CISO Tribune

Vendor comparison · 2 companies

Filigran vs Indra Group

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. Indra Group operates a Cyberdefence segment that provides platforms and services for planning, conducting and analysing military and governmental cyberspace operations, including command-and-control software, situational-awareness tools, encrypted communications and information-warfare toolkits. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Filigran
  • Indra Group
Filigran vs Indra Group: Products, Customers and Funding Compared
FiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.ioIndra GroupIndra Group operates a Cyberdefence segment that provides platforms and services for planning, conducting and analysing military and governmental cyberspace operations, including command-and-control software, situational-awareness tools, encrypted communications and information-warfare toolkits.indragroup.com
What it sells
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
  • Cyber C2[1]A software and communications platform used to plan, direct, coordinate and monitor cyberspace operations for defence customers.
  • ECYSAP[1]A mission-focused situational awareness capability that gives real-time information on cyberspace events and their potential impact on a mission.
  • Cyber Threat Analysis and Situational Awareness Centre[1]A centre that coordinates interoperability among European entities to improve coordination and response to cyber incidents.
  • COMSec Meet[1]A solution with hybrid protection mechanisms and end-to-end encryption used to secure communications and information exchange within the centre.
  • EUCINF[1]A toolbox covering the operational flow of Cyber and Information Warfare, collecting, analysing, processing and exploiting data via a shared library of software products.
  • Hy-COB (Cyber Operations Hybrid Battlespace)A capability that provides cyber operational analysis along with collaborative exercises and training.
Categories
Headquarters
Not stated on its pagesMadrid, Spain
Founded
2022[2][3]Not stated on its pages
Ownership and funding
Privately held[6][13][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
  • January 8, 2026Indra Group reached an agreement with UK-based Altitude Angel to acquire the assets related to GuardianUTM, its modular unmanned air traffic management platform.[3]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.From its own pages, Indra Group sells a dual offering to both civil and military customers and supports critical missions worldwide. In our reading, Indra Group's defence work is aimed at protecting both forces and civilians in any operational environment. Indra Group's sovereign AI work is directed at the protection of citizens, territories, and critical physical and digital infrastructure and assets. Indra Group's transport work covers roads, railways, ports and airports. Indra Group's airspace management work covers solutions that synchronise radars, controllers, and aircraft. Indra Group sells digital platforms, analytics, and artificial intelligence to organisations.
Last verified
October 7, 2026October 14, 2026

Where they overlap

  • Threat intelligence is the primary category of both Filigran and Indra Group.

Where they differ, field by field

  • Filigran is also filed under Breach simulation and automated pen-testing and Exposure prioritisation and CTEM. Indra Group is also filed under Encryption, tokenization and key management and Incident response and forensics.
  • Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Indra Group lists Cyber C2, ECYSAP, Cyber Threat Analysis and Situational Awareness Centre, COMSec Meet, EUCINF and 1 more.
  • Indra Group is headquartered in Madrid, Spain.
  • Filigran was founded in 2022.
  • Filigran is privately held.

How they differ

Filigran sells the XTM Platform, a suite made up of OpenCTI, OpenAEV and XTM One. OpenCTI is an open-source platform for organizing and analyzing cyber threat intelligence, with 400+ one-click integrations and a STIX 2.1 data model. OpenAEV covers attack simulation, autonomous pentesting and tabletop exercises, and XTM One is the agentic AI layer across the suite. Filigran was founded in 2022 and is privately held.

Indra Group, headquartered in Madrid, Spain, sells to defence customers through a Cyberdefence segment. Its products include Cyber C2, a platform used to plan, direct, coordinate and monitor cyberspace operations, and ECYSAP, which gives real-time information on cyberspace events. It also sells COMSec Meet for end-to-end encrypted communications, EUCINF for Cyber and Information Warfare, and Hy-COB for cyber operational analysis and training. Indra Group describes a dual offering to both civil and military customers.

On recent activity, Filigran announced XTM One on June 9, 2026, and announced the launch of its Japanese organization on April 9, 2026. Indra Group reached an agreement on January 8, 2026 to acquire the assets related to GuardianUTM from UK-based Altitude Angel.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

Questions about Filigran and Indra Group

What do Filigran and Indra Group sell?
Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Indra Group sells Cyber C2, ECYSAP, Cyber Threat Analysis and Situational Awareness Centre, COMSec Meet, EUCINF and 1 more.
Are Filigran and Indra Group in the same category?
Yes. Threat intelligence is the primary category of both on CISO Tribune.
Where are Filigran and Indra Group headquartered?
Indra Group is headquartered in Madrid, Spain.
When were Filigran and Indra Group founded?
Filigran was founded in 2022.
Who owns Filigran and Indra Group?
Filigran is privately held.
Who are Filigran and Indra Group sold to?
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. From its own pages, Indra Group sells a dual offering to both civil and military customers and supports critical missions worldwide.
What have Filigran and Indra Group announced recently?
September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer. January 8, 2026: Indra Group reached an agreement with UK-based Altitude Angel to acquire the assets related to GuardianUTM, its modular unmanned air traffic management platform.

About Filigran

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.[1][4][5]

Filigran describes the XTM Platform as making continuous threat exposure management (CTEM) agentic. The suite is made up of OpenCTI, OpenAEV and XTM One, which work as one continuous loop, from anticipation to response. OpenCTI and OpenAEV are developed in the open with a 7,000+ member community.[4]

OpenCTI is an open-source platform to organize, analyze and operationalize cyber threat intelligence. OpenCTI offers 400+ one-click integrations and standardizes threat intelligence using a consistent STIX 2.1 data model. It includes case management for incident-related data.[4][8]

OpenAEV covers adversarial exposure validation: real attack simulation, autonomous pentesting and tabletop exercises. OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.[9]

XTM One is the agentic AI layer that consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform, with direct access to both OpenCTI and OpenAEV. OpenCRQ is described as coming soon, as the third open-source module of the XTM Platform, and it runs on a customer's own security data to quantify cyber risk.[1][10][11]

Filigran also sells services around the suite. Filigran provides fully managed cloud private instances for every product in the XTM suite, with each SaaS instance running in its own infrastructure tenant. SaaS pricing is based only on the resources available for the tenant, not on the number of users or integrations. Standard and premium support carry a guaranteed time frame for requests, and the customer success team is 100% in-house. Filigran Academy offers training paths for OpenCTI and OpenAEV, and a partner network of certified MSSPs, solutions providers and technology alliances deploys and operates Filigran platforms in a customer's region.[4][5][7][8][9][11][12][14][15]

Filigran on the record

Sources

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Indra Group full record

  1. [1]CyberdefenceIndra Group · defence.indragroup.com · undated page, accessed October 14, 2026 · Tier A
  2. [2]251030 indra group growth and investments usaIndra Group · indragroup.com · published October 30, 2025 · Tier A
  3. [3]Indra Group acquires Altitude Angel’s GuardianUTM platform to strengthen its leadership in drone traffic management while increasing its presence in the United KingdomIndra Group · published January 8, 2026 · Tier A
  4. [4]Indra Group | HomeIndra Group · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.