CISO Tribune

Vendor comparison · 2 companies

Cyble vs Filigran

Cyble sells a unified threat intelligence platform covering dark web monitoring, attack surface management and brand protection. Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Cyble
  • Filigran
Cyble vs Filigran: Products, Customers and Funding Compared
CybleCyble sells a unified threat intelligence platform covering dark web monitoring, attack surface management and brand protection.cyble.comFiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.io
What it sells
  • Cyble Hawk[3][5][12]A proactive cybersecurity investigation partner built for Govts, LEA, and National Security.
  • Cyble Titan[5][11]An endpoint security product with AI-native threat response.
  • Cyble Blaze AI[5][11]An agentic AI engine that hunts, reasons, and acts autonomously.
  • Cyble Odin[4][12]Internet scanning of 4 Billion+ IPs.
  • Cyble Strato[5][9]Cloud security posture management.
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
Categories
Headquarters
Cupertino, United States[1]Not stated on its pages
Founded
2020[1]2022[2][3]
Ownership and funding
Not stated on its pagesPrivately held[6][13][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 21, 2026Cyble signed a Memorandum of Understanding with the Cyber Security Council of the United Arab Emirates in Dubai.[16]
  • May 8, 2026Cyble was positioned as a Challenger in the 2026 Gartner Magic Quadrant for Cyberthreat Intelligence Technologies.[6]
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[7]
  • Gartner Peer Insights: listed, seen November 3, 2026[8]
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Cyble sells mainly to enterprises, governments, and critical infrastructure. Cyble describes banks, payment platforms, and digital finance providers as users. Cyble describes hospitals, health systems, and pharma enterprises as users. Cyble describes federal, state, and public institutions as users. Cyble describes enterprise SOCs and managed providers as users. Cyble says its Takedown Services scale from startups to large enterprises.From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.
Last verified
September 27, 2026October 7, 2026

Where they overlap

  • Threat intelligence is the primary category of both Cyble and Filigran.

Where they differ, field by field

  • Cyble is also filed under Digital risk protection and External attack surface management. Filigran is also filed under Breach simulation and automated pen-testing and Exposure prioritisation and CTEM.
  • Cyble lists Cyble Hawk, Cyble Titan, Cyble Blaze AI, Cyble Odin and Cyble Strato. Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
  • Cyble is headquartered in Cupertino, United States.
  • Cyble was founded in 2020. Filigran was founded in 2022.
  • Filigran is privately held.

How they differ

CISO Tribune files both Cyble and Filigran under Threat intelligence as the primary category, but their wider filings differ. CISO Tribune also files Cyble under Digital risk protection and External attack surface management. CISO Tribune files Filigran under Breach simulation and automated pen-testing and under Exposure prioritisation and CTEM. Cyble is headquartered in Cupertino, United States, and was founded in 2020. Filigran was founded in 2022 and is privately held.

Cyble sells a threat intelligence platform covering dark web monitoring, attack surface management and brand protection, along with Cyble Titan for endpoints, Cyble Strato for cloud security posture management and Cyble Odin for internet scanning. Its Cyble Blaze AI is the agentic AI engine that powers the Cyble platform. Filigran sells the XTM Platform, made up of OpenCTI for threat intelligence, OpenAEV for adversarial exposure validation and XTM One as the agentic AI layer. Filigran describes OpenCTI and OpenAEV as developed in the open with a 7,000+ member community.

Cyble describes its customers as enterprises, governments and critical infrastructure, including banks, hospitals, and federal, state and public institutions. Filigran says its users range from individuals to enterprises and government organizations. On September 21, 2026, Cyble signed a Memorandum of Understanding with the Cyber Security Council of the United Arab Emirates in Dubai. On June 9, 2026, Filigran announced XTM One, and on April 9, 2026, it announced the launch of its Japanese organization.

What it sells: Cyble

What Cyble Hawk does[3][5][12]
Cyble Hawk is a proactive cybersecurity investigation partner built for Govts, LEA, and National Security. Cyble describes a specialized platform protecting federal bodies with advanced threat detection.
What Cyble Titan does[5][11]
Cyble Titan is an endpoint security product. Cyble describes an agent-based endpoint security platform with AI-native threat response.
What Cyble Blaze AI does[5][11]
Cyble says its AI hunts, reasons, and acts autonomously within minutes, not hours. Blaze is the agentic AI engine that powers Cyble's platform. Every incident retrains Cyble Blaze AI.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

Questions about Cyble and Filigran

What do Cyble and Filigran sell?
Cyble sells Cyble Hawk, Cyble Titan, Cyble Blaze AI, Cyble Odin and Cyble Strato. Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
Are Cyble and Filigran in the same category?
Yes. Threat intelligence is the primary category of both on CISO Tribune.
Where are Cyble and Filigran headquartered?
Cyble is headquartered in Cupertino, United States.
When were Cyble and Filigran founded?
Cyble was founded in 2020. Filigran was founded in 2022.
Who owns Cyble and Filigran?
Filigran is privately held.
Who are Cyble and Filigran sold to?
From its own pages, Cyble sells mainly to enterprises, governments, and critical infrastructure. From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite.
What have Cyble and Filigran announced recently?
September 21, 2026: Cyble signed a Memorandum of Understanding with the Cyber Security Council of the United Arab Emirates in Dubai. September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.

About Cyble

Cyble sells a unified threat intelligence platform covering dark web monitoring, attack surface management and brand protection. Cyble says it watches the dark web and customers' attack surfaces, defends every endpoint, and tells teams which threats are aimed at them and what to do about them. Cyble says its architecture was built AI-native from the ground up. Cyble engineered AI-native systems from the ground up, designed to think and act like a defender.[9]

Cyble says it correlates open, deep and dark sources months ahead of exploit. Cyble correlates endpoint, identity and cloud telemetry into one timeline. Cyble Research & Intelligence Labs publishes threat intelligence, vulnerability research, case studies and expert analysis.

