/5 "Eye-Catching OpenCTI Interface with Strong Integrations and Knowledge Linking" What do you like about OpenCTI by Filigran? The OpenCTI interface, functions and integration are nice, with Knowledge function which can link up with data sources are eye catching. ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "Comprehensive Features and Flexible Integration Options" What do you like about OpenCTI by Filigran? Comprehensive feature set even in the community version. Ability to try before you buy. Great bi-directional integration with many types of sources ### 5 Cons or Disadvantages of OpenCTI by Filigran ##### 1. Feature Limitations Users find the **graphing and dashboard limitations** hinder flexibility and overall effectiveness of OpenCTI's features. [ See 6 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2326987&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Highly Customizable Platform That Still Keeps Everything Consistent" What do you dislike about OpenCTI by Filigran? There are a few features that don’t necessarily work as expected, or that feel limited in ways that can be distinctly annoying to work around. I notic ![A L.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "A L.") AL A L. Small-Business (50 or fewer emp.) 5.0/5 "good platform for data collection and CTI work" What do you dislike about OpenCTI by Filigran? it could be a bit more flexible with the graphing functionality ##### 2. Complexity Users find the **complexity of outputs and workflows** challenging, impacting effective application and overall user experience. [ See 5 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2326648&qs=pros-and-cons#reviews) See Related User Reviews JD Jeroen d. Enterprise (\> 1000 emp.) 5.0/5 "OpenCTI: The Threat Intelligence Platform That Lets Us Focus on Intelligence" What do you dislike about OpenCTI by Filigran? The technical overhead of self-hosting can be overwhelming. We ran our own OpenCTI instance for about a year, and while it gave us valuable insight in ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") I Verified User Enterprise (\> 1000 emp.) 4.0/5 "Excellent Data Structuring & Visualization for Strategic and Operational Work" What do you dislike about OpenCTI by Filigran? A little complicated in terms of the outputs and possibilities of the dashboards. ##### 3. Poor Customer Support Users often face **poor customer support** , resulting in challenges with connector quality and documentation issues. [ See 4 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2078346&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Fast evolving platform with expected growing pains understands CTI analysis and industry standards" What do you dislike about OpenCTI by Filigran? Growing pains with a fast growing startup. Inconsistent customer success experience. Inconsistent adoption of STIX standard across different connector ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") I Verified User Small-Business (50 or fewer emp.) 5.0/5 "Constantly Improving Platform with Excellent Support" What do you dislike about OpenCTI by Filigran? Dislike is too strong of a word, but I struggle with connecting the documentation to my current challenge. As expected, some fiddling is expected, but ##### 4. Poor Documentation Users report **poor documentation** , making it challenging to effectively utilize OpenCTI and its features. [ See 4 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2078311&qs=pros-and-cons#reviews) See Related User Reviews CP Cody P. 4.0/5 "Centralized Threat Intel with Some Setup Challenges" What do you dislike about OpenCTI by Filigran? Some of the feature support is unclear and we've found initial documentation gaps that slow down adoption while we build experience or read between th ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") I Verified User Small-Business (50 or fewer emp.) 5.0/5 "Constantly Improving Platform with Excellent Support" What do you dislike about OpenCTI by Filigran? Dislike is too strong of a word, but I struggle with connecting the documentation to my current challenge. As expected, some fiddling is expected, but ##### 5. Dashboard Issues Users find the **dashboard limitations** frustrating, with restricted displays and limited customization options affecting usability. [ See 3 mentions ](https://www.g2.com/products/opencti-by-filigran/reviews?filters%5Bsentiment_snippet%5D=2327191&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") I Verified User Enterprise (\> 1000 emp.) 4.0/5 "Excellent Data Structuring & Visualization for Strategic and Operational Work" What do you dislike about OpenCTI by Filigran? A little complicated in terms of the outputs and possibilities of the dashboards. ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Highly Customizable Platform That Still Keeps Everything Consistent" What do you dislike about OpenCTI by Filigran? There are a few features that don’t necessarily work as expected, or that feel limited in ways that can be distinctly annoying to work around. I notic KG Kieran G. Information Security & Third Party Assurance Mid-Market (51-1000 emp.) 7/21/2026 "Friendly, Expert Onboarding and a Truly Beneficial Platform" 5/5 What do you like best about OpenCTI by Filigran? From the initial call through onboarding and the bi-weekly catch-ups, the whole team has been super friendly and helpful. The SMEs are incredibly knowledgeable about the platform. There was an initial learning curve when I first started using the platform, but once you’re up to speed, it becomes a very beneficial tool for our business. