Skip to content

Releases: FiligranHQ/xtm-hub

OpenCTI Playbooks library with news feed

16 Jun 10:48

Choose a tag to compare

📒 OpenCTI Playbooks Library is now available in XTM Hub

Playbooks in OpenCTI are powerful but often underused because they can feel complex to get started with. The new Playbooks Library provides ready-to-use templates that are easy to browse, understand, and reuse.

📌 How it works & key features

  • A Playbooks Library with public browsing and dedicated playbook pages with descriptions, usage guidance, expected outcomes, and compatibility info
  • News feed for Playbooks in OpenCTI: get notified when new playbooks are released
  • Playbooks can be downloaded & shared
  • One-click deploy to OpenCTI for OpenCTI Enterprise Edition users

🔗 Get started

👉 Access Playbooks: https://hub.filigran.io/en/cybersecurity-solutions/opencti-playbooks

👉 Documentation: https://docs.hub.filigran.io/latest/libraries/opencti-playbooks/?h=playbooks

This release also includes bug fixes and UI improvements.

What's Changed

Read more

📰 News feed for OpenCTI Custom Dashboards

28 May 06:10

Choose a tag to compare

News feed for OpenCTI Custom Dashboards

We’re introducing the Newsfeed for XTM Hub Custom Dashboards. Users can stay informed when new Custom Dashboards are published or updated in XTM Hub.

📌 How it works & key features

  • Newsfeed items are automatically created when dashboards are published or updated in XTM Hub.
  • Clicking a notification opens the related Hub page with automatic authentication redirect if needed.
  • You can configure which type of News Feed notification you want to receive in your profile page under the XTM Hub News Feed section.
  • You can view all your past News Feed notifications in the News Feed tab on the Notifications page. It also includes a link to view the resource on XTM Hub.

This News Feed system is a first step toward a broader set of features that will keep OpenCTI (and, in the future, OpenAEV) users fully informed about new resources, platform upgrades, and maintenance—helping you get the most out of your platform with useful resources and updates.

🔗 Get started

👉 Documentation: https://docs.opencti.io/latest/usage/xtm-hub-news-feed/

This release also includes bug fixes and UI improvements.

