TiloBox
Back to directory
OpenCTI project preview
ProductivityAlternative to Recorded FutureAlternative to Anomali MatchAlternative to ThreatQuotient

OpenCTI

Open-source platform for managing cyber threat intelligence knowledge and STIX2 relationships.

View on GitHub Visit website
LicenseApache-2.0
GitHub stars5.2k
Last commit5 days ago
Tags5 topics
Stix2 Threat ModelingCyber Threat Intelligence CtiApt Group ProfilerVulnerability Cve TrackerSecurity
Overview

Why consider OpenCTI?

OpenCTI is an open-source threat intelligence management platform built with TypeScript and GraphQL. It models cyber threat landscapes, APT group behaviors, vulnerability CVE links, and attack patterns using STIX 2.1 standards.

Guided learning

Learn OpenCTI by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

1 min read 2 sections
In this guide2 sections

Overview of OpenCTI

OpenCTI organizes structured threat intelligence data to uncover adversary tactics and campaigns.

Quickstart

bash
1git clone https://github.com/OpenCTI-Platform/opencti.git
2cd opencti
3docker compose up -d

Access the OpenCTI web portal to explore interactive knowledge graphs connecting threat actors to malware families.

OpenCTI is licensed under the Apache License 2.0.

Related tools

More options with a similar category or technology profile.

McFly logo

McFly

Fly through your shell history with an intelligent neural network search engine.

cheat logo

cheat

Interactive command-line cheatsheets for system administrators and software engineers.

Pipenv logo

Pipenv

Python development workflow for humans uniting Pipfile, pip, and virtualenv.

Rye logo

Rye

Comprehensive Python package and workspace management tool written in Rust.

OpenCTI FAQs

OpenCTI is listed as a Productivity tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

Start with the project's GitHub repository and official website for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

OpenCTI is listed under the Apache-2.0 license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

OpenCTI is listed as an alternative to Recorded Future. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.