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? Can't fault it the tool when you are up to speed it works really well Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? Currently, we use the tool mainly for vulnerability management. It highlights threats to our organisation, which allows us as analysts to triage issues quickly and make sure we’re not exposed. Overall, it saves a lot of time and effort compared with relying on OSINT. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Seller invite ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") AF Verified User in Financial Services Mid-Market (51-1000 emp.) 7/14/2026 "OpenCTI Centralizes Threat Intelligence with Strong STIX/TAXII Integrations and Responsive Support" 4.5/5 What do you like best about OpenCTI by Filigran? OpenCTI provides a good interface for exploring relationships between threat intelligence objects, while its extensive STIX/TAXII support and connectors make integration with existing CTI feeds and data easy. The platform offers good value by centralizing intelligence into a single knowledge base, and its ability to automate helps reduce manual effort. Filigran's support team has been responsive throughout onboarding and deployment. Regular cadence calls helps to highlight new updates to the platform or issues to be solved. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? OpenCTI has a steep learning curve due to its rich data model, numerous features and administrative roles and permissions. New users may initially find the interface and features overwhelming, particularly during the initial deployment and configuration phase. That said, Filigran offers comprehensive training courses and regular cadence calls that helps users understand the platform and adopt best practices. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? OpenCTI has enabled us to centralize threat intelligence from multiple sources into a single platform, eliminating the need to manually correlate information across different tools. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Seller invite JD Jeroen d. Senior Security Analyst - CTI Enterprise (\> 1000 emp.) 2/16/2026 "OpenCTI: The Threat Intelligence Platform That Lets Us Focus on Intelligence" 5/5 What do you like best about OpenCTI by Filigran? The ability for as a team to use OpenCTI to create an automated feedback loop between our CTI team and the SOC is really powerful. When our SOC colleagues need more context or want us to investigate something further, OpenCTI automatically captures those RFIs and routes them back to us. This bidirectional flow makes our intelligence actually actionable and keeps everyone connected - something that's genuinely hard to find in other platforms. What makes this work so well is that OpenCTI handles the full intelligence spectrum. As I often tell my team: "Higher management has an Threat Intel question, we turn to OpenCTI for answers." Whether it's strategic assessments, tactical deep-dives, or operational IOCs, we can work through the Pyramid of Pain and deliver what's needed. The platform is flexible enough to fit exactly how we work, but solid enough that it just works from day one. That means we spend our time on threat analysis instead of platform administration, which is exactly what we need." Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? The technical overhead of self-hosting can be overwhelming. We ran our own OpenCTI instance for about a year, and while it gave us valuable insight into how the platform works technically, which actually helped us use it more effectively. The maintenance, updates, and infrastructure management required significant attention. That's time we'd rather spend on threat analysis. To be clear, this isn't a criticism of OpenCTI itself. Any complex platform has this challenge when you self-host. We ultimately made the decision to migrate to Filigran's hosted OpenCTI platform, and it's been the right call. We kept all the power and capabilities of OpenCTI without the operational hassle. For teams that want to focus on intelligence work rather than platform administration, I'd definitely recommend considering the hosted option from the start. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? OpenCTI solved several critical problems we were facing. We previously had threat intelligence scattered across multiple tools and sources, with manual processes for ingestion and correlation. Our old TI platform simply didn't deliver what it promised, and we struggled to provide timely, actionable intelligence to our SOC and management. OpenCTI gave us a way to centralize and correlate everything. Now all our threat data, regardless of source, is in one place and properly contextualized and enriched. The biggest benefit has been enabling our SOC's detection and response capabilities. OpenCTI lets us transform raw threat data into intelligence that's actually relevant to our organization's threat landscape. The automated feedback loop means our SOC can quickly request additional context when needed, which has cut our average response time to RFIs by roughly 60%. For our stakeholders (from CISOs to Directors), OpenCTI enables us to deliver proper, actionable intelligence based on actual threats to our organization. We've increased our intelligence product output, while spending less time on tool- and platform administration. Whether it's a strategic briefing for management or operational IOCs for the SOC, OpenCTI gives us the capability to deliver what's needed faster and with better quality. The platform has transformed us from struggling with tools to actually doing the intelligence work we're meant to do. