OpenCTICyber threat intelligence platform.
Cyber threat intelligence platform.
OpenCTI is a web application for organizing and analyzing cyber threat intelligence, including technical observables and contextual information. It represents knowledge with STIX 2, links information to reports and relationships, and exposes a GraphQL API. Organizations deploy it through Docker, Helm, or manual installation and connect other intelligence tools through import, export, and connector workflows.
OpenCTI README · Reviewed 2026-10-28
- 01 / Feature noteLinked intelligence
Organize threat information and relationships with references to originating reports and events.
Feature source ↗ - 02 / Feature noteIntelligence exchange
Import and export intelligence using CSV or STIX 2 formats.
Feature source ↗
GitHub stars
10,257
Detected license
Unknown
i
Not reported by GitHub.
Verify against official terms.
Repository created
2018-12-17
Repository push
2026-11-04
2018-12-17GitHub release
2026-11-03 · 7.261103.0Repository push
2026-11-04
GitHub stars
Unknown
i
Cached history uses a different month window; chart withheld until aligned.
Latest attempt: ok · Checked 2026-10-15T19:40:39.600225+00:00 · Last successful fetch 2026-10-15T19:40:39.600225+00:00 · Provider source
Hacker News stories
Unknown
i
OpenSSF Scorecard
Unknown
i
No result returned.
Checked 2026-10-27T00:18:10Z · Latest attempt: not found · Provider source
GitHub release
Published 2026-11-03
i
Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source
Unknown
