CISO Tribune

Vendor comparison · 2 companies

AttackIQ vs Filigran

AttackIQ sells a platform that connects exposure signals, attack paths, and controls into a single decision layer. Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. CISO Tribune files both under Exposure prioritisation and CTEM and Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • AttackIQ
  • Filigran
AttackIQ vs Filigran: Products, Customers and Funding Compared
AttackIQAttackIQ sells a platform that connects exposure signals, attack paths, and controls into a single decision layer.attackiq.comFiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.io
What it sells
  • AVA OS[4]The operating system for CTEM, orchestrating specialized AI agents.
  • AttackIQ Enterprise[4][9]Continuous defense validation with custom adversary scenarios and program-level reporting.
  • AttackIQ Command Center[10]Centralizes exposure validation across teams, clients, and partners.
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
Categories
Headquarters
Los Altos, United States[3]Not stated on its pages
Founded
Not stated on its pages2022[2][3]
Ownership and funding
Not stated on its pagesPrivately held[6][13][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • July 30, 2026AttackIQ announced AVA Agentic OS, an agentic operating system intended to operationalize Continuous Threat Exposure Management.[16]
  • May 29, 2026AttackIQ announced a strategic partnership with Acumen Cyber, a cyber security service provider.[2]
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, AttackIQ sells mainly to security teams in enterprises, from Fortune 500 companies to mid-sized enterprises across industries. Its detection engineering pages describe a large healthcare system and a global financial institution as customers with detection validation needs. Its compliance pages target teams that test controls against frameworks such as NIST, CMMC, and PCI-DSS.From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.
Last verified
September 27, 2026October 7, 2026

Where they overlap

  • AttackIQ and Filigran are both filed under Exposure prioritisation and CTEM and Breach simulation and automated pen-testing.

Where they differ, field by field

  • AttackIQ's primary category is Exposure prioritisation and CTEM; Filigran's is Threat intelligence.
  • AttackIQ lists AVA OS, AttackIQ Enterprise and AttackIQ Command Center. Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
  • AttackIQ is headquartered in Los Altos, United States.
  • Filigran was founded in 2022.
  • Filigran is privately held.

What it sells: AttackIQ

What AVA OS does[4]
AVA OS orchestrates specialized AI agents that execute autonomous cybersecurity missions. The missions continuously validate defenses, break attack paths, and reduce threat debt.
What AttackIQ Enterprise does[4][9]
AttackIQ Enterprise offers custom adversary scenarios, automated workflows, and program-level reporting. AttackIQ describes it as a prescriptive service for selecting adversary tactics, techniques and procedures to run against cloud and on-premises security controls.
What AttackIQ Command Center does[10]
AttackIQ Command Center centralizes exposure validation across teams, clients, and partners. It manages deployments, users, agents, and integrations from a single control center. It supports the operating models of enterprises, MSSPs, and strategic partners.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

Questions about AttackIQ and Filigran

What do AttackIQ and Filigran sell?
AttackIQ sells AVA OS, AttackIQ Enterprise and AttackIQ Command Center. Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
Are AttackIQ and Filigran in the same category?
They share Exposure prioritisation and CTEM and Breach simulation and automated pen-testing. AttackIQ's primary category is Exposure prioritisation and CTEM and Filigran's is Threat intelligence.
Where are AttackIQ and Filigran headquartered?
AttackIQ is headquartered in Los Altos, United States.
When were AttackIQ and Filigran founded?
Filigran was founded in 2022.
Who owns AttackIQ and Filigran?
Filigran is privately held.
Who are AttackIQ and Filigran sold to?
From its own pages, AttackIQ sells mainly to security teams in enterprises, from Fortune 500 companies to mid-sized enterprises across industries. From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite.
What have AttackIQ and Filigran announced recently?
July 30, 2026: AttackIQ announced AVA Agentic OS, an agentic operating system intended to operationalize Continuous Threat Exposure Management. September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.

About AttackIQ

AttackIQ sells a platform that connects exposure signals, attack paths, and controls into a single decision layer. AttackIQ says the layer lets teams know what to fix, in what order, and prove that threat debt is going down.[1][4][6]

AttackIQ describes AVA OS as the operating system for CTEM. AVA OS orchestrates specialized AI agents that execute autonomous cybersecurity missions to continuously validate defenses, break attack paths, and reduce threat debt.[4]

The platform gives each role its own workspace. Role-specific workspaces surface the right signal, action, and proof for each operator, all backed by the same validated truth. AttackIQ Professional Services help customers stand up, operate, and scale a CTEM program that proves defense is improving.[6]

It works with Splunk, Microsoft Sentinel, Google Chronicle, Elastic Security, and QRadar, with more available via API. AttackIQ platform exposure features map the attack surface, model paths to critical assets, and prioritize by exploitability, reachability, and business value.[6][7]

Ready uses lightweight agents or test points that customers deploy and control. AttackIQ experts handle all testing and analysis based on the customer's priorities.[4][8]

AttackIQ Enterprise is aimed at continuous validation across the entire stack. AttackIQ Enterprise offers custom adversary scenarios, automated workflows, and program-level reporting. AttackIQ describes Enterprise as a prescriptive service that helps customers select adversary tactics, techniques and procedures to proactively run for cloud and on-premises security controls.[4][9]

AttackIQ Command Center centralizes exposure validation across teams, clients, and partners. Command Center supports the operating models of enterprises, MSSPs, and strategic partners. Its unified console manages deployments, users, agents, and integrations from a single control center. For third-party risk, AttackIQ sends lightweight, agentless emulation packages to vendors by email or API.[4][10][11]

AttackIQ organizes its solutions around specific jobs. For compliance, AttackIQ offers ongoing testing mapped to NIST, CMMC, PCI-DSS, and more. For control validation, AttackIQ says the aim is to validate that every control blocks, detects, and responds as it should. For exposure reduction, AttackIQ AEV validates which exposures actually matter so teams can prioritize what puts the business at real risk. For detection engineering, AttackIQ integrates validation into GitOps, CI/CD, and SOAR pipelines to automate rule testing.[4][12][13][14][15]

AttackIQ says it serves organizations from Fortune 500 companies to mid-sized enterprises across industries.[4][7][8][15]

AttackIQ on the record

Sources

AttackIQ full record

  1. [1]attackiq.comAttackIQ · attackiq.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Acumen Cyber and AttackIQ Partner to Continuously Validate Cyber Defences Against Real-World ThreatsAttackIQ · published May 29, 2026 · Tier A
  3. [3]ContactAttackIQ · attackiq.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Operating System for CTEM - AttackIQAttackIQ · undated page, accessed October 23, 2026 · Tier A
  5. [5]AttackIQ Platform Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 23, 2026 · Tier C
  6. [6]CTEM Platform - Continuous Threat Exposure Management - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  7. [7]AttackIQ Detection Rule Manager | AI Detection EngineeringAttackIQ · undated page, accessed November 3, 2026 · Tier A
  8. [8]Ready - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  9. [9]Enterprise - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  10. [10]Command Center - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  11. [11]Third Party Risk - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  12. [12]Compliance Optimization - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  13. [13]Security Control Validation - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  14. [14]Reduce Exposure - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  15. [15]Detection Engineering: Validate & Strengthen Security Controls | AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  16. [16]AttackIQ Launches AVA Agentic OSAttackIQ · published July 30, 2026 · Tier A
  17. [17]AttackIQ Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 3, 2026 · Tier C

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Spot a factual error? Request a correction.