CISO Tribune

Vendor comparison · 2 companies

Filigran vs Nagomi Security

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. Nagomi Security sells a platform that turns the tools its customers already own into a coordinated defense. CISO Tribune files both under Exposure prioritisation and CTEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Filigran
  • Nagomi Security
Filigran vs Nagomi Security: Products, Customers and Funding Compared
FiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.ioNagomi SecurityNagomi Security sells a platform that turns the tools its customers already own into a coordinated defense.nagomisecurity.com
What it sells
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
  • AI Exposure Eliminators[3][4]Agents that run investigations against live environment changes. They pick the neutralization path and validate the close.
  • Agentic Exposure Operations[3][5]An operating model that closes exposure at the root across identity, attack surface, misconfigurations, and vulnerabilities.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2022[2][3]Not stated on its pages
Ownership and funding
Privately held[6][13][16]Privately held[2][4][6]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
  • September 30, 2026Nagomi Security announced a partnership and native integration with Recorded Future, bringing its threat intelligence into the Nagomi platform for joint customers.[11]
  • March 19, 2026Nagomi Security announced Agentic Exposure Ops, extending its platform from exposure visibility to agent-driven exposure elimination.[12]
  • March 19, 2026Nagomi Security announced Agentic Exposure Ops, a new operating model for continuous, agent-driven exposure management.[10]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.From its own pages, the company sells to teams that run their own security tools. The about page describes its operating model as built for teams ready to do less and step into total control. The integrations page says Nagomi connects to the security tools in its customers' environments, and lists tool categories such as Identity and Access Management (IAM) and Cloud Security Posture Management (CSPM). The home page frames its offer as a move from exposure overload to autonomous control. The support policy ties support to a paid subscription.
Last verified
October 7, 2026September 27, 2026

Where they overlap

  • Filigran and Nagomi Security are both filed under Exposure prioritisation and CTEM.
  • Both are privately held.

Where they differ, field by field

  • Filigran's primary category is Threat intelligence; Nagomi Security's is Exposure prioritisation and CTEM.
  • Filigran is also filed under Breach simulation and automated pen-testing.
  • Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Nagomi Security lists AI Exposure Eliminators and Agentic Exposure Operations.
  • Filigran was founded in 2022.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

What it sells: Nagomi Security

What AI Exposure Eliminators does[3][4]
AI Exposure Eliminators run investigations against live environment changes once the unified exposure picture is built. The agents run the full investigation, pick the neutralization path, route the work, and validate the close without prompting. Eliminators check reachability, evaluate existing controls, and chain what attackers would chain.
What Agentic Exposure Operations does[3][5]
Agentic Exposure Operations closes exposure at the root. It continuously investigates, catches, neutralizes, and validates the close across identity, attack surface, misconfigurations, and vulnerabilities. Nagomi automatically investigates, neutralizes, and validates every close.

Questions about Filigran and Nagomi Security

What do Filigran and Nagomi Security sell?
Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Nagomi Security sells AI Exposure Eliminators and Agentic Exposure Operations.
Are Filigran and Nagomi Security in the same category?
They share Exposure prioritisation and CTEM. Filigran's primary category is Threat intelligence and Nagomi Security's is Exposure prioritisation and CTEM.
When were Filigran and Nagomi Security founded?
Filigran was founded in 2022.
Who owns Filigran and Nagomi Security?
Filigran is privately held. Nagomi Security is privately held.
Who are Filigran and Nagomi Security sold to?
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. From its own pages, the company sells to teams that run their own security tools.
What have Filigran and Nagomi Security announced recently?
September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer. September 30, 2026: Nagomi Security announced a partnership and native integration with Recorded Future, bringing its threat intelligence into the Nagomi platform for joint customers.

About Filigran

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.[1][4][5]

Filigran describes the XTM Platform as making continuous threat exposure management (CTEM) agentic. The suite is made up of OpenCTI, OpenAEV and XTM One, which work as one continuous loop, from anticipation to response. OpenCTI and OpenAEV are developed in the open with a 7,000+ member community.[4]

OpenCTI is an open-source platform to organize, analyze and operationalize cyber threat intelligence. OpenCTI offers 400+ one-click integrations and standardizes threat intelligence using a consistent STIX 2.1 data model. It includes case management for incident-related data.[4][8]

OpenAEV covers adversarial exposure validation: real attack simulation, autonomous pentesting and tabletop exercises. OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.[9]

XTM One is the agentic AI layer that consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform, with direct access to both OpenCTI and OpenAEV. OpenCRQ is described as coming soon, as the third open-source module of the XTM Platform, and it runs on a customer's own security data to quantify cyber risk.[1][10][11]

Filigran also sells services around the suite. Filigran provides fully managed cloud private instances for every product in the XTM suite, with each SaaS instance running in its own infrastructure tenant. SaaS pricing is based only on the resources available for the tenant, not on the number of users or integrations. Standard and premium support carry a guaranteed time frame for requests, and the customer success team is 100% in-house. Filigran Academy offers training paths for OpenCTI and OpenAEV, and a partner network of certified MSSPs, solutions providers and technology alliances deploys and operates Filigran platforms in a customer's region.[4][5][7][8][9][11][12][14][15]

Filigran on the record

Sources

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Nagomi Security full record

  1. [1]nagomisecurity.comNagomi Security · nagomisecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Nagomi Security Emerges from Stealth with $30 Million in Funding to Help Security Teams Minimize Threat Exposure Using Existing ToolsNagomi Security via Business Wire · businesswire.com · published April 24, 2024 · Tier A
  3. [3]Agentic Exposure Operations Platform | Nagomi SecurityNagomi Security · undated page, accessed October 26, 2026 · Tier A
  4. [4]AI Exposure Management Platform | Nagomi SecurityNagomi Security · undated page, accessed October 26, 2026 · Tier A
  5. [5]About Nagomi Security | Agentic Exposure OperationsNagomi Security · undated page, accessed October 26, 2026 · Tier A
  6. [6]Security Tool Integrations for Exposure Management | NagomiNagomi Security · undated page, accessed October 26, 2026 · Tier A
  7. [7]SaaS License Agreement | Nagomi SecurityNagomi Security · published July 2, 2024 · Tier A
  8. [8]Customer Support Policy | Nagomi SecurityNagomi Security · published April 23, 2024 · Tier A
  9. [9]Nagomi SecurityNagomi Security · undated page, accessed October 26, 2026 · Tier A
  10. [10]Nagomi Security Expands Its Platform With Agentic Exposure OpsNagomi Security · published March 19, 2026 · Tier A
  11. [11]Nagomi Security and Recorded Future Announce Partnership to Connect Threat Intelligence and Exposure EliminationNagomi Security · published September 30, 2026 · Tier A
  12. [12]Nagomi Security Expands Its Platform With Agentic Exposure OpsBusiness Wire · published March 19, 2026 · Tier A

Spot a factual error? Request a correction.