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Jonathan C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jonathan C.") JC Jonathan C. Développeur logiciels Enterprise (\> 1000 emp.) 7/24/2026 "Scalable, Clear Platform with Strong Integrations and Excellent Support" 5/5 What do you like best about OpenCTI by Filigran? The scalability and clarity of information within the platform. UI/UX is fine. A lot of integration for an MSSP : for example SIEM or BAS. No opinion on the price by my side. Global support, onboarding and human proximity are really appreciated. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? Not seen anything disliked at the moment. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? Data harmonization and reporting of threat data in various usable formats Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Seller invite ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") AC Verified User in Computer & Network Security Small-Business (50 or fewer emp.) 7/28/2026 "A powerful tool for managing, automating, and modeling cyber threat intelligence" 4.5/5 What do you like best about OpenCTI by Filigran? The ability to ingest and correlate data presented through an investigative map makes it possible to visualize and analyze virtually any type of threat. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? In certain advanced scenarios, the tool’s power can also become a weakness, since it demands a high level of expertise for more complex configurations and for creating automated tasks. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? OpenCTI has helped us move away from manual work toward a more streamlined approach to our threat intelligence and monitoring activities, whether we’re dealing with vulnerabilities, IoCs, or incidents. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Seller invite ![Verified User in Construction](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Construction") AC Verified User in Construction Enterprise (\> 1000 emp.) 7/29/2026 "Centralization, sharing, and capitalization of Threat Intelligence" 4/5 What do you like best about OpenCTI by Filigran? I particularly appreciate the power and flexibility of OpenCTI. The platform allows for effectively structuring CTI information while remaining highly adaptable to different use cases. This tool truly promotes the capitalization of events and the sharing of information. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? Some connectors are not yet perfectly functional, particularly the connector to MISP. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? By enriching incidents with CTI context and preserving the history of investigations, we improve the quality of analyses and accelerate incident response. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Seller inviteAI Translated ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") UF Verified User in Financial Services Enterprise (\> 1000 emp.) 2/5/2026 "Fast evolving platform with expected growing pains understands CTI analysis and industry standards" 4.5/5 What do you like best about OpenCTI by Filigran? Adherence to industry standards such as MITRE and STIX. Ability to quickly pivot between related threats and reporting. Flexibility to integrate existing workflows and automate using visual playbooks. Regular feature updates. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? Growing pains with a fast growing startup. Inconsistent customer success experience. Inconsistent adoption of STIX standard across different connectors introducing false or fragmented data. Despite this there are clear indications of progress being made in these areas. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? OpenCTI is a night and day experience compared to our old "industry leading" Threat Intel Platform (TIP) that had become complacent and stagnated. Using OpenCTI we have been able to integrate multiple analysis and escalation workflows that previously lived outside our TIP. Where we had to wait years for requested functionality to be implemented in our last TIP we have had several feature requests already completed in the first year of contract with Filigran. We now have a better visibility of the threats our organization is facing and how they interlink. While STIX adoption could be improved with several of our essential connectors what we already have has allowed better pivoting between named threats and related reporting. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Automotive](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Automotive") IA Verified User in Automotive Enterprise (\> 1000 emp.) 7/29/2026 "Seamless Multi-Report Connectivity in One Place" 5/5 What do you like best about OpenCTI by Filigran? The platform connects to multiple reports, which makes it much easier to work across different report sources and manage information from each one in a single place. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? I’d appreciate having more connectors available for the ticketing platform. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? Allowing us to cover to gaps that IOCs are only using paid source. Now we are able to integrate opensource IOC to our EDR Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Seller invite CP Cody P. 2/13/2026 "Centralized Threat Intel with Some Setup Challenges" 4/5 What do you like best about OpenCTI by Filigran? I really appreciate OpenCTI by Filigran for its open-source OSINT focus and community mentality. The playbook and dashboard functionality are particularly high-value for our team, as they free us up to do high-level analysis instead of getting bogged down with automating and coding. