Filigran, a European open-source threat management company, announced substantial business momentum in the U.
S., marked by a nearly fourfold increase in North American annual recurring revenue (ARR) year-over-year, 29 new enterprise and government customers, and the general availability of its OpenAEV Enterprise Edition. This growth positions Filigran as a rapidly expanding cybersecurity firm in the market.
This expansion aligns with a broader industry shift toward proactive, threat-informed defense strategies. Organizations are increasingly moving beyond reactive alert triage to prioritize real cyber risk reduction, a trend accelerated by Continuous Threat Exposure Management (CTEM) frameworks. Filigran’s XTM platform, utilized by companies like Accenture and Rivian, integrates threat intelligence with adversarial exposure validation to address this evolving need.
Samuel Hassine, co-founder and CEO of Filigran and former Head of Cyber Threat Intelligence at France’s national cybersecurity agency (ANSSI), stated, “Security teams are not losing because they lack data, they’re losing because they can’t move fast enough from intelligence to action. That is the problem Filigran was built to solve. With the XTM platform, we’ve connected threat intelligence, adversarial validation and risk management into a single, AI-native platform. For the first time, security teams can continuously know their threats, test their defenses and prove their resilience, without switching tools.”
Filigran’s U.
S. growth is supported by enterprise adoption across regulated and high-security sectors. In the past year, the company gained customers in financial services, the U.
S. federal government, including the FBI, healthcare, technology, commercial aviation, and retail. Globally, its platform serves organizations such as the European Commission, Capgemini, Bouygues Telecom, EDF, and ASRG.
The company reported 119% net revenue retention, indicating that existing customers are expanding their use of the platform. This expansion included cross-sell and multi-year commitment increases across the customer base. For example, electric vehicle manufacturer Rivian deployed Filigran’s platform across its cybersecurity operations, reporting a 95% improvement in response times and an 88% reduction in mean time to detect threats over 12 months.
Chris Mandich, Director of Cybersecurity Operations at Rivian, commented, “OpenCTI has saved our CSOC several minutes per ticket. When the team goes through hundreds of cases per day, this easily adds up to hours very quickly.”
Chris Novak, former Vice President, Global Cybersecurity Solutions, Verizon Business, added, “The ability to turn intelligence into decisive action is a true competitive advantage. Filigran has given our teams the clarity and confidence to make faster, better-informed decisions, reducing our exposure to risk and allowing us to focus our resources where they matter most. They lead with a customer-centric approach that delivers not only security outcomes, but also enables organizations to move forward with confidence.”
Filigran’s growth trajectory has also garnered independent recognition. The company was included in the top 30 of the 2026 Cyber 150 list, compiled by independent analyst Richard Stiennon using IT-Harvest Dashboard data. This list identifies the 150 fastest-growing midsize cybersecurity companies based on headcount growth. Filigran was recognized for 90% growth in 2025 and was part of the Cyber 150 for the second consecutive year. Additionally, OpenCTI was named a Leader in the G2 Winter 2026 Threat Intelligence Grid® Report, based on user satisfaction and market presence.
In 2025, Filigran continued to enhance its XTM platform, expanding beyond cyber threat intelligence to offer a unified approach to proactive security. The company launched the general availability of OpenAEV Enterprise Edition, described as the industry’s first open-source, threat-informed adversarial exposure validation solution. Integrated with OpenCTI, OpenAEV enables security teams to develop attack scenarios based on prioritized threat intelligence and the MITRE ATT&CK framework, validate defenses across technical, human, and business risk domains, and connect insights to remediation.
Major updates to OpenCTI included expanded AI capabilities, such as AI-assisted threat feed ingestion and a natural-language query chatbot. Enhancements also featured Priority Intelligence Requirements (PIRs) for geography and industry-specific threat prioritization, and an expanded library of over 300 integrations across the security stack. Filigran also introduced XTM Hub, a free, open resource center offering custom dashboards, attack scenarios, integrations, and community instances. Furthermore, Filigran Academy was launched as an interactive training platform for security professionals to develop XTM expertise.
Filigran’s commercial success is built upon one of the largest open-source threat intelligence communities globally. OpenCTI is utilized by more than 6,000 organizations worldwide, supported by a Slack community of over 6,500 members and an ecosystem of more than 300 connectors developed by both Filigran and the community. This practitioner-driven foundation provides Filigran with a product development feedback loop and go-to-market engine. Enterprise customers benefit from open-source transparency without vendor lock-in, while accessing enterprise-grade SaaS, support, and advanced capabilities.
To support its rapid expansion, Filigran increased its U.
S. team by 77% over the past 12 months, bringing its North American headcount to 43, with zero voluntary attrition. Dave Giles was appointed as Chief Customer Officer in February 2026 to lead customer success initiatives. The company also adopted a partner-first go-to-market strategy, resulting in 200% year-over-year growth in partner-attached revenue and the signing of 35 new channel and technology partners globally.
Looking ahead, Filigran enters 2026 backed by more than $100 million in total funding, including a $58 million Series C round led by Eurazeo with additional support from Deutsche Telekom, Accel, and Insight Partners. Priorities for the upcoming year include continued enterprise growth and expansion in North America, as well as international expansion into new markets such as Japan. Filigran will exhibit at RSA Conference 2026, scheduled for March 23-26, at booth N-5786 in San Francisco, offering live demonstrations of the full XTM platform.
