Mapping of data. deduplication, playbooks. Review collected by and hosted on G2.com.

Like other TIP applications, too much click, especially for data which is exactly the same among various objects.

ie: if i ingest a 3rd party report; the external reference will be the same for evertthing, from observables to relationships and report.

Same for the TLP sometimes. Review collected by and hosted on G2.com.

OpenCTI by Filigran already greatly excites our users. Thanks to the STIX data model, we can conduct research or produce information more easily, which is very interesting for various actors at the tactical, operational, or strategic level, as well as at the SOC level for activities like phishing. This allows us to produce KPIs, etc. The STIX data model represents threat data in the form of a graph, which is cutting-edge technology. It helps us create much more context simply than in structured relationships like MySQL. This model serves as a lever for us to produce context, enrichment, and correlation. It also allows us to make good use of our private information since we can correlate it with what we already have more easily. Review collected by and hosted on G2.com.

It is necessary to pay close attention to the sizing of the platform, otherwise there are issues. It is also a microservices platform, so the skills for the MCO (Maintenance in Operational Condition) are more important to mobilize. We would spend more on personnel to maintain it. Review collected by and hosted on G2.com.

The platform can be customized in many different ways to fit our needs, while still staying within guardrails that help keep everything consistent. Review collected by and hosted on G2.com.

There are a few features that don’t necessarily work as expected, or that feel limited in ways that can be distinctly annoying to work around. I notice this most in how some dashboards are restricted in what they can display, and in how information can be added to different cases. Many of these are things that are actively being addressed however and I'm excited to see the refinements. Review collected by and hosted on G2.com.

OpenCTI is an extremely versatile tool and I'm absolutely loving my experience with OpenCTI SaaS right now. Although the tool is great, I must say our OpenCTI support team has been my favorite part of this experience by far. Matt Griffin, Eric Ford, and Jason Murath have been absolutely phenomenal. Matt Griffin is very quick to respond, proactively lets us know when we're having issues with our OpenCTI instance before we even realize, and has continued to go above and beyond to ensure we're taken care of. Jason Murath is EXTREMELY knowledgeable in many different domains and has provided invaluable advice to help us operationalize OpenCTI according to our use cases. Eric Ford is also very knowledgeable and has been pivotal in ensuring our support tickets are taken care of in a timely manner. He grabs our support tickets almost immediately after I submit it them it seems and our migration to SaaS would not have gone as smoothly as it did without his support and dedication. Overall, we are beyond thrilled with the OpenCTI product and the treatment from the team (Matt, Jason, and Eric) has exceeded our expectations. Review collected by and hosted on G2.com.

It would be great if there was a quicker turnaround time from the developers with connector NFR's, but we at least have the ability to create custom connectors as a workaround. Adding a feature to the automation playbooks to create new STIX objects would be an amazing feature add too. Review collected by and hosted on G2.com.

I greatly appreciate the ability of OpenCTI by Filigran to integrate with a multitude of other tools thanks to its open-source connectors. This allows for smooth interconnection and makes the platform extremely versatile. The automation features, including playbooks, are a major asset, facilitating automated processing and enrichment of notifications as well as the management of the platform's observables. Moreover, the installation and migration were simple and well-managed experiences, making the transition to OpenCTI very pleasant. The interconnection with more than fifty connectors, partly developed by our company or from the community, strengthens our cyber ecosystem. The quality of service is also notable and essential for us, which encourages us to continue using and renewing our trust in OpenCTI. This is confirmed by the fact that I give a score of 9.5 out of 10 regarding the likelihood of recommending OpenCTI by Filigran. Review collected by and hosted on G2.com.

. Review collected by and hosted on G2.com.

Previous Response: Thanks to OpenCTI, we can now use the platform to manage data related to our threat actors, but also to centralize indicators that will be disseminated via our CTI program. We also make extensive use of the relationship visualization features and the STIX 2.1 data model, which allow us to map every piece of information related to our investigations. Another strong point is the fine-grained management of access rights across organizations, groups, and custom markings. Review collected by and hosted on G2.com.

There isn't much that I dislike about the platform, actually. Review collected by and hosted on G2.com.

I really appreciate the ability to manage all intelligence in a centralized platform, which allows for seamless enrichment of any segment or indicator. The integration capabilities offered by the product are excellent.

Additionally, I truly value the company’s approach and the support provided by the team, they are always helpful and guide us step-by-step to improve how we use the platform. This kind of support is extremely important to us! Review collected by and hosted on G2.com.

Sometimes certain features or implementations can be a bit too complex, which makes them challenging to apply effectively. Review collected by and hosted on G2.com.

Comprehensive feature set even in the community version. Ability to try before you buy. Great bi-directional integration with many types of sources to serve many intelligence use cases. Self hosted option gives flexibility when it comes to sensitivity requirements or compliance requirements. Community and response to bugs/issues on Github is highly responsive. Review collected by and hosted on G2.com.

Raw platform contains no inclusive data sources that leaves Enterprise pricing feeling expensive. Community version is obviously a mitigating factor to this at a loss of the enterprise features. Review collected by and hosted on G2.com.

It's Open Source and flexible. Has so many great features (impossible to mention one-by-one) and they help push CTI best practices forward. They are easy to integrate with other CTI vendors and that helps so much. Review collected by and hosted on G2.com.

I don't really have any complaints. Even their price point is reasonable, and the fact that they are a start-up it gives them the speed necessary on this fast-paced part of the industry. Review collected by and hosted on G2.com.

Broad community support for open source project allows for rapid development and product improvement. Platform is also very approachable from a user perspective and easy to understand. Review collected by and hosted on G2.com.

Case management system still needs fine-tuning to compete with dedicated case management platforms. Review collected by and hosted on G2.com.