What's Changed

  • [deps] Update dependency next to v16.2.5 [SECURITY] by @renovate[bot] in #2302
  • [frontend] feat(Roadmap): Change EE tag to the left and not right (#2309) by @hervyt in #2310
  • [frontend] feat(Roadmap): Fix packages (#2309) by @hervyt in #2312
  • [frontend] fix(autoform): bump @filigran/ui to 1.1.2 to fix file field validation (#2298) by @Antoine-Quintin in #2308
  • [deps] Update dependency next to v16.2.6 [SECURITY] by @renovate[bot] in #2311
  • [backend/frontend] refactor(Subscription): Fix subscriptions (#2313) by @hervyt in #2314
  • [deps] Update dependency @vitest/eslint-plugin to v1.6.17 by @renovate[bot] in #2305
  • [deps] Update dependency auth0 to v5.9.1 by @renovate[bot] in #2306
  • [deps] Update dependency next-intl to v4.11.1 by @renovate[bot] in #2318
  • [backend] feat(newsfeeds): use redirect url instead of direct url (#2274) by @carinelebas in #2292
  • [backend] feat(mail): add download and one-click deploy info to library invitation emails (#2276) by @Antoine-Quintin in #2319
  • [deps] Update react monorepo to v19.2.6 by @renovate[bot] in #2322
  • [deps] Update dependency express-rate-limit to v8.5.2 by @renovate[bot] in #2323
  • [deps] Update devDependencies (non-major) by @renovate[bot] in #2321
  • [frontend] fix(csp): fix CSP for YouTube video (#2327) by @jpkha in #2328
  • [backend] feat(news-feed): add scheduled cleanup of expired items (#2197) by @Antoine-Quintin in #2325
  • [frontend] feat(Roadmap): Remove spaces in placeholder (#2334) by @hervyt in #2338
  • [backend] chore(scalar): remove last calls of fromGlobalId/toGlobalId that can be replaced with scalar (#2330) by @carinelebas in #2331
  • [deps] Update dependency @filigran/chatbot to v3.2.2 by @renovate[bot] in #2336
  • [deps] Update dependency auth0 to v5.10.0 by @renovate[bot] in #2337
  • [frontend/backend] feat(opencti): Add opencti playbooks library (#1362) by @Julienger0 in #2303
  • [backend] fix(registration): fix decoding error on organizationid (#2341) by @carinelebas in #2342
  • [frontend] fix(trial): improve mobile layout of trial welcome header (#2329) by @Antoine-Quintin in #2333
  • [backend/frontend] feat(trials): adapt use cases to openaev trials (#2156) by @carinelebas in #2344
  • [deps] Update dependency graphql to v16.14.0 by @renovate[bot] in #2348
  • [deps] Update dependency next-intl to v4.12.0 by @renovate[bot] in #2349
  • [deps] Update dependency react-hook-form to v7.76.0 by @renovate[bot] in #2350
  • [deps] Update dependency tailwind-merge to v3.6.0 by @renovate[bot] in #2351
  • [backend] refactor(organization-management): wrap helper and domain functions in domain constants (#2339) by @Kroustille in #2345
  • [backend/frontend] refactor(Subscription): Add subscription Edition (#2159) by @hervyt in #2320
  • [backend/frontend] refactor(Generators): create generators (#2346) by @hervyt in #2347
  • [deps] Update tailwindcss monorepo to v4.3.0 by @renovate[bot] in #2360
  • [deps] Update actions/github-script action to v9 by @renovate[bot] in #2361
  • [deps] Update dependency tsx to v4.22.1 by @renovate[bot] in #2359
  • [frontend] fix(registration): allow updating platform names with only admin permission (#2332) by @carinelebas in #2363
  • [frontend] feat(i18n): add Japanese locale and prefixed public URLs (#2115) by @Julienger0 in #2238
  • [frontend] feat(NewsFeeds): Fix redirection with documentId (#2353) by @hervyt in #2357
  • Chart cnpg bareman plugin by @pierremahot in #2050
  • [frontend] fix(trials): convert trial page components to client to fix getTranslations error (#2365) by @Julienger0 in #2366
  • [deps] Update dependency tsx to v4.22.2 by @renovate[bot] in #2367
  • [deps] Update devDependencies (non-major) by @renovate[bot] in #2368
  • [deps] Update docker/build-push-action action to v7 by @renovate[bot] in #2370
  • [deps] Update dependency tsx to v4.22.3 by @renovate[bot] in #2378
  • [deps] Update dependency postcss to v8.5.15 by @renovate[bot] in #2377
  • [deps] Update devDependencies (non-major) by @renovate[bot] in #2379
  • [deps] Update dependency pg to v8.21.0 by @renovate[bot] in #2369
  • [frontend/backend] refactor(chatbot): replace Ariane chatbot with Filigran Copilot widget (#2380) by @jbanety in #2381
  • [backend] refactor(document): wrap helper and domain functions in constants (#1905) by @Kroustille in #2383
  • [frontend] fix(copilot): add copilot.filigran.ai to CSP script-src directive (#2380) by @jbanety in #2389
  • [frontend] feat(codegen/react-query): implement new stack (#2355) by @jpkha in #2343
  • [frontend] fix(copilot): hide Copilot widget in non-production environments (#2380) by @jbanety in #2390
  • [frontend/backend] feat(news-feed): add admin soft-delete workflow and related cleanup (#2233) by @Kroustille in #2335
  • [deps] Update dependency @uiw/react-md-editor to v4.1.1 by @renovate[bot] in #2385
  • [frontend] fix(csp): whitelist filigran.io domain in img-src directive (#2380) by @jbanety in #2397
  • [frontend] refactor(test): mutualize duplicated library mocks (#2375) by @Kroustille in #2393
  • [frontend/backend/e2e-tests] chore(*): use catalog to uniform version (#2394) by @jpkha in #2364
  • [frontend] fix(copilot): add widget to public pages (#2380) by @jbanety in #2399

Full Changelog: v1.21.30...v1.23.2

XTM Platform Roadmap

12 May 12:49

Choose a tag to compare

XTM Platform Roadmap in XTM Hub

We’re introducing the XTM Platform Roadmap, now available in XTM Hub. It enables teams to share a clear product roadmap with internal and external audiences, improving transparency and alignment.

How it works & key features

  • Explore what’s happening Now, Next, and Under consideration
  • View roadmaps across all products or filter by product
  • Integration-ready use cases clearly identified with problem, solution and value

Ask Ariane chatbot updated

We’ve upgraded Ask Ariane to ensure consistency with our core products, including OpenCTI and OpenAEV.

Get started

👉 Access: XTM Hub tile or left menu https://hub.filigran.io/cybersecurity-solutions/xtm-suite-roadmap

This release also includes bug fixes and UI improvements.

👉 Documentation: https://docs.hub.filigran.io/latest/user/roadmap/

What's Changed

Read more

RSS Feeds in the OpenCTI integrations Library

13 Apr 13:17

Choose a tag to compare

📥 RSS Feeds — OpenCTI Integration Feeds Library

We’re excited to announce that RSS feeds are now available in the OpenCTI Integrations Library, enabling users to seamlessly deploy them from the Hub directly to their OpenCTI platform.

