Filigran: Redefining Threat-Informed Cybersecurity Through Open-Source Innovation
Published: 2025-11-17 | Author: VisionariesNetwork Team
Filigran is a rapidly expanding cybertech company headquartered in Paris and founded in 2022 by Samuel Hassine and Julien Richard. Built on an open-source philosophy, the company aims to transform how organisations anticipate, understand and respond to cyber threats. Its flagship platforms—OpenCTI for threat intelligence and OpenAEV for adversarial exposure validation—form the backbone of its eXtended Threat Management (XTM) vision, which integrates intelligence, simulation, validation, and response into one unified ecosystem.
Origins and Founding Vision
Filigran emerged from the founders’ experience within cybersecurity operations and intelligence communities, where fragmented tools and siloed data made threat-informed defence difficult. Their goal was to create a platform that breaks down these silos by offering an open-source, collaborative foundation. The early months of the company were marked by rapid iteration, close collaboration with early adopters, and an unwavering commitment to transparency, interoperability and community-driven development.
Evolution and Rapid Growth
From a small team in 2022, Filigran expanded quickly as global interest in open-source cybersecurity solutions grew. Its first major fundraising milestones included a seed round followed by a Series A that enabled expansion into North America and Asia-Pacific. Over the next two years, substantial follow-on funding allowed the company to scale its workforce, establish regional teams, and accelerate product innovation. This financial backing reflects strong confidence in Filigran’s ability to redefine how organisations manage cyber threats through intelligence-driven automation and validated resilience.
Core Technology and XTM Suite
The XTM suite lies at the heart of Filigran’s value proposition. OpenCTI provides a structured, interoperable system for aggregating and operationalising cyber threat intelligence. By integrating information from diverse sources and mapping it to established standards and frameworks, the platform supports analysts, SOC teams and security leaders in making timely, informed decisions.
Its companion platform, OpenAEV, extends this approach by simulating real attackers’ behaviour, validating defences and measuring exposure through continuous testing. The evolution from OpenBAS to OpenAEV reflects Filigran’s commitment to going beyond attack simulation toward dynamic, contextualised resilience assessment. These tools are enhanced with AI, which automates correlation, scenario generation and remediation recommendations to help teams move from insight to action faster.
Global Community and Ecosystem
One of Filigran’s distinguishing features is its strong, active international community. With thousands of contributors, analysts and practitioners, the ecosystem around OpenCTI and OpenAEV grows organically through events, shared modelling, integration development and knowledge exchange. This community-driven model not only accelerates the evolution of the platforms but also strengthens trust through transparency and reproducibility. Filigran further supports this ecosystem through initiatives such as the Filigran Academy, which offers structured learning paths, hands-on labs and collaborative forums for professionals to develop their skills.
International Expansion and Enterprise Adoption
As Filigran expanded globally, it attracted a diverse customer base that spans critical infrastructure, aerospace, government, retail, telecom and financial services. Its open architecture, combined with enterprise-grade editions for organisations requiring advanced features and support, makes it appealing both to highly mature cyber units and to teams building their first threat-intelligence or exposure-validation capabilities. Strategic investments and regional presence in the United States, Europe and Asia-Pacific have reinforced this momentum, enabling Filigran to respond to local regulatory environments and support customers across time zones.
Innovation and New Directions
Filigran continues to innovate aggressively, extending its XTM vision with upcoming platforms such as OpenGRC, which aims to unify governance, risk and compliance with threat-based risk scoring. The development of XTM One, an AI-native orchestration layer, represents the next stage of evolution: a single cockpit where intelligent agents assist analysts, automate repetitive workflows and translate threat intelligence into measurable defensive outcomes. These initiatives show Filigran’s ambition to become a comprehensive, threat-informed defence ecosystem rather than a traditional point-solution vendor.
Challenges and Future Outlook
Despite its strong growth, Filigran operates in an intensely competitive sector where established security vendors and emerging AI-driven platforms are all vying for relevance. Balancing commercial expansion with the stewardship of open-source projects will remain a delicate task. Ensuring interoperability across increasingly complex security stacks, maintaining long-term community trust, and demonstrating measurable ROI for enterprise clients are additional priorities. Nevertheless, Filigran’s momentum, investment backing and product vision position it well for further global influence.
Samuel Hassine, CEO and Co-Founder
“We provide open-source cybersecurity solutions covering threat intelligence management, breach and attack simulation, and cyber risk management.”
Browse our most recent publications
