OpenCTI
OpenCTI is an open-source threat intelligence platform used to store and link cyber knowledge, free under its own Apache 2.0 Community Edition.
0 upvotes · 0 downvotes
No ratings yet
- Category
- Threat Intelligence
- Pricing
- Freemium
- Platforms
- LinuxWindowsmacOS
- License
- Open source
- Reviewed
- Last reviewed 3 October 2026
What it is
A platform for threat intelligence knowledge and observables, and for the links between them. Filigran publishes a free Community Edition and a paid Enterprise Edition, including a hosted service.
What it helps with
Keeping reports and indicators in one library and tracing how they relate. You can run the Community Edition yourself with Docker or Kubernetes.
Who it's for
Teams that keep a threat intelligence library. When the job is sharing indicators with other groups, MISP is the closer fit.
Worth knowing
Enterprise can be self-hosted, including in air-gapped environments, or used as Filigran's hosted service. It is also on the AWS and Microsoft Azure marketplaces.
Is the Enterprise Edition open source?
No. Only the Community Edition is Apache 2.0. Enterprise has its own commercial license.
Is the hosted service free?
No. Hosting is the Enterprise edition. Community Edition is free to run yourself. Docker setup is documented for Linux, Windows, and macOS.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.