Filigran

Filigran is a French cybersecurity software company that develops an open-source eXtended Threat Management (XTM) suite for security and crisis-management teams. The suite unifies cyber threat intelligence, adversary simulation and security validation, and remediation workflows so that organizations can identify which exposures are actually exploitable and act on them. Its core products are OpenCTI, a cyber threat intelligence platform for structuring, managing and disseminating threat knowledge and observables, and OpenAEV (previously presented as OpenBAS, an evolution of the earlier OpenEx exercise-planning tool), an adversarial exposure validation and breach-and-attack-simulation platform used for attack scenarios, stress tests and crisis exercises.

Around these platforms the company offers XTM One, an AI-native, agentic orchestration layer intended to automate continuous threat exposure management (CTEM) workflows across intelligence, validation and remediation, and XTM Hub, a community hub providing documentation, demos, integrations and pre-built content. Filigran also runs Filigran Academy, a free learning platform with OpenCTI and OpenAEV courses, badges and CTF challenges, and hosts THREAD, an in-person community conference. A third module, described in the Series C announcement as OpenGRC and on the company's milestone page as OpenCRQ, is under development to cover cyber risk quantification and prioritization.

Founding story

Filigran was created in September 2022 and co-founded by Samuel Hassine (CEO) and Julien Richard (CTO). Hassine had more than 15 years of experience in cyber threat intelligence and crisis management, previously serving as Director of Security Strategy at Tanium and head of Threat and Risk Analysis at ANSSI; Richard had more than 20 years managing product and engineering teams in data and AI software, previously VP of Engineering at YOOI and Director of Engineering at Axway.

Business model

Filigran distributes its core platforms as open source and monetizes through commercial offerings around them, including enterprise editions, support plans and professional services, plus a partner ecosystem of MSSPs, technology alliances and solution providers. Prospects enter via a free live demo or a booked personalized demo.

Commercial support plans and professional services alongside the open-source platforms; the Series C announcement cites strong customer demand translating into strong revenue growth, without disclosing revenue figures.

Traction

Reported use by more than 6,000 public and private organizations worldwide and 6,000+ cybersecurity practitioners; the open-source community grew from more than 4,300 members in October 2024 to 6,500+ Slack members, and the company states the community doubled in two years. Headcount passed 100 in April 2025 and the platform offers 400+ one-click integration deployments.

Latest developments

In October 2025 Filigran closed a $58M Series C led by Eurazeo Growth with Deutsche Telekom's T.Capital and existing investors Accel and Insight Partners, earmarked for international expansion, a third platform module for cyber risk quantification (OpenGRC/OpenCRQ) and an AI agent platform. XTM One, an AI-native platform for automating continuous threat exposure management, was launched in June 2026, and the company published survey findings in June 2026 and a State of Threat Management research report. Its inaugural THREAD community event is planned for 15 October 2026 in Paris.