CISO Tribune

Vendor comparison · 2 companies

Filigran vs Picus Security

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core. Picus Security sells a platform that proves what attackers can exploit and what defenses stop. CISO Tribune files both under Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Filigran
  • Picus Security
Filigran vs Picus Security: Products, Customers and Funding Compared
FiligranFiligran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.filigran.ioPicus SecurityPicus Security sells a platform that proves what attackers can exploit and what defenses stop.picussecurity.com
What it sells
  • XTM Platform[1][4][5][10][11][18]The eXtended Threat Management suite of OpenCTI, OpenAEV and XTM One.
  • OpenCTI[4][6][8][10][12][14]An open-source platform to organize, analyze and operationalize cyber threat intelligence.
  • OpenAEV[2][4][9][10][12][15]Adversarial exposure validation through attack simulation, autonomous pentesting and tabletop exercises.
  • XTM One[1][4][10][18]The agentic AI layer across the XTM platform.
  • OpenCRQ[11]A cyber risk quantification module, coming soon as the third open-source module of the XTM Platform.
  • OpenAEV Enterprise Edition[15]A commercial upgrade of OpenAEV with advanced features.
  • Picus Platform[3][5][12][13]One platform that proves what attackers can exploit and what defenses stop.
  • Autonomous Penetration Testing[3][5]Runs autonomous agents that chain real attacks across the full environment.
  • Exposure Validation[3][5][11]Proves exploitability without firing an exploit.
  • Breach and Attack Simulation[1][3][5][11]Tests what security controls block and detect against attacker techniques.
  • Picus URL Filtering Testing Module[15]Simulates access to malicious and inappropriate sites to test URL filtering.
  • Picus Cloud Security Validation[16]Runs a continuous loop across the customer's cloud.
  • Picus Detection Analytics[14]Identifies which attacks trigger alerts and which are missed.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2022[2][3]2013
Ownership and funding
Privately held[6][13][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 29, 2026Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.[19]
  • June 9, 2026Filigran announced XTM One, an AI-native agentic layer that automates Continuous Threat Exposure Management workflows across its XTM Platform.[18]
  • April 9, 2026Filigran announced the official launch of its Japanese organization and the start of its expansion in the Japanese market.[17]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[19]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The company says its users range from individuals to enterprises and government organizations. Its support plans are described as fitting teams of whatever stage and size.The pages describe oil and gas operators with connected IT and OT environments as users of the platform. A football club with stadium, training, hospitality, and medical operations is a named kind of customer. The pages describe the Picus Platform as enabling organizations of all sizes to become threat-centric.
Last verified
October 7, 2026November 9, 2026

Where they overlap

  • Filigran and Picus Security are both filed under Breach simulation and automated pen-testing.

Where they differ, field by field

  • Filigran's primary category is Threat intelligence; Picus Security's is Breach simulation and automated pen-testing.
  • Filigran is also filed under Exposure prioritisation and CTEM.
  • Filigran lists XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Picus Security lists Picus Platform, Autonomous Penetration Testing, Exposure Validation, Breach and Attack Simulation, Picus URL Filtering Testing Module and 2 more.
  • Filigran was founded in 2022. Picus Security was founded in 2013.
  • Filigran is privately held.

What it sells: Filigran

What XTM Platform does[1][4][5][10][11][18]
OpenCTI, OpenAEV and XTM One work as one continuous loop, from anticipation to response. Filigran says the platform makes continuous threat exposure management (CTEM) agentic.
What OpenCTI does[4][6][8][10][12][14]
OpenCTI offers 400+ one-click integrations and uses a consistent STIX 2.1 data model. It includes case management for incident-related data.
What OpenAEV does[2][4][9][10][12][15]
OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.
What XTM One does[1][4][10][18]
XTM One consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform.

What it sells: Picus Security

What Picus Platform does[3][5][12][13]
Picus Security sells one platform that proves what attackers can exploit and what defenses stop. Autonomous Penetration Testing is one part of the Picus Platform. The capabilities of the Picus Platform converge into one continuous validation loop, from attack surface to controls to exploitable exposures.
What Autonomous Penetration Testing does[3][5]
Picus runs autonomous agents that chain real attacks across the full environment to show which exposures are genuinely exploitable. AI agents run real attacks against the production environment, with guardrails the user controls. Autonomous Penetration Testing prioritizes exposures by validated risk and blast radius, then verifies the fix.
What Exposure Validation does[3][5][11]
Exposure Validation proves exploitability without firing an exploit, covering restricted assets that no live test can touch and CVEs with no public or safe exploit. Picus Exposure Validation prioritizes exposures based on exploitability, security control performance, and asset criticality.
What Breach and Attack Simulation does[1][3][5][11]
Breach and Attack Simulation continuously tests what EDR, SIEM, firewall, WAF, and other security controls block and detect against the newest attacker techniques. Picus Breach and Attack Simulation evaluates whether defenses block or detect attacks, including attempted data exfiltration.
What Picus Cloud Security Validation does[16]
Picus Cloud Security Validation runs a continuous loop across the customer's cloud. It scans core AWS, Azure, and Google Cloud services, then safely simulates real attacks against what it finds. Picus validates with read-only access and feeds validated exposures into existing CSPM, CNAPP, and security data tooling.