Cyble delivers attack surface management inside Cyble Vision, its AI-powered threat intelligence platform. Cyble Vision combines advanced monitoring, Agentic AI, and integration with Cyble Blaze AI to deliver actionable insights across the surface, deep, and dark web. Cyble Vision is designed for enterprises, governments, and critical infrastructure. Cyble Vision is used by organizations that require contextual external threat intelligence to stay ahead of evolving risk. Cyble offers vulnerability management with advanced scanning, risk evaluation, and efficient remediation strategies for a real-time view of exploitable vulnerabilities. Cyble offers third-party risk management that identifies, assesses, and mitigates risks arising from interactions with third parties.[2]

Cyble's discovery runs on ODIN, its scanning engine covering the full IPv4 and IPv6 space. Cyble's discovery maps web and mobile apps, cloud environments, domains, email servers, IoT devices and public code repositories, with real-time and historical views. Cyble says AI and natural language processing analyze underground forums, marketplaces, and leak sites for customer assets, credentials, and data. Cyble findings arrive ranked by asset-level risk and threat activity, with recommended actions and automated alerts. Cyble says continuous monitoring supports CTEM and Zero Trust programs and maps to requirements such as NIS2 Article 21, HIPAA, and PCI DSS.

Cyble says its AI hunts, reasons, and acts autonomously within minutes, not hours. Blaze is the agentic AI engine that powers Cyble's platform. Blaze predicts, hunts, and automates response through its dual-memory architecture. Blaze has native integrations with SIEM, SOAR, EDR, and cloud systems. Every incident retrains Cyble Blaze AI. Cyble says incident response agents act in seconds under human-in-the-loop policy guards.[9]

Cyble Hawk is a proactive cybersecurity investigation partner built for Govts, LEA, and National Security. Cyble describes a specialized platform protecting federal bodies with advanced threat detection. Cyble Titan is an endpoint security product. Cyble describes an agent-based endpoint security platform with AI-native threat response. Cyble Odin scans 4 Billion+ IPs on the internet. Cyble Strato is cloud security posture management with AI-driven misconfiguration detection. Cyble offers proactive risk detection and compliance across cloud and on-prem environments.[9][12]

Cyble offers Takedown Services built to eliminate online threats across diverse platforms and regions. Cyble removes impersonations, phishing sites, and malicious domains. Cyble works with hosting providers, domain registrars, and social platforms using verified takedown requests and automated workflows. Continuous monitoring in Takedown Services is powered by Cyble Vision threat intelligence. Cyble provides 24/7 monitoring and expert response. Cyble says Takedown Services scale from startups to large enterprises. Cyble says businesses, government agencies, financial institutions, and healthcare providers rely on cyber takedown and disruption services.[3][13]

Cyble describes banks, payment platforms, and digital finance providers as monitoring phishing, brand abuse, and exposed credentials. Cyble describes hospitals, health systems, and pharma enterprises as detecting patient data leaks and ransomware signals. Cyble describes industrial and infrastructure operators as tracking supply chain exposure and threat actor activity. Cyble describes global brands and online marketplaces as identifying impersonation domains and fraud campaigns. Cyble describes federal, state, and public institutions as monitoring hacktivist and geopolitical threats. Cyble describes enterprise SOCs and managed providers as enriching investigations and accelerating response. Cyble describes a major pharmaceutical company in the biotechnology sector that used Cyble's Darkweb Monitoring capabilities to protect its sensitive R&D data and intellectual property. Cyble describes a major mutual fund company that deployed Cyble's Cyber Threat Intelligence Platform to detect and counteract phishing attacks.[4][14][15]

Cyble on the record

Sources

Cyble full record

  1. [1]About usCyble · cyble.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Cyble visionCyble · cyble.com · published September 1, 2026 · Tier A
  3. [3]Cyble hawkCyble · cyble.com · published April 10, 2026 · Tier A
  4. [4]ProductsCyble · cyble.com · published August 13, 2026 · Tier A
  5. [5]AI Native Threat Intelligence Company & ProductsCyble · undated page, accessed October 24, 2026 · Tier A
  6. [6]Cyble Positioned as a Challenger in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence TechnologiesBusiness Wire · published May 8, 2026 · Tier A
  7. [7]Cyble Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 24, 2026 · Tier C
  8. [8]Cyble Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C
  9. [9]Agentic AI Cybersecurity | Next-Gen Defense For BusinessesCyble · undated page, accessed November 3, 2026 · Tier A
  10. [10]Top 10 Attack Surface Management Services & CompaniesCyble · published October 23, 2026 · Tier A
  11. [11]Threat Intelligence Product – Cyble Vision (AI-Native)Cyble · undated page, accessed November 3, 2026 · Tier A
  12. [12]AI Powered Cybersecurity Threat Intelligence ProductsCyble · undated page, accessed November 3, 2026 · Tier A
  13. [13]Takedown Services | Phishing & Brand Protection | CybleCyble · undated page, accessed November 3, 2026 · Tier A
  14. [14]Protecting R&D Innovations With Cyble For Biotech LeaderCyble · undated page, accessed November 3, 2026 · Tier A
  15. [15]Restoring Investor Trust: Cyble's Impact On Mutual FundsCyble · undated page, accessed November 3, 2026 · Tier A
  16. [16]Cyble Joins the UAE’s National Cybersecurity Strategy to Strengthen Intelligence-Led DefenseGlobeNewswire · published September 21, 2026 · Tier A

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Spot a factual error? Request a correction.