How it works & key features

  • 🔍 Browse & filter RSS feeds
  • ⬇️ Download available RSS feeds : On the OpenCTI integrations library, you can browse the available feeds, select the ones that suit your needs, and download them as JSON files.
  • 🪄Deploy in one-click available RSS feeds : if your OpenCTI platform is registered in the XTM Hub, you can deploy them in one-click
  • 🔀 Share RSS feeds on social media

🔗 Get started

👉 Discover a curated collection of RSS feeds designed to help you get the most out of OpenCTI here:
https://hub.filigran.io/cybersecurity-solutions/opencti-integrations

👉 Documentation: https://docs.hub.filigran.io/latest/libraries/integrations/

What's Changed

Read more

OpenAEV Enterprise Edition Free Trials

10 Mar 09:40

Choose a tag to compare

OpenAEV Enterprise Edition Free Trials are now available for 30 days, directly accessible from the XTM Hub or the from the OpenAEV Live Demo.

Highlights

  • 🔓 Full Enterprise Edition access included (all EE features)
  • 30-day trial with visible start and end dates
  • 🌍 Region-based deployment, subject to capacity (waiting list available)
  • 🏢 One trial per organization

Access & Support

  • User roles are aligned between XTM Hub and OpenAEV (Observer, Manager, Admin)
  • Use Contact Us to reach the Sales team for licensing, pricing, or enterprise questions.

Start your OpenAEV Enterprise Edition free trial today!

📘 Explore the updated documentation:

What's Changed

  • [backend] fix: use global ids for service documents by @Kroustille in #1418
  • [frontend] fix(banners): make public free trial banner sticky, and rename callout to banner in code #1419 #1222 by @carinelebas in #1420
  • [backend/frontend] feat: add ability to update trials quota per region by @Kroustille in #1421
  • [frontend] fix scroll position in public path #1425 by @jpkha in #1427
  • ci: optimize CI/CD workflow and remove Nx overhead by @jbanety in #1398
  • [backend] refactor(portalContext): remove serviceInstanceId from portalContext #1423 by @carinelebas in #1430
  • [frontend/backend] feature(freetrials): add cancellation reason #1383 by @carinelebas in #1431
  • [backend] feat(trials): send a creation notification to admins (#1432) by @jbanety in #1434
  • [backend] feat: send pending user digest to organization administrators by @Kroustille in #1438
  • [backend] refactor: move pending features to new module by @Kroustille in #1440
  • [backend/frontend] rename(integrationFeeds): Rename integration feeds library to integrations #1317 by @hervyt in #1422
  • [backend] refactor: move last document domain methods to domain object by @Kroustille in #1426
  • [frontend] chore: remove user info from mobile header by @Kroustille in #1446
  • [Integrations] - Rename translation key #1448 by @hervyt in #1449
  • [frontend] fix(labels): change sorting order from descending to ascending by @jbanety in #1454
  • [Integrations] - Add opencti-integration-feeds in redirection #1459 by @hervyt in #1460
  • [Integrations] - Add opencti-integration-feeds public in redirection #1459 by @hervyt in #1461
  • [backend] feature(monitoring): monitor sse by @carinelebas in #1458
  • [Email] - Improve emails #1444 by @hervyt in #1463
  • [Badge] - Pass labels into capitalize #1456 by @hervyt in #1464
  • [backend] feature(registration): add platform_url in telemetry event #1382 by @carinelebas in #1462
  • [backend] fix: handle null last name while sending pending digest by @Kroustille in #1445
  • [frontend] feat(trials): improve cancellation info display with tooltip and unified date format by @jbanety in #1467
  • [frontend] change lib Filigran to @filigran #1424 by @jpkha in #1428
  • [backend/frontend] feature(integration): sort integrations alphabetically, and fix share tooltip #1242 by @carinelebas in #1473
  • [backend] feature(freetrial): send new trial mail to hub instead of admins #1472 by @carinelebas in #1474
  • [backend/frontend] refactor: use document methods instead of custom dashboard by @Kroustille in #1468
  • [backend] refactor(portalContext): remove dbUnsecure #1476 by @carinelebas in #1479
  • [backend/frontend] refactor: use generic methods for all document types by @Kroustille in #1478
  • [frontend] handle legacy service def identifier in redirect by @jbanety in #1493
  • [frontend] add region placeholder in Start a trial form by @jbanety in #1497
  • [frontend] styles(user-form): remove primary border on organization cards by @jbanety in #1499
  • Update dependency react to v19.2.3 by @renovate[bot] in #1488
  • Update dependency body-parser to v2.2.2 by @renovate[bot] in #1487
  • Update dependency autoprefixer to v10.4.23 by @renovate[bot] in #1485
  • Migrate Renovate config by @renovate[bot] in #1486
  • [Snyk] Upgrade @types/node from 24.10.1 to 24.10.4 by @jpkha in #1482
  • [Snyk] Upgrade tsx from 4.20.6 to 4.21.0 by @jpkha in #1483
  • [backend/frontend] feat: add TAXII feed management (#1451) (#1098) by @Kroustille in #1490
  • Update dependency @uiw/react-md-editor to v4.0.11 by @renovate[bot] in #1484
  • [frontend] chore: update select subtype translation by @Kroustille in #1504
  • [backend/frontend] feature(pendingUsers): accept/reject pending users in bulk #1338 by @carinelebas in #1491
  • [backend/frontend] feat: add Streams management by @Kroustille in #1501
  • [frontend] fix: use updated mapping for CSV feed one click deploy by @Kroustille in #1511
  • [backend/frontend] refactor: move user service methods in app and domain by @Kroustille in #1508
  • [frontend] feat: display integration type and subtype on details pages by @Kroustille in #1517
  • [backend/frontend] give group REVENUE_SALES view on READ_TRIALS #1439 by @jpkha in #1502
  • [frontend] - (Trials) Add Need support button #1495 by @hervyt in #1519
  • [Snyk] Security upgrade node from 24.11.1-alpine3.22 to 24.13.0-alpine3.22 by @guillaumejparis in #1518
  • [frontend] fix(markdown): align styles between public and private pages by @jbanety in #1529
  • [backend/frontend] feat: add third party integrations management #1507 by @Kroustille in #1520
  • [frontend] - (TaxiiFeeds) Add 1 Click deploy #1186 by @hervyt in #1516
  • [frontend] fix missing services in admin panel #1533 by @jpkha in #1541
  • [backend] fix(mails): add missing /app prefix in service email link by @jbanety in #1542
  • [Email] - Change integrations email wording #1443 by @hervyt in #1465
  • [backend/frontend] feat: fill and display integration feed url (#1505) by @Kroustille in #1544
  • [backend/frontend] feature(connectors): merge type and subtype filters and display with logical expression #1166 #1280 by @carinelebas in #1530
  • [backend] feature(seed): create pending users on fenv and dev by @carinelebas in #1535
  • fix(pendingUsers): don't add filigran users to pending users #1543 by @carinelebas in #1550
  • [backend] fix: use right property in migration and feed_url is optional by @Kroustille in #1551
  • fix(selected filters): validate filters in local storage by @carinelebas in #1554
  • [backend] fix(service-instance): filter subscription by user organization in autojoin flow by @jbanety in #1556
  • [frontend] add new group for revenue leadership #1527 by @jpkha in #1555
  • chore(logs): improve error logging by @carinelebas in #1558
  • [backend] sessions was not updated with the correct organization #1557 by @jpkha in #1560
  • [frontend] - (Integrations) Rework integration cards #1522 by @hervyt in #1537
  • fix(service filters): validate format of filters in local storage #1561 by @carinelebas in #1562
  • [frontend] - (ServiceCard): Improve UI #1569 by @hervyt in #1571
  • [frontend] fix(banner): align text with button #1570 by @carinelebas in #1572
  • [frontend] - (Integration) Adjust condition on author display, paybac… by @hervyt in...
Read more

