Open Source Threat Intelligence Becomes a Platform
Alan Shimel speaks with Julien Richard, co-founder and CTO of Filigran, about the company’s journey from OpenCTI to a broader threat management platform. Richard explains that OpenCTI began as an open source project built to solve a missing piece in threat intelligence. Over time, enterprise users asked for production support, advanced features and a company behind the technology.

That open source foundation still shapes Filigran’s approach. The company wants practitioners to test, use and improve the software before leaders adopt it at scale. Richard says value often starts with teams in the field, then moves upward as security leaders see which tools actually help analysts work better.
CTEM Needs Better Signal From Threat Intelligence
The conversation turns to CTEM and the gap between leadership expectations and practitioner reality. Richard says many security teams still spend too much time sorting through noise, false positives and fragmented tools. Agentic threat management can help only if it is grounded in high-quality threat knowledge and clear evidence.

Filigran’s approach starts with OpenCTI for threat intelligence, then connects that knowledge to validation and risk assessment. The goal is to move teams from reactive work to proactive, threat-informed defense. Instead of treating each tool or alert as a vertical problem, organizations can use intelligence to decide what matters most.
XTM One Brings Agents Into the Threat Loop
Richard also discusses XTM One, Filigran’s agentic layer for threat management. The platform is designed to orchestrate agents, skills and workflows across OpenCTI, OpenAEV and existing security tools. It gives teams control over the agentic loop, including human review, assessment and evaluation.

For organizations evaluating agentic threat management, the key issue is trust. Agents must enrich knowledge, generate scenarios, provide evidence and help prioritize action without removing human control. Richard argues that the larger opportunity is reducing wasted effort, improving analyst focus and helping teams spend time on threats that can actually affect the business.

Download the State of Threat Management Report https://filigran.io/ctem-market-survey-report/

For more information on the XTM One Platform https://filigran.io/platform/xtm-one/