CISO Tribune

Vendor comparison · 2 companies

EclecticIQ vs Filigran

EclecticIQ is a global provider of threat intelligence technology and services. Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • EclecticIQ
  • Filigran
EclecticIQ vs Filigran: Products, Customers and Funding Compared
EclecticIQEclecticIQ is a global provider of threat intelligence technology and services.eclecticiq.comFiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.io
What it sells
  • Intelligence Center[4][6][8][9]EclecticIQ's AI-embedded threat intelligence platform. It is designed to enhance security operations.
  • Threat Scout[1]A tool teams use to gather and organize threat data.
  • Malware Sandbox[1]Detonates suspicious files and extracts IOCs.
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
Categories
Headquarters
Netherlands[2][3]Not stated on its pages
Founded
2014[2]2022[2][3]
Ownership and funding
Privately held[2]Privately held[6][13][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • April 13, 2026EclecticIQ appointed James O'Connor, previously its VP of Systems Engineering, as Chief Technology Officer.[12]
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, EclecticIQ sells mainly to security teams that run threat intelligence and security operations work. The company says its products serve CTI teams and SOC teams. Its pages also address providers that deliver threat intelligence services to clients. EclecticIQ describes a major global bank as a customer that deployed its platform across global subsidiaries. The company says it collaborates with government and industry partners in the maritime and critical infrastructure space.From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.
Last verified
September 27, 2026October 7, 2026

Where they overlap

  • Threat intelligence is the primary category of both EclecticIQ and Filigran.
  • Both are privately held.

Where they differ, field by field

  • Filigran is also filed under Breach simulation and automated pen-testing and Exposure prioritisation and CTEM.
  • EclecticIQ lists Intelligence Center, Threat Scout and Malware Sandbox. Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
  • EclecticIQ is headquartered in Netherlands.
  • EclecticIQ was founded in 2014. Filigran was founded in 2022.

How they differ

CISO Tribune files EclecticIQ under Threat intelligence, and its main product is Intelligence Center, an AI-embedded threat intelligence platform that normalizes data into STIX 2.1 and EIQ-JSON formats. EclecticIQ also sells Threat Scout for gathering and organizing threat data and a Malware Sandbox that detonates suspicious files and extracts IOCs. CISO Tribune files Filigran under Threat intelligence, Breach simulation and automated pen-testing, and Exposure prioritisation and CTEM, with Threat intelligence as its primary category. Filigran sells the XTM Platform, a suite of OpenCTI, OpenAEV and XTM One.

The two overlap in threat intelligence, and both products use STIX 2.1. Filigran also describes OpenCRQ, a cyber risk quantification module that is coming soon. EclecticIQ is headquartered in the Netherlands and was founded in 2014, while Filigran was founded in 2022. Both companies are privately held.

EclecticIQ says its products serve CTI teams and SOC teams, and it describes a major global bank that deployed its platform across global subsidiaries. It also partnered with the NATO Cooperative Cyber Defence Centre of Excellence on protecting maritime infrastructure. Filigran says its users range from individuals to enterprises and government organizations. On April 13, 2026, EclecticIQ appointed a new Chief Technology Officer. Filigran announced XTM One on June 9, 2026, and on September 29, 2026 it appointed a senior vice president of sales, Americas, and a chief information security officer.

What it sells: EclecticIQ

What Intelligence Center does[4][6][8][9]
EclecticIQ Intelligence Center is the AI-embedded platform designed to enhance security operations. The platform normalizes data into STIX 2.1 and EIQ-JSON formats. Custom, role-specific dashboards and an Observable Risk Score feature help teams track and prioritize threats.
What Threat Scout does[1]
Threat Scout is named among the tools teams use to gather and organize data on the platform. The other collection methods named are automated feeds, custom uploads and flexible integrations.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

Questions about EclecticIQ and Filigran

What do EclecticIQ and Filigran sell?
EclecticIQ sells Intelligence Center, Threat Scout and Malware Sandbox. Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
Are EclecticIQ and Filigran in the same category?
Yes. Threat intelligence is the primary category of both on CISO Tribune.
Where are EclecticIQ and Filigran headquartered?
EclecticIQ is headquartered in Netherlands.
When were EclecticIQ and Filigran founded?
EclecticIQ was founded in 2014. Filigran was founded in 2022.
Who owns EclecticIQ and Filigran?
EclecticIQ is privately held. Filigran is privately held.
Who are EclecticIQ and Filigran sold to?
From its own pages, EclecticIQ sells mainly to security teams that run threat intelligence and security operations work. From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite.
What have EclecticIQ and Filigran announced recently?
April 13, 2026: EclecticIQ appointed James O'Connor, previously its VP of Systems Engineering, as Chief Technology Officer. September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.