OpenCTI Integrations Library in XTM Hub

30 Jan 11:27

Choose a tag to compare

The new OpenCTI Integrations Library in XTM Hub, allowing to you to easily deploy any resources you used to find on the now deprecated Notion Ecosystem page.

What’s new?

All OpenCTI integrations are now available in one live catalog — including connectors, TAXII & CSV feeds, live streams, and third-party integrations (SIEM, SOAR,etc.).

Why it matters

This makes it faster and easier to discover, deploy, and reuse integrations — reducing manual setup and accelerating time-to-value.

How it works

Browse a searchable library, download or export configurations, and import integrations into OpenCTI in one click.

🔗 Get started

👉 Explore the new OpenCTI Integrations Library in XTM Hub: https://hub.filigran.io/cybersecurity-solutions/open-cti-integrations
👉 Documentation: https://docs.hub.filigran.io/latest/libraries/integrations/

What's Changed

Read more

OpenCTI Enterprise Edition Free Trials

17 Dec 16:35

Choose a tag to compare

OpenCTI Enterprise Edition Free Trials are now available for 30 days, directly accessible from the XTM Hub or the from the OpenCTI Live Demo.

Highlights
🔓 Full Enterprise Edition access included (all EE features)
⏱ 30-day trial with visible start and end dates
🌍 Region-based deployment, subject to capacity (waiting list available)
🏢 One trial per organization

Access & Support
User roles are aligned between XTM Hub and OpenCTI (Reader, Analyst, Admin)
Use Contact Us to reach the Sales team for licensing, pricing, or enterprise questions.
Start your OpenCTI Enterprise Edition free trial today!

