CISO Tribune

Vendor comparison · 2 companies

eSentire vs Filigran

eSentire sells MDR with multi-signal attack surface coverage and 24/7 Elite threat hunters working as one continuous security program across any vendor stack. eSentire offers 24/7 SOC-as-a-Service with unlimited threat hunting and incident handling. eSentire describes Multi-Signal MDR with 300+ technology integrations to support existing investments. Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. CISO Tribune files both under Exposure prioritisation and CTEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • eSentire
  • Filigran
eSentire vs Filigran: Products, Customers and Funding Compared
eSentireeSentire sells MDR with multi-signal attack surface coverage and 24/7 Elite threat hunters working as one continuous security program across any vendor stack. eSentire offers 24/7 SOC-as-a-Service with unlimited threat hunting and incident handling. eSentire describes Multi-Signal MDR with 300+ technology integrations to support existing investments.esentire.comFiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.io
What it sells
  • Atlas Preempt[3][5]Deploys AI Operatives to continuously validate attack paths.
  • Atlas MDR[5]MDR sold in Professional, Enhanced and Elite packages.
  • 24/7 SOC-as-a-Service[5]24/7 SOC-as-a-Service with unlimited threat hunting and incident handling.
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
Categories
Headquarters
Canada[2]Not stated on its pages
Founded
2001[2][5]2022[2][3]
Ownership and funding
Not stated on its pagesPrivately held[6][13][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 15, 2026eSentire announced it acquired a stealth-mode AI security startup and incorporated its product and technology into the Atlas Platform as Atlas AIDR.[6]
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to organisations that want to extend their own team with a 24/7 Security Operations Center. Its industry pages speak of protecting insurance operations, defending financial services, defending patient data and clinical operations, protecting portfolio companies, and stopping threats before they disrupt production. The pages also say Atlas connects to any signal across your current security tools, which reads as a fit for teams that already run security tools. The security operations center entry names boards, regulators, and cyber insurers as parties that require a human accountability layer.From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.
Last verified
November 2, 2026October 7, 2026

Where they overlap

  • eSentire and Filigran are both filed under Exposure prioritisation and CTEM.

Where they differ, field by field

  • eSentire's primary category is MDR and managed SOC; Filigran's is Threat intelligence.
  • eSentire is also filed under Incident response and forensics. Filigran is also filed under Breach simulation and automated pen-testing.
  • eSentire lists Atlas Preempt, Atlas MDR and 24/7 SOC-as-a-Service. Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
  • eSentire is headquartered in Canada.
  • eSentire was founded in 2001. Filigran was founded in 2022.
  • Filigran is privately held.

What it sells: eSentire

What Atlas MDR does[5]
Atlas MDR comes in three packages, Professional, Enhanced and Elite, so a customer can choose the level of 24/7 coverage, log retention, threat hunting and offensive testing. One package adds log detection, Atlas SIEM with 90-day retention, round-the-clock threat hunting, automated response, and quarterly offensive testing.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

Questions about eSentire and Filigran

What do eSentire and Filigran sell?
eSentire sells Atlas Preempt, Atlas MDR and 24/7 SOC-as-a-Service. Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more.
Are eSentire and Filigran in the same category?
They share Exposure prioritisation and CTEM. eSentire's primary category is MDR and managed SOC and Filigran's is Threat intelligence.
Where are eSentire and Filigran headquartered?
eSentire is headquartered in Canada.
When were eSentire and Filigran founded?
eSentire was founded in 2001. Filigran was founded in 2022.
Who owns eSentire and Filigran?
Filigran is privately held.
Who are eSentire and Filigran sold to?
From its own pages, the company sells mainly to organisations that want to extend their own team with a 24/7 Security Operations Center. From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite.
What have eSentire and Filigran announced recently?
September 15, 2026: eSentire announced it acquired a stealth-mode AI security startup and incorporated its product and technology into the Atlas Platform as Atlas AIDR. September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.

About eSentire

eSentire sells MDR with multi-signal attack surface coverage and 24/7 Elite threat hunters working as one continuous security program across any vendor stack. eSentire offers 24/7 SOC-as-a-Service with unlimited threat hunting and incident handling. eSentire describes Multi-Signal MDR with 300+ technology integrations to support existing investments.[1]

Atlas connects to any signal across any vendor stack and powers adaptive AI Operatives that expose, detect, and neutralize cyberattacks. Atlas connects to any signal across a customer's current security tools, and eSentire says that whatever a customer is running, eSentire is running with them. Atlas Preempt deploys AI Operatives to continuously validate attack paths exposing attacker targets of opportunity before they take advantage.

eSentire says its SOC extends a customer's team with immediate expertise, hands-on remediation, and the human accountability layer that boards, regulators, and cyber insurers require. eSentire says customers can see what its SOC sees, review investigations, and see how eSentire is protecting their business. Response and Remediation pairs machine-speed containment with human judgment, delivering full threat response that is policy-bounded, reversible, and explainable. eSentire offers unlimited Incident Response with a threat suppression guarantee, anytime, anywhere.

Atlas MDR comes in three packages, Professional, Enhanced and Elite, so a customer can choose the level of 24/7 coverage, log retention, threat hunting and offensive testing. In that package, eSentire analysts watch the customer's environment around the clock.

eSentire says it protects thousands of organizations across 35+ industries around the world. eSentire was founded in 2001, and its Controlled Autonomy SecOps operating model pairs agentic AI operatives with engineered human-judgment controls. eSentire provides cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). eSentire is the official cybersecurity partner of AVFC.

eSentire sets out to protect insurance operations from cyber attacks. eSentire sets out to defend financial services from cyber disruption. eSentire sets out to protect portfolio companies from cyber risk. eSentire sets out to defend patient data and clinical operations. eSentire sets out to secure dealership operations and customer data. eSentire sets out to protect public sector and education systems.

eSentire on the record

Sources

eSentire full record

  1. [1]Esentire managed detection and responseeSentire · esentire.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Security You Can Trust. Protecting Organizations Worldwide. | eSentireeSentire · undated page, accessed September 27, 2026 · Tier A
  3. [3]Company | eSentireeSentire · undated page, accessed October 24, 2026 · Tier A
  4. [4]eSentire Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 24, 2026 · Tier C
  5. [5]Managed Detection and Response Pricing and Packaging | eSentireeSentire · undated page, accessed November 3, 2026 · Tier A
  6. [6]eSentire Acquires Stealth-Mode AI Security Startup, Bringing New AI Observability and Control to the Atlas PlatformBusiness Wire · published September 15, 2026 · Tier A

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Spot a factual error? Request a correction.