About EclecticIQ

EclecticIQ is a global provider of threat intelligence technology and services. EclecticIQ says its products run from an AI-embedded threat intelligence platform to a browser extension, and that they improve workflows and reduce analyst fatigue. EclecticIQ says it helps security teams make smarter, faster decisions with dynamic solutions that reduce complexity and streamline threat detection and response.[4][11]

EclecticIQ Intelligence Center is the AI-embedded platform designed to enhance security operations. EclecticIQ says its platform helps teams define and capture Intelligence Requirements in one place with Intelligence Compass. Intelligence Compass uses AI-driven and keyword-based mapping to align threat information with business context. Teams can assign tasks and track progress. Custom, role-specific dashboards let teams visualize and track key metrics and threats, and a dynamic Observable Risk Score feature helps identify and prioritize the most critical risks. The platform includes automated discovery rules and real-time alerts.[1][4][9]

For data collection, teams can gather and organize data with automated feeds, custom uploads, flexible integrations and tools like Threat Scout. The platform normalizes data into STIX 2.1 and EIQ-JSON formats. Beyond the standard STIX object types, the platform ingests specialized intelligence via Custom objects. The platform automates deduplication and normalization. Reusable keyword lists let teams define what matters to the organization once and apply that context across rules and workflows. AI-driven entity extraction pulls threat actors, malware and attack patterns from unstructured reports. A Malware Sandbox detonates suspicious files in a secure environment, extracts IOCs and correlates them automatically. EclecticIQ says its platform centralizes and normalizes threat data through a single interface.[1][4][5]

For analysis, teams can visualize attack trends and TTPs using MITRE ATT&CK Navigator, heatmaps and dynamic graphs. Native DISARM Framework integration lets teams classify and analyze disinformation and influence operation TTPs. Teams can collaborate in dedicated workspaces and track threats with customizable watchlists. AI Suite is used to surface insights and automate repetitive tasks. EclecticIQ says its platform uses search technology that scans intelligence sources simultaneously to reduce critical response time from days to minutes. For reporting, the platform provides native editors and branded, audience-tailored templates to produce finished intelligence reporting. For sharing, the platform supports STIX, HTML and CSV formats and a full REST API, and export filters manage authentication, anonymization and timing.[1][4]

EclecticIQ describes integrations with other security tools. IBM QRadar and EclecticIQ Intelligence Center integration enhances threat detection and response by providing enriched intelligence. The EclecticIQ and ServiceNow integration automatically enriches observables with threat intelligence. SOC teams can visualize and track observables in real-time using ready-to-use widgets and send incidents to EclecticIQ for deeper analysis and reporting. The Cisco Umbrella API integration helps analysts understand registration details, similar domains and potential malicious ties to observable data.[5][6][7]

In a case study, a major global bank deployed the EclecticIQ Threat Intelligence Platform and streamlined intelligence triage and improved real-time collaboration across global subsidiaries. EclecticIQ partnered with the NATO Cooperative Cyber Defence Centre of Excellence to deliver actionable intelligence for protecting maritime infrastructure against state-sponsored cyber threats. EclecticIQ invites partners to bring security solutions and services to end users. EclecticIQ says it is an active member of the open source community.[8][10][11]

Cody Barrow is the EclecticIQ CEO. EclecticIQ states that it is certified to the ISO 9001 and 27001 standards.[4][5][6][10][11]

EclecticIQ on the record

Sources

EclecticIQ full record

  1. [1]Threat Intelligence PlatformEclecticIQ · undated page, accessed September 27, 2026 · Tier A
  2. [2]Eclecticiq sells endpoint detection talent and software capabilities to reliaquestEclecticIQ · eclecticiq.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]About usEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  4. [4]The threat intelligence platform that understands your businessEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  5. [5]IntegrationsEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  6. [6]IBM Security and EclecticIQ Intelligence CenterEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  7. [7]ServiceNow and EclecticIQ Intelligence CenterEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  8. [8]Enhancing Triage and Collaboration for Global Banking SecurityEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  9. [9]Threat Intelligence PlatformEclecticIQ · undated page, accessed November 5, 2026 · Tier A
  10. [10]EclecticIQ partners with NATO CCDCOE to strengthen European maritime port infrastructure securityEclecticIQ · published July 21, 2025 · Tier A
  11. [11]Maturity-based action plan template | EclecticIQEclecticIQ · undated page, accessed November 5, 2026 · Tier A
  12. [12]EclecticIQ appoints James O’Connor as Chief Technology Officer to drive next phase of product scale and innovationEclecticIQ · published April 13, 2026 · Tier A
  13. [13]EclecticIQ Appoints Chief Marketing Officer and Chief Revenue Officer to Drive Next Phase of GrowthEclecticIQ · published November 14, 2025 · Tier A

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Spot a factual error? Request a correction.