📘Explore the updated documentation:
XTM Hub: https://docs.hub.filigran.io/latest/user/freetrials/

What's Changed

  • [frontend] modify manager_supported filter translation by @jpkha in #1288
  • fix(deps): update dependency glob to v11.1.0 [security] by @renovate[bot] in #1270
  • chore(deps): update devdependencies (non-major) by @renovate[bot] in #1282
  • chore(deps): update dependency @types/react to v18.3.27 by @renovate[bot] in #1281
  • [backend] feature(freeTrials): send mails when requested, or autoregisters #1250 by @carinelebas in #1289
  • [frontend] fix(organization change): hook error when changing organization #1295 by @carinelebas in #1296
  • [backend] - feature(freetrials): change title for trial requested mail #1297 by @carinelebas in #1298
  • [Refactor] remove portal context from documents function signature #1293 by @carinelebas in #1294
  • [backend/frontend] feat: add free trial details page by @Kroustille in #1279
  • [renovate] modify config for major version by @jpkha in #1312
  • [backend] add more detail in log error by @jpkha in #1311
  • [backend] add endpoint createAudienceAPI with Auth0 #1299 by @jpkha in #1303
  • [frontend/backend] filter label by document type #1314 by @jpkha in #1316
  • [backend] init ServiceGroup_User and ServiceGroup DB #1300 by @jpkha in #1315
  • [backend] refactor: move MinIO features in a new client file by @Kroustille in #1307
  • [backend] refactor: split document domain into multiple files by @Kroustille in #1313
  • [frontend] fix intergration feed filter public path #1314 by @jpkha in #1320
  • [Snyk] Upgrade @types/node from 24.7.0 to 24.10.0 by @xfournet in #1321
  • [backend] fix dependencies by @jpkha in #1327
  • [Snyk] Upgrade tsx from 4.19.4 to 4.20.6 by @xfournet in #1322
  • [frontend] feat: replace MSSA link with real URL by @Kroustille in #1324
  • [backend] feat: return not_found in refresh when platform is not found by @Kroustille in #1304
  • [frontend] fix Add a new resource visible #1328 by @jpkha in #1332
  • [frontend] - fix(freetrials): fix hook order issue preventing changing orga #1333 by @carinelebas in #1334
  • [Snyk] Fix for 2 vulnerabilities by @Kedae in #1340
  • [frontend] Rework and restrict User_Service by @jpkha in #1266
  • feat(deployments): replace status with hub_status, target_state, actual_state by @jbanety in #1325
  • [frontend/backend] - fix(freetrials): fix link for provisoning status and don't display button if no link to opencti #1344 by @carinelebas in #1345
  • [Snyk] Security upgrade next from 15.5.6 to 15.5.7 by @xfournet in #1351
  • [backend] fix query ambiguous on delete document by @jpkha in #1348
  • [frontend] avoid to call DeploymentRequestsAvailableQuery for simple user by @jpkha in #1349
  • [backend] refactor(transactions): use wrapper to manage transactions #1336 by @carinelebas in #1342
  • [backend] update to expressv5 by @jpkha in #1346
  • [backend/frontend] feat: add ability to manage user groups of a trial by @jpkha in #1330
  • [backend/frontend] feat: improve wording and add OpenCTI 101 on learn more page by @Kroustille in #1356
  • feat(deloyments): ability to send contactUs from OpenCTI platform by @jbanety in #1355
  • [backend] refactor: split document domain into multiple file (2nd round) by @Kroustille in #1358
  • [frontend] display user capability on UsersList non-admin by @jpkha in #1352
  • [backend/frontend] feature(freeTrials): new trials dashboards page #1246 by @carinelebas in #1357
  • [frontend] Upgrade react version by @jpkha in #1360
  • [backend] - fix(freeTrials): compute hub_status based on actual_state #1364 by @carinelebas in #1365
  • [config] remove unecessary dependencies by @jpkha in #1366
  • [backend/frontend] feature(freetrials): send mails for queued and provisioning status(and add again provisioning) #1285 by @carinelebas in #1368
  • [backend] chore: set correct versions for refrehs connectivity not found feature by @Kroustille in #1375
  • [backend] Remove group for user_metadata if empty by @jpkha in #1376
  • [backend/frontend] feat(deployments): add domain blacklisting to prevent deployment creation (#1178) by @jbanety in #1377
  • [backend/frontend] feat: allow trials requests reordering in admin panel by @Kroustille in #1367
  • [frontend] feat(trial): improve learn more page and fix CTA displays by @Kroustille in #1371
  • [backend/frontend] feat(trials): contact us from detail page (#1163) by @jbanety in #1378
  • [backend] chore: improve wording of free trial emails by @Kroustille in #1380
  • [frontend] fix: use new query on tagged links to remove mandatory capability by @Kroustille in #1374
  • [frontend] chore(trials): change no availability modal message (#1386) by @jbanety in #1387
  • [backend] fix issue with auth0 and add tests by @jpkha in #1381
  • [frontend/backend]: feature(freetrials): cancel trials #1188 by @carinelebas in #1384
  • [frontend] update Nextjs 15.5.9 and React 19.2.3 by @jpkha in #1390
  • [backend] feature(freeTrials): handle freeTrials expiration #1385 by @carinelebas in #1389
  • [backend] - fix(freeTrials): set unprovisioned target_status when cancelled trial is queued #1392 by @carinelebas in #1393
  • [backend/frontend] feat: handle deployment requests quotas by @Kroustille in #1388
  • [backend/frontend] feat: display region quotas in trials dashboard by @Kroustille in #1394
  • [frontend] feature(freetrials): remove feature flags #1396 by @carinelebas in #1397
  • [frontend] feature(registration): registered platform details page #1305 by @carinelebas in #1395
  • [frontend] (admin) Add platform provisioning in running tabs by @jpkha in #1399
  • [backend] missing enum in DeploymentRequestOrdering by @jpkha in #1400
  • [frontend] fix(freeTrials): add missing trial block on free-trial page by @carinelebas in #1402
  • feature(registration): move update button from hover to page #1401 by @carinelebas in #1405
  • [frontend] switch banner issue #1407 by @jpkha in #1413
  • [frontend] feature(freetrials): remove tile from personal space #1410 by @carinelebas in #1414
  • fix(freetrials): redirect to registration page when needed #1416 by @carinelebas in #1417
  • [backend/frontend] feat: add public learn more page by @Kroustille in #1415

