What is OpenCTI used for?

OpenCTI is an open-source cyber threat intelligence platform for organizing and sharing threat data. It is a good fit for cutting threat-hunting time, prioritizing and fixing exploitable vulnerabilities, and tabletop exercises and security posture evaluation.

Is OpenCTI open source?

Yes. OpenCTI is open source under a custom licence. Its source code is on GitHub at OpenCTI-Platform/opencti and is written mainly in TypeScript.

Yes. OpenCTI is open source, so the software itself is free to use under the terms of its own licence.

Can I self-host OpenCTI?

Yes. OpenCTI can be self-hosted on your own server or infrastructure.

What is OpenCTI an alternative to?

OpenCTI is an open-source alternative to Recorded Future, Mandiant and Torq. Other open-source alternatives to Recorded Future include MISP and CRITs.

Is OpenCTI actively maintained?

Yes. The most recent commit to OpenCTI was on 13 October 2026, and the latest release is 7.261008.0, published on 9 October 2026. The project has 10k stars on GitHub.

OpenCTI: open-source alternative to Recorded Future

About OpenCTI

OpenCTI is an open-source platform for cyber threat intelligence, designed to help organizations organize, enhance, and share actionable threat information. It is part of the Filigran XTM platform, which also includes adversary simulation and risk management capabilities.

The platform is used by cybersecurity practitioners from individuals, enterprises, and government organizations. It aims to break silos and address exploitable risks by unifying threat intelligence, security validation, and remediation.

Key features

Cyber threat intelligence organization and dissemination
Adversarial exposure validation through simulated attack scenarios
Agentic AI orchestration layer for CTEM implementations
Playbooks, dashboards, payloads, prompts, agents, feeds, tools, and scenarios
Continuous exposure validation to prioritize exploitable vulnerabilities

Good fit for

Cutting threat-hunting time
Prioritizing and fixing exploitable vulnerabilities
Tabletop exercises and security posture evaluation

Built with: TypeScript tools
Tags: cyber threat intelligence; security; open source; threat management; adversary simulation

OpenCTI: questions and answers

What is OpenCTI used for?: OpenCTI is an open-source cyber threat intelligence platform for organizing and sharing threat data. It is a good fit for cutting threat-hunting time, prioritizing and fixing exploitable vulnerabilities, and tabletop exercises and security posture evaluation.
Is OpenCTI open source?: Yes. OpenCTI is open source under a custom licence. Its source code is on GitHub at OpenCTI-Platform/opencti and is written mainly in TypeScript.
Is OpenCTI free?: Yes. OpenCTI is open source, so the software itself is free to use under the terms of its own licence.
Can I self-host OpenCTI?: Yes. OpenCTI can be self-hosted on your own server or infrastructure.
What is OpenCTI an alternative to?: OpenCTI is an open-source alternative to Recorded Future, Mandiant and Torq. Other open-source alternatives to Recorded Future include MISP and CRITs.
Is OpenCTI actively maintained?: Yes. The most recent commit to OpenCTI was on 13 October 2026, and the latest release is 7.261008.0, published on 9 October 2026. The project has 10k stars on GitHub.