We use cookies on this site to help provide the best possible online experience. By using this site you agree to our use of cookies.
Click to view our cookie policy and customize your cookie preferences.
OpenCTI is an open-source threat intelligence platform from Filigran that helps security teams collect, structure, analyse and share cyber threat intelligence. Ingest feeds, map adversaries, manage IOCs and collaborate securely across your organisation or community. Built for CTI teams and SOCs.
Agreement start: 01 March 2026
Agreement end: 28 February 2029
Invoice date: Invoices will be issued three months in advance of the licence anniversary date.
Institutions may participate in the Agreement at any time during the agreement period, and are bound by its Terms and Conditions, including payments, until the end of the Institution’s chosen Commitment (Licence) Period
Per instance
Contact Chest Help for more information.
Higher and Further Education and Research Councils in the United Kingdom, and to Universities and Colleges of Further Education in the Republic of Ireland. Other organisations supporting education, including research bodies and the public sector, may ask to participate in the Agreement. Chest will liaise with the Supplier about any such requests
This agreement aligns with SUPC's SLRA Lot 4, with Softcat having been appointed as reseller.
The agreement also ties into Jisc's Threat Intelligence team's use of OpenCTI (see Product Information tab)
Licensor: Filigran, a French simplified joint-stock company (SAS), with its principal place of business at 66 avenue des Champs Elysées, 75008 Paris, France.
Website: www.filigran.io
Company Overview: Filigran, a cybersecurity company founded in 2022, offers open-source, AI-powered solutions covering end-to-end threat intelligence management, attack simulation, and security posture validation.
This agreement offers OpenCTI, an open-source Threat Intelligence Platform that allows organisations to unify, operationalise and prioritise threat intelligence to make your SecOps better with their open-source threat intelligence platform. It provides the following benefits:
Centralised intelligence hub – Aggregate internal reporting, OSINT and commercial feeds into one structured, STIX-native platform, eliminating silos and creating a single source of truth for your CTI function.
Deep relationship modelling – Map connections between threat actors, campaigns, malware, tools, vulnerabilities and indicators to build rich, contextual intelligence that supports both strategic and operational decision-making.
Actionable outputs for security teams – Produce intelligence that directly supports SOC, incident response and vulnerability management workflows, improving prioritisation and reducing noise.
Automation across the intelligence lifecycle – Automate ingestion, enrichment, correlation and dissemination to reduce manual effort, increase consistency and accelerate time to insight.
Seamless security stack integration – Integrate with SIEM, SOAR and EDR solutions to operationalise intelligence and strengthen detection and response capabilities.
Flexible deployment and collaboration – Deploy as secure SaaS or self-hosted open source, with granular access controls to enable trusted internal and cross-sector intelligence sharing.
The Agreement offers four different solutions:
Important Information
In the coming months, Jisc will be adopting OpenCTI and becoming the central node, sharing all our threat intelligence information. More information on this will be shared via Jisc's Cyber Community and via Licensing newsletters when available.
https://www.jisc.ac.uk/cyber-threat-intelligence
Free trials are available via Filigran's XTM Hub: https://hub.filigran.io. Contact Chest Help for more information.
Filigran provides access to full documentation, deployment guides and best practice via: https://docs.opencti.io/latest
Filigran Academy can be accessed here: https://academy.filigran.io/
All institutions purchasing through this agreement will receive Filigran's Standard Support, including:
Supplier Web Address: https://filigran.io/
For more information contact: ross.macara@filigran.io
Details of system releases and/or new versions and/or new supporting documentation will be shared directly with licensed institutions when available.
Licensor: Filigran SAS, 66 avenue des Champs Elysées, 75008 Paris, France. Company Number: 907 384 479
The Chest Order, together with the Licence Terms and Conditions, and any exceptions listed below, create a legally binding contract between your institution, organisation or company and the Licensor. Therefore please read the terms and conditions carefully and only submit a Chest Order if its terms and conditions are acceptable to your institution, organisation or company and you have the authority to make the financial commitment shown.
This licence is subject to the terms and conditions for the Standard Software as a Service (SaaS) Licence (July 2024) This agreement contains variations to these terms and conditions which are available at the bottom of this page under the heading 'Exceptions to Terms and Conditions Content'.
Chest is an Enterprise of Jisc. All Purchase orders must be made out to Jisc Services Ltd, 4 Portwall Lane, Bristol, BS1 6NB to cover all charges plus VAT. Payments are due within thirty days of invoice date; recipients of late payments are entitled to interest in accordance with UK statutory provisions.
On receipt of a completed order, sites will be invoiced for the first year of their agreement. For each subsequent year, sites will be invoiced 3-months in advance of their licence anniversary date. Invoices are payable within 30 days of the date of the invoice.
Please note that we will not accept orders without a PO, unless your institution does not require a PO
Clause 2.5 is added to this agreement and it reads:
The Software includes open-source components that are licensed under their respective open-source license terms (“OSS License Terms”). Nothing in this Agreement shall restrict Licensee’s rights under the applicable OSS License Terms. The open-source components are provided “as is” and without warranties, as specified in the applicable OSS License Terms, which are hereby incorporated by reference. This Agreement governs only the proprietary components of the Software and the Services related to the Software provided by the Licensor.
OSS Licence terms means the Filigran open source Apache 2.0 licenses, available at https://github.com/OpenCTI-Platform/opencti/blob/master/LICENSE or https://github.com/OpenBASPlatform/openbas/blob/master/LICENSE, as applicable.
Join our mailing list for the latest news, event information and resources