New Contributors

Full Changelog: v1.11.0...v1.13.0

One-Click Deploy for Connectors in the OpenCTI Feeds Library

24 Nov 15:00

Choose a tag to compare

One-Click Deploy for Connectors in the OpenCTI Feeds Library

This release delivers a major upgrade to the OpenCTI Integration Feeds Library, making it easier for you to discover, evaluate, and deploy connectors. You can now browse all connectors—official or community—filter them by use case, and even deploy them to your OpenCTI platform in one click (with supported platform versions and Enterprise Edition).


1. Connector Discovery & Exploration

Unified Connector View : Access all connectors in one centralized place: the integrations feeds library.

Advanced Filtering: Quickly find what you need with filters by:

  • Type: External import, Internal import file, External import file, Enrichment
  • Use case: Malware Analysis, Threat Hunting, Vulnerability Intelligence, etc.
  • Deployment type: Automatic, Manual
  • Platform compatibility: Deploy connectors that are compatible with your OpenCTI platform.

Public Connector Pages: Access a connector’s public information page without logging into the Hub.

Social Sharing: Share connectors directly on social networks.


2. One-Click Deployment (Enterprise Edition)

Deploy a connector to your OpenCTI platform instantly from the Hub.


📘 Explore the updated documentation:

v1.9.0 - OpenAEV Registration & One-click Deploy of Scenarios

29 Oct 09:01

Choose a tag to compare

🚀 Main highlight for this launch: Deploy in one-click scenarios shared by the Filigran Team from the Hub to your OpenAEV platform.


  • One-Click Deploy for OpenAEV scenarios

    Deploy a scenario to your OpenAEV platform in a single step, simplifying data integration.

  • OpenAEV Registration

    In order to access the one-click deploy functionalities, you’ll first need to configure the registration of your openAEV platform in the XTM Hub.


📜 To make the most of these new features, be sure to explore our updated documentation:

on XTM Hub :

on OpenAEV:

And take a look at our blogpost!

This release also includes bugs fixes and UI improvements. Here is the complete Release Note:

