CISO Tribune

Vendor comparison · 2 companies

Filigran vs Parsons

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. Parsons is a global solutions provider in the national security and critical infrastructure markets that delivers integrated program management solutions. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Filigran
  • Parsons
Filigran vs Parsons: Products, Customers and Funding Compared
FiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.ioParsonsParsons is a global solutions provider in the national security and critical infrastructure markets that delivers integrated program management solutions.parsons.com
What it sells
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
  • Cyber Fly-Away KitsKits called C-FLAK for cyber defenders.
  • Digital Overwatch[4]A suite of applications, pipelines, analytics, and visual components.
  • Dynamic Spectrum Environment Emulator (DYSE)A RF channel emulator that imitates realistic RF environments.
  • Threat Representative Environment (TReX)A software and COTS hardware-based signal and channel emulator.
  • Wireless Instrumented Streaming Platform (WISP)A portable, remotely controlled wideband RF data capture and analysis tool.
  • Tactical Edge Electro-Magnetic Sensor (TEMS)A real time situational awareness plugin for ATAK.
  • ER310 Software-Defined RadioA handheld SDR platform designed to host and execute RF applications.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2022[2][3]Not stated on its pages
Ownership and funding
Privately held[6][13][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
  • January 15, 2026Parsons Corporation announced it has acquired Altamira Technologies Corporation in a transaction valued at up to $375 million.[14]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 4, 2026[2]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.From its own pages, Parsons sells mainly to national security and critical infrastructure customers. Parsons says TReX supports various DoD, IC, and Defense Industrial Base partners. Parsons describes its Ares biometric software as designed for defense and law enforcement. Parsons describes LandForm X as an ISR mission management system designed for airborne law enforcement and search and rescue. Parsons describes Foundation as a cloud-native data integration platform built to address the complexities of government operations.
Last verified
October 7, 2026October 14, 2026

Where they overlap

  • Threat intelligence is the primary category of both Filigran and Parsons.

Where they differ, field by field

  • Filigran is also filed under Breach simulation and automated pen-testing and Exposure prioritisation and CTEM. Parsons is also filed under Incident response and forensics, OT and ICS security and Vulnerability management.
  • Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Parsons lists Cyber Fly-Away Kits, Digital Overwatch, Dynamic Spectrum Environment Emulator (DYSE), Threat Representative Environment (TReX), Wireless Instrumented Streaming Platform (WISP) and 2 more.
  • Filigran was founded in 2022.
  • Filigran is privately held.

How they differ

CISO Tribune files Filigran under Threat intelligence, Breach simulation and automated pen-testing, and Exposure prioritisation and CTEM, with Threat intelligence as its primary category. CISO Tribune files Parsons under Threat intelligence, Incident response and forensics, OT and ICS security, and Vulnerability management, also with Threat intelligence as its primary category. Filigran sells the XTM Platform, a suite made up of OpenCTI, OpenAEV and XTM One. OpenCTI is an open-source threat intelligence platform built on a STIX 2.1 data model, and OpenAEV covers attack simulation, autonomous pentesting and tabletop exercises. Parsons sells a different mix, including Cyber Fly-Away Kits (C-FLAK), the Digital Overwatch suite, and RF and signal emulation products such as DYSE and TReX. Its catalog also lists DroneArmor, a counter unmanned aircraft systems solution, and the ER310 handheld software-defined radio.

Filigran describes its users as ranging from individuals to enterprises and government organizations, and says OpenCTI and OpenAEV are developed in the open with a 7,000+ member community. Parsons describes itself as a global solutions provider in the national security and critical infrastructure markets. Parsons says TReX supports various DoD, IC, and Defense Industrial Base partners. Filigran is privately held and was founded in 2022.

On the recent side, Filigran announced XTM One on June 9, 2026, an agentic layer for Continuous Threat Exposure Management workflows across the XTM Platform. Filigran also announced the launch of its Japanese organization on April 9, 2026. Parsons Corporation announced on January 15, 2026 that it had acquired Altamira Technologies Corporation in a transaction valued at up to $375 million.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

What it sells: Parsons

What Cyber Fly-Away Kits does
Parsons calls these products Cyber-Fly-Away Kits (C-FLAK). Parsons says the kits have everything a cyber defender needs to efficiently achieve mission success.
What Digital Overwatch does[4]
Digital Overwatch is a suite of applications, pipelines, analytics, and visual components. Parsons says the suite enables successful mission execution.
What Dynamic Spectrum Environment Emulator (DYSE) does
DYSE is a RF channel emulator that seeks to imitate realistic RF environments, including congested and contested conditions. RF paths in DYSE can be individually programmable and emulate the impact of real-world operational conditions in a lab environment.
What Threat Representative Environment (TReX) does
TReX is a software and COTS hardware-based signal and channel emulator. Parsons describes TReX as a way to experiment, train, and plan SIGINT and EW operations. Parsons says TReX can be deployed anywhere from a laboratory to austere environments.
What Wireless Instrumented Streaming Platform (WISP) does
WISP is a portable, remotely controlled wideband RF data capture and analysis tool. WISP uses include wireless signal capture, an arbitrary signal generator, and frequency translation for both R&D and field-based operations.
What Tactical Edge Electro-Magnetic Sensor (TEMS) does
TEMS is a real time situational awareness plugin for Android Team Awareness Kit (ATAK). TEMS detects RF spectrum energy in the user's environment and can be controlled using a smart phone.
What ER310 Software-Defined Radio does
The ER310 software-defined radio is a handheld SDR platform designed to host and execute RF applications. Parsons says it supports missions including assured PNT, RF situational awareness support, electronic warfare, and communications.