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? Some of the feature support is unclear and we've found initial documentation gaps that slow down adoption while we build experience or read between the lines. Additionally, some features demo nicely in the test environment examples or make sense at a high level, but when implementing in a real-world environment, there are technical grey areas and significant integration effort needed to get the OpenCTI resources to perform. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? We use OpenCTI by Filigran for threat actor attribution, tracking, IOC ingestion, and it centralizes threat intelligence for investigation, curating our threat library, managing CVE exploitation visibility, and enriching our detection data. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Quentin F.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Quentin F.") QF Quentin F. CTI Analyst Enterprise (\> 1000 emp.) 10/16/2025 "Great Open-Source Platform with Many Connectors, but Commercial Integrations Need Work" 4.5/5 What do you like best about OpenCTI by Filigran? From a technical standpoint, It's open-source, meaning that you have the possibility to contribute to it easily. Then, the number of connectors for enrichers, external sources are very varied, meaning that a lot of external sources are easy to integrate. The customer support is responsive, efficient, and mostly knowledgeable about their product. Review collected by and hosted on G2.com. What do you dislike about OpenCTI by Filigran? Even though there are a lot of connectors, most of the ones for commercial sources have not been prooftested (enough?) before deployment, which is a hassle when you are a paying customer for the source and opencti, and you end up with a poor result on the platform. In that instance, incentivising Filigran to improve the connectors is quite difficult and it takes a long time to get any improvement made. Lastly, the pycti library could benefit from more thorough documentation. To use it properly, we often need to read its source code to see available methods and their arguments, which is not normal. Review collected by and hosted on G2.com. What problems is OpenCTI by Filigran solving and how is that benefiting you? CTI is much more than disseminating indicators, and Filigran clearly understood that when building OpenCTI. It is a powerful tool that helps correlating, enriching, and simply using multiple CTI sources at the different levels (Operational, Strategical, Tactical). In addition, even though we are going in a direction where STIX/TAXII is the CTI standard, many sources still rely on their private API to disseminate intel. For that purpose, OpenCTI builds custom connectors that clearly contribute to making CTI more accessible. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ## Top-Rated Alternatives [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(441) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ ![Cloudflare Application Security and Performance](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cloudflare Application Security and Performance") Cloudflare Application Security and Performance 4.5/5(698) ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) [ ![Check Point Next Generation Firewalls (NGFWs)](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Check Point Next Generation Firewalls (NGFWs)") Check Point Next Generation Firewalls (NGFWs) 4.5/5(595) ](https://www.g2.com/products/check-point-next-generation-firewalls-ngfws/reviews) [ View All Alternatives ](https://www.g2.com/products/opencti-by-filigran/competitors/alternatives) ##### Categories on G2 [Incident Response](https://www.g2.com/categories/incident-response)[Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Unified Threat Management (UTM)](https://www.g2.com/categories/unified-threat-management-utm) ##### Explore More [UpContent vs BuzzSumo vs Feedly for a content team comparing content curation tools that need hashtag aggregation and platform-specific features to work reliably at scale: which is worth building a curation workflow around?](https://www.g2.com/discussions/upcontent-vs-buzzsumo-vs-feedly-for-a-content-team-comparing-content-curation-tools-that-need-hashtag-aggregation-and-platform-specific-features-to-work-reliably-at-scale-which-is-worth-building-a-curation-workflow-around)[Which encryption software combines email encryption with secure file sharing capability for teams?](https://www.g2.com/discussions/which-encryption-software-combines-email-encryption-with-secure-file-sharing-capability-for-teams)[Which commenting systems avoid frequent bugs and integrate smoothly without disrupting reader experience?](https://www.g2.com/discussions/which-commenting-systems-avoid-frequent-bugs-and-integrate-smoothly-without-disrupting-reader-experience%20) [what are digital experience platforms](https://www.g2.com/discussions/what-are-digital-experience-platforms-help-needed)[Which managed IoT services tools deliver strong implementation support for large enterprise deployments?](https://www.g2.com/discussions/which-managed-iot-services-tools-deliver-strong-implementation-support-for-large-enterprise-deployments)[Pros and Cons Details](https://www.g2.com/products/opencti-by-filigran/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)