What's Changed

  • [e2e] add CTRF report to display in PR comment by @jpkha in #840
  • [backend/frontend] fix(redirect): redirect to the correct organization thanks to platform_id (#835) by @jbanety in #850
  • [backend] fix service id page #852 by @jpkha in #853
  • URGENT [backend] - fix(Download): Allow user to download without any connection #849 by @hervyt in #855
  • Prepare release 1.6.1 by @hervyt in #856
  • [backend] feat: send email when OpenCTI platform is unregistered by @Kroustille in #848
  • [frontend/backend] - feature(pendingUsers/chunk2) Display list of pending users and allow accept/reject #470 by @carinelebas in #839
  • [backend] - fix(pendingUser) delete migration script that fails with anonymized data #470 by @carinelebas in #858
  • [backend] - feature(pendingUser) add feature flag #470 by @carinelebas in #860
  • [config] put codecov in informational by @jpkha in #861
  • [backend/frontend] feat: add ability to download document with new token by @Kroustille in #859
  • [frontend] - fix(1ClickDeploy): Change screenshot on warning #844 by @hervyt in #854
  • [backend/frontend] feat: use associated organization id when redirected by @Kroustille in #864
  • [frontend/backend] - feature(pendingUsers/chunk3) notifications #470 by @carinelebas in #862
  • [backend/frontend]: improve way to get service and add OBAS Scenario email #579 #843 by @hervyt in #836
  • [frontend] - refacto(shareable services) use cvs feeds and obas scenario with common components #866 by @carinelebas in #867
  • Update dependency @vitejs/plugin-react to v4.7.0 by @renovate[bot] in #833
  • Update dependency @types/node to v22.18.0 by @renovate[bot] in #825
  • Add Kibana to XTM Hub stack by @efaure in #871
  • Fix typo in github job job name for restoration of anonymized data by @efaure in #875
  • Make postgres username customizable via through helm values by @nicogigi92 in #876
  • [backend] feature(telemetry/chunk1): setup elastic search in backend. by @carinelebas in #872
  • [frontend] add paths icon in Robots.txt #812 by @jpkha in #886
  • [backend] refactor(documents): change document type to rename OBAS to OpenAEV (#733) by @hervyt in #870
  • [backend] - fix(elasticsearch/kibana): change port to avoid conflicts with opencti and openbas #634 by @carinelebas in #887
  • [backend/frontend] fix(UserServiceAddInput) - change input to create userService #879 by @hervyt in #884
  • Merge for version 1.5.4 by @hervyt in #895
  • Update dependency next to v15.4.7 [SECURITY] by @renovate[bot] in #891
  • Update dependency @apollo/server to v4.12.2 by @renovate[bot] in #874
  • [frontend]-fix(ObasRebrand): Fix redirect #906 by @hervyt in #907
  • Prepare v1.7.2 by @hervyt in #908
  • [backend] feat(dev-users/chunk1): add dev users configuration parsing and validation (#851) by @jbanety in #892
  • [Config] add new automate jobs for updating project by @jpkha in #909
  • [Config] debug body undefined on automate job by @jpkha in #911
  • [backend/frontend] feat: allow user to register on another organization #863 by @Kroustille in #881
  • [backend] - feature(telemetry/chunk2): send events #883 by @carinelebas in #903
  • [backend/frontend] feat: manage OpenAEV registration capability #900 by @Kroustille in #901
  • [backend/frontend] refactor: update registration to allow other platforms by @Kroustille in #905
  • [backend/chart] - feature(elasticSearch) reject_unauthorized for connection to elastic search #915 by @carinelebas in #914
  • [frontend/backend] - (ServiceList): Add filters and information on services as Admin #912 by @hervyt in #924
  • v1.7.3 by @hervyt in #930
  • [backend] feat(dev-users/chunks2-3): implement user seeding helpers and platform integration by @jbanety in #910
  • chore(infra): Templatize kibana ingress annotations by @nicogigi92 in #934
  • [frontend] - chore(customdashboards) refacto with common components #925 by @carinelebas in #926
  • [ci] fix: use first commit line to compute delete feature env identifier by @Kroustille in #931
  • [backend/frontend] register OpenCTI platform with version #919 by @jpkha in #927
  • [backend] feat: assert platform token and id to download resource by @Kroustille in #888
  • [ci] fix: trigger feature env deletion on pull request by @Kroustille in #943
  • [backend/frontend] fix: return null when loading organization of unregistered platform by @Kroustille in #948
  • [frontend] - (Delete Scenario): Fix scenario deleting #938 by @hervyt in #947
  • [backend/frontend]: feature(registration): support openaev for register and unregister #935 by @carinelebas in #939
  • [frontend] - (USersList): No users on personal space #918 by @hervyt in #945
  • [backend] - feature(telemetry): add platform_version for register and one-click-deploy event #920 by @carinelebas in #942
  • [backend] feature(telemetry): add organization_type for all events #936 by @carinelebas in #941
  • [frontend] create route public page for connectors #322 by @jpkha in #921
  • [backend] chore: add automatic GraphQL error mapper by @Kroustille in #951
  • [ci] fix: move auto feature env delete in new workflow by @Kroustille in #962
  • [config] update minio version RELEASE.2025-06-13T11-33-47Z #963 by @jpkha in #964
  • [backend/frontend] display openAEV services #949 by @carinelebas in #950
  • [backend] update backend package and eslint rules by @jpkha in #965
  • chore: improve pull request template by @Kroustille in #970
  • Chore: Update MinIO Version to RELEASE.2025-06-13T11-33-47Z by @troll-os in #971
  • [frontend] - feature(platform services): add background image for openaev and use gradient backgrounds #966 by @carinelebas in #973
  • [e2e] fix ordering service-instance seed and add screenshot test (#972) by @jbanety in #977
  • [frontend] Modify connector card #958 by @jpkha in #960
  • [config] cancel job in progress only in PR by @jpkha in #981
  • Update dependency @elastic/elasticsearch to v8.19.1 by @renovate[bot] in https://github.com/FiligranHQ/xt...
Read more

v1.6.0 - OpenCTI Registration & One-click Deploy of Threat Intelligence resources

12 Aug 12:19

Choose a tag to compare

🚀 Main highlight for this launch: Deploy in one-click custom dashboards or csv feeds shared by the Filigran Team from the Hub to your OpenCTI platform


  • One-Click Deploy for Custom Dashboard

    Once registered, you can now deploy a custom dashboard to your OpenCTI platform with just one click—no manual setup required.

  • One-Click Deploy for CSV Feeds

    Similarly, deploy a CSV feed to your OpenCTI platform in a single step, simplifying data integration.

  • OpenCTI Registration

    In order to access the one-click deploy functionalities, you’ll first need to configure the registration of your openCTI platform in the XTM Hub.