Questions about Filigran and Picus Security

What do Filigran and Picus Security sell?
Filigran sells XTM Platform, OpenCTI, OpenAEV, XTM One, OpenCRQ and 1 more. Picus Security sells Picus Platform, Autonomous Penetration Testing, Exposure Validation, Breach and Attack Simulation, Picus URL Filtering Testing Module and 2 more.
Are Filigran and Picus Security in the same category?
They share Breach simulation and automated pen-testing. Filigran's primary category is Threat intelligence and Picus Security's is Breach simulation and automated pen-testing.
When were Filigran and Picus Security founded?
Filigran was founded in 2022. Picus Security was founded in 2013.
Who owns Filigran and Picus Security?
Filigran is privately held.
Who are Filigran and Picus Security sold to?
From its own pages, Filigran sells mainly to security teams that want threat intelligence and exposure validation in one open-source suite. The pages describe oil and gas operators with connected IT and OT environments as users of the platform.
What have Filigran and Picus Security announced recently?
September 29, 2026: Filigran appointed Tim Durkee as senior vice president of sales, Americas, and Mathieu Rigotto as chief information security officer.

About Filigran

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.[1][4][5]

Filigran describes the XTM Platform as making continuous threat exposure management (CTEM) agentic. The suite is made up of OpenCTI, OpenAEV and XTM One, which work as one continuous loop, from anticipation to response. OpenCTI and OpenAEV are developed in the open with a 7,000+ member community.[4]

OpenCTI is an open-source platform to organize, analyze and operationalize cyber threat intelligence. OpenCTI offers 400+ one-click integrations and standardizes threat intelligence using a consistent STIX 2.1 data model. It includes case management for incident-related data.[4][8]

OpenAEV covers adversarial exposure validation: real attack simulation, autonomous pentesting and tabletop exercises. OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.[9]

XTM One is the agentic AI layer that consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform, with direct access to both OpenCTI and OpenAEV. OpenCRQ is described as coming soon, as the third open-source module of the XTM Platform, and it runs on a customer's own security data to quantify cyber risk.[1][10][11]

Filigran also sells services around the suite. Filigran provides fully managed cloud private instances for every product in the XTM suite, with each SaaS instance running in its own infrastructure tenant. SaaS pricing is based only on the resources available for the tenant, not on the number of users or integrations. Standard and premium support carry a guaranteed time frame for requests, and the customer success team is 100% in-house. Filigran Academy offers training paths for OpenCTI and OpenAEV, and a partner network of certified MSSPs, solutions providers and technology alliances deploys and operates Filigran platforms in a customer's region.[4][5][7][8][9][11][12][14][15]

Filigran on the record

Sources

Filigran full record

  1. [1]filigran.ioFiligran · filigran.io · undated page, accessed October 7, 2026 · Tier A
  2. [2]Filigran redefines proactive security openbas rebrands to openaev with an ai powered enterprise editionFiligran · filigran.io · published October 29, 2025 · Tier A
  3. [3]Filigran accelerates us expansionFiligran · filigran.io · published March 23, 2026 · Tier A
  4. [4]Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  5. [5]Filigran | Uncover Threats. Take Action.Filigran · undated page, accessed October 31, 2026 · Tier A
  6. [6]Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  7. [7]Support and Services | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  8. [8]OpenCTI - Open Source Cyber Threat Intelligence Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  9. [9]OpenAEV - Adversarial Exposure Validation Platform | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  10. [10]XTM One - Agentic AI for Threat Exposure Management | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  11. [11]OpenCRQ - Threat-Informed Cyber Risk Quantification | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  12. [12]Filigran Academy - Official Training | FiligranFiligran · undated page, accessed October 31, 2026 · Tier A
  13. [13]OpenCTI by Filigran Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  14. [14]OpenCTI Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  15. [15]OpenAEV Enterprise Edition | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  16. [16]Software as a Service | FiligranFiligran · undated page, accessed November 3, 2026 · Tier A
  17. [17]Filigran Announces Strategic Expansion into Japan to Accelerate Proactive Cyber DefenseFiligran · published April 9, 2026 · Tier A
  18. [18]Filigran Launches XTM One, an AI-Native Platform for Automating Continuous Threat Exposure ManagementFiligran · published June 9, 2026 · Tier A
  19. [19]Filigran Accelerates Global Enterprise Growth With Executive Leadership Expansion Across Americas Sales and CybersecurityFiligran · published September 29, 2026 · Tier A

Picus Security full record

  1. [1]About usPicus Security · picussecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Series b fundingPicus Security · picussecurity.com · undated page, accessed October 1, 2021 · Tier A
  3. [3]Picus Autonomous Exposure Validation PlatformPicus Security · undated page, accessed October 27, 2026 · Tier A
  4. [4]Achieve NIST Cybersecurity Framework Compliance | Picus SecurityPicus Security · undated page, accessed October 27, 2026 · Tier A
  5. [5]Autonomous Penetration Testing | PicusPicus Security · undated page, accessed October 27, 2026 · Tier A
  6. [6]Exposure ValidationPicus Security · undated page, accessed October 27, 2026 · Tier A
  7. [7]Email Gateway SecurityPicus Security · undated page, accessed October 27, 2026 · Tier A
  8. [8]Picus | Threat LibraryPicus Security · undated page, accessed October 27, 2026 · Tier A
  9. [9]Beyond Cloud Security Posture Management: Validating Cloud Effectiveness with Attack SimulationPicus Security · undated page, accessed October 27, 2026 · Tier A
  10. [10]Trust CenterPicus Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]DPDPA CompliancePicus Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Why Security Control Validation is a must for every organizationPicus Security · published July 4, 2022 · Tier A
  13. [13]Security Control Validation for Detection ControlsPicus Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Cybersecurity Code of Practice (CCoP) 2.0 CompliancePicus Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]URL Filtering AttacksPicus Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]Cloud Security ValidationPicus Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Oil and Gas Cybersecurity | Picus SecurityPicus Security · undated page, accessed November 10, 2026 · Tier A
  18. [18]Hong Kong Code of Practice (CoP) CompliancePicus Security · undated page, accessed November 10, 2026 · Tier A
  19. [19]Picus Security Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.