Questions about Filigran and Parsons

What do Filigran and Parsons sell?
Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Parsons sells Cyber Fly-Away Kits, Digital Overwatch, Dynamic Spectrum Environment Emulator (DYSE), Threat Representative Environment (TReX), Wireless Instrumented Streaming Platform (WISP) and 2 more.
Are Filigran and Parsons in the same category?
Yes. Threat intelligence is the primary category of both on CISO Tribune.
When were Filigran and Parsons founded?
Filigran was founded in 2022.
Who owns Filigran and Parsons?
Filigran is privately held.
Who are Filigran and Parsons sold to?
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. From its own pages, Parsons sells mainly to national security and critical infrastructure customers.
What have Filigran and Parsons announced recently?
September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer. January 15, 2026: Parsons Corporation announced it has acquired Altamira Technologies Corporation in a transaction valued at up to $375 million.

About Filigran

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.[1][4][5]

Filigran describes the XTM Platform as making continuous threat exposure management (CTEM) agentic. The suite is made up of OpenCTI, OpenAEV and XTM One, which work as one continuous loop, from anticipation to response. OpenCTI and OpenAEV are developed in the open with a 7,000+ member community.[4]

OpenCTI is an open-source platform to organize, analyze and operationalize cyber threat intelligence. OpenCTI offers 400+ one-click integrations and standardizes threat intelligence using a consistent STIX 2.1 data model. It includes case management for incident-related data.[4][8]

OpenAEV covers adversarial exposure validation: real attack simulation, autonomous pentesting and tabletop exercises. OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.[9]

XTM One is the agentic AI layer that consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform, with direct access to both OpenCTI and OpenAEV. OpenCRQ is described as coming soon, as the third open-source module of the XTM Platform, and it runs on a customer's own security data to quantify cyber risk.[1][10][11]

Filigran also sells services around the suite. Filigran provides fully managed cloud private instances for every product in the XTM suite, with each SaaS instance running in its own infrastructure tenant. SaaS pricing is based only on the resources available for the tenant, not on the number of users or integrations. Standard and premium support carry a guaranteed time frame for requests, and the customer success team is 100% in-house. Filigran Academy offers training paths for OpenCTI and OpenAEV, and a partner network of certified MSSPs, solutions providers and technology alliances deploys and operates Filigran platforms in a customer's region.[4][5][7][8][9][11][12][14][15]

Filigran on the record

Sources

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Parsons full record

  1. [1]CyberParsons Corporation · parsons.com · undated page, accessed October 14, 2026 · Tier A
  2. [2]Parsons Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed November 2, 2026 · Tier C
  3. [3]Parsons CorporationParsons · undated page, accessed November 4, 2026 · Tier A
  4. [4]Products | Parsons CorporationParsons · undated page, accessed November 4, 2026 · Tier A
  5. [5]RF Channel Emulator | DYSEParsons · undated page, accessed November 4, 2026 · Tier A
  6. [6]SIGINT And Electronic Warfare Channel Emulator | TReX®Parsons · undated page, accessed November 4, 2026 · Tier A
  7. [7]Wideband RF Data Capture | WISP™Parsons · undated page, accessed November 4, 2026 · Tier A
  8. [8]Assured Positioning, Navigation And Timing (APNT) | APSParsons · undated page, accessed November 4, 2026 · Tier A
  9. [9]Software-Defined Radio | ER310™Parsons · undated page, accessed November 4, 2026 · Tier A
  10. [10]Tactical Edge Electro-Magnetic Sensor | TEMS™Parsons · undated page, accessed November 4, 2026 · Tier A
  11. [11]Asset Management Solution | Paradim®Parsons · undated page, accessed November 4, 2026 · Tier A
  12. [12]Full-Lifecycle Flight-Dynamics Capabilities | SatFlyer™Parsons · undated page, accessed November 4, 2026 · Tier A
  13. [13]Space Access | Parsons ProductsParsons · undated page, accessed November 4, 2026 · Tier A
  14. [14]Parsons Acquires Altamira Technologies CorporationParsons Corporation · published January 15, 2026 · Tier A

Spot a factual error? Request a correction.