📜 To make the most of these new features, be sure to explore our updated documentation:

on XTM Hub :

on OpenCTI :


What's Changed

  • chore(deps): update yarn to v3.8.7 by @renovate[bot] in #756
  • [backend] add logger next error User not provided #726 by @jpkha in #766
  • Add resource requests and limits by @gileri in #752
  • [frontend] : Choose the uploader on creation&edition of IntegrationFeeds, CustomDashboards and OBAS scenario #706 by @hervyt in #760
  • [backend]: (User) - rename edit User and remove possiblity to edit email #743 by @hervyt in #763
  • chore(deps): update postgres docker tag to v17.2 by @renovate[bot] in #750
  • [backend/frontend] feat: create pages to let user enroll his OCTI instance by @Kroustille in #768
  • [backend] fix(user_service): a bad OR condition leads to bypass security by @jbanety in #773
  • [infra] chore: elasticsearch deployment by @nicogigi92 in #771
  • [backend] security(user_service): add user service security layer by @jpkha in #775
  • [backend] fix(download): dont change all data on doc download #778 by @hervyt in #779
  • [backend] fix(access): make sure first method is handled like select by @jbanety in #783
  • [NX] chore(Nx) Add NX and apps dir to project by @hervyt in #781
  • [config] Add NX cmd in package.json root by @jpkha in #784
  • chore(deps): update typescript-eslint monorepo to v8.37.0 by @renovate[bot] in #765
  • [backend/frontend] feat(enrollment/chunk6): display enrolled OpenCTI instances in the services list (#65) by @jbanety in #776
  • [backend/frontend] refactor: remove ID and GlobalId from front #719 by @jpkha in #777
  • [frontend] feat(custom dashboards): add modal before deleting custom dashboard (#475) by @carinelebas in #787
  • [frontend] - fix(markdown): disable highlight to workaround cursor issue (#723) by @carinelebas in #788
  • fix(ci): use github stylus version because npm one is removed by @Kroustille in #792
  • [ci] chore(gh-actions): on demand restore of anonymized data by @efaure in #786
  • [backend/frontend] feat: add ability to unenroll OpenCTI instance by @Kroustille in #789
  • [frontend] fix(csvfeed/openbas/customdashboards): fix forms labels (#780) by @carinelebas in #794
  • [backend] fix: allow user to enroll when he is the organization admin by @Kroustille in #798
  • [frontend/eackend] feat(1click-deploy) : 1-click deploy of Custom dashboards #312 by @hervyt in #791
  • [frontend] styles(embed): rework embed design (#65) by @hervyt in #800
  • [frontend] - fix(shareableResources): fix metadata alignment (#767) by @carinelebas in #802
  • [frontend] fix(1-click): disable 1-click deploymeent for drafts (#799) by @hervyt in #801
  • [backend] - fix(CSVFeeds) change template name to get access #790 by @hervyt in #803
  • [frontend] - (Subscription) Change wording on modal #808 by @hervyt in #810
  • [backend] feat(pendingUsers/chunk1): add users to pending users table by @carinelebas in #806
  • [backend] - feat(registration) : Send email on registration #65 by @hervyt in #813
  • chore(infra): add elasticsearch ingress config by @nicogigi92 in #809
  • [frontend] - fix(UI) Add favicon to the website #812 by @hervyt in #819
  • [frontend] ui: Improve toasters #816 by @hervyt in #820
  • chore(deps): update dependency vitest to v2.1.9 [security] by @renovate[bot] in #785
  • [frontend/backend] Add codecov by @jpkha in #826
  • chore(infra): remove Elasticsearch ingress monitoring annotation by @nicogigi92 in #827
  • [frontend] feat(1ClickDeploy CSV): display new buttons #525 by @hervyt in #804
  • [frontend] - fix (serviceInstanceQuery) Add fragment and use it in components #578 by @hervyt in #822
  • [backend] feat: add query to check OpenCTI platform enrollment status by @Kroustille in #797
  • [backend] refactor: use user edition app in user resolver by @Kroustille in #583
  • [frontend/backend] exclude some path for TU coverage by @jpkha in #831
  • chore(deps): update dependency @playwright/test to v1.54.2 by @renovate[bot] in #769
  • [backend] - fix(dates) Change dates into dateTime #519 by @hervyt in #829
  • [backend/frontend] feat: prevent platform registration on another organization by @Kroustille in #818
  • [backend/frontend] refactor: replace enroll by register in translations by @Kroustille in #821
  • [backend/frontend] refactor: rename manage octi capability by @Kroustille in #823
  • [frontend] styles(enrollment): better design for instance card by @jbanety in #811
  • [backend/frontend] refactor: rename enroll and octi to register and OpenCTI by @Kroustille in #837
  • [backend] refactor: improve OpenCTI registration by @Kroustille in #841
  • [backend/frontend] chore: remove feature flags for release by @Kroustille in #830

New Contributors

Full Changelog: v1.5.0...v1.6.0