Filigran unveils XTM One, an AI-native orchestration layer for continuous threat exposure management that unifies OpenCTI and OpenAEV into a single continuous workflow on the Filigran XTM Platform.

XTM One is pitched as an operating-system–like layer for threat management, designed to scale automation to outpace adversaries and reduce manual coordination across tools.

The platform turns AI into the operating system for threat management, enabling junior analysts to contribute quickly while freeing experienced teams from repetitive tasks.

Industry analysts and investors tout the open-source foundation, speed, transparency, and evidence-based risk reduction as core benefits, bolstering investment rationale.

Analysts note agent-based orchestration is essential as threat volumes outpace human capacity, enabling faster, evidence-based risk reduction at scale.

The launch aligns with rising investor interest in CTEM and threat exposure management as a major cybersecurity growth area, signaling a move to operationalise threat intelligence at scale.

Filigran executives stress accessibility through natural language interactions, letting junior analysts contribute effectively while reducing repetitive work for seasoned practitioners.

Experts emphasize that AI-driven automation and open-source foundations improve transparency, context, and effectiveness in threat intelligence and remediation.

Industry voices from Omdia and investor Karine Peters of T.Capital highlight AI orchestration as key to scaling CTEM and view the open-source community as a strength for Filigran.

Melinda Marks of Omdia and Karine Peters of T.Capital praise the AI-native, open-source approach and its potential for broader adoption of threat intelligence at scale.

The aim is to shift CTEM from periodic assessments to a continuous loop of discovery, prioritization, validation, and remediation that adapts to evolving threats and focuses on genuine business risk.

XTM One ships in three tiers with built-in agents and BYOLLM at no extra cost for existing OpenCTI/OpenAEV customers, plus separate licensing for advanced features; a free open-source MCP server is also offered.