Omni
Omni ships weekly, and almost every week the headline item is an AI feature.
Comparison · Analytics
Cube vs OpenCTI
A side-by-side editorial comparison of Cube and OpenCTI — release velocity, themes, recent moves, and the top alternatives to consider.
Cube vs OpenCTI: at a glance
| Feature | Cube | OpenCTI |
|---|---|---|
| Sector | Analytics | Analytics |
| Velocity score | 6.3 | 6.3 |
| Sparks · 30d | 0 | 0 |
| Top themes | semantic layer, embedded analytics, ai agents, governance | threat-intelligence, stix, data-model, ingestion |
| Last editorial update | 3mo ago | 16h ago |
| Website | — | Visit → |
What is Cube?
Cube ships Creator Mode and a Slack agent — embedded BI and agent surfaces in the same month.
Cube is shipping weekly across three coherent fronts: AI agent surfaces (Slack Agent for ad-hoc questions, Analytics Chat under the hood), embedded analytics (Creator Mode lets customers embed the full Cube app, not just dashboards), and the semantic-layer fundamentals (calculated fields in Explore/Workbook, workbook versions, custom chart palettes, refined filtering). Earlier in the period, data masking, the Viewer role, and scheduled-screenshot notifications rounded out the governance and distribution story.
What is OpenCTI?
OpenCTI spends a release unblocking queues and hardening upserts
7.260817.0 is a fix release. The most consequential item is malformed STIX messages nacking forever and blocking worker queues indefinitely — a stall in the ingestion path rather than a display bug. Alongside it: upsert clearing an existing createdBy when incoming confidence is higher, draft upserts crashing on existing attack patterns, OTP handling in the stream middleware, and case template relation authorization. Score fields were added to threat actor groups, intrusion sets and malware.
Cube vs OpenCTI: editorial side-by-side
Cube
6.3ANALYTICS
Cube ships Creator Mode and a Slack agent — embedded BI and agent surfaces in the same month.
◆ Current state
Cube is shipping weekly across three coherent fronts: AI agent surfaces (Slack Agent for ad-hoc questions, Analytics Chat under the hood), embedded analytics (Creator Mode lets customers embed the full Cube app, not just dashboards), and the semantic-layer fundamentals (calculated fields in Explore/Workbook, workbook versions, custom chart palettes, refined filtering). Earlier in the period, data masking, the Viewer role, and scheduled-screenshot notifications rounded out the governance and distribution story.
◆ Where it's heading
Two compounding bets: (1) the semantic layer + AI agent combination is the moat — every release deepens what an agent or human can do over governed data without writing SQL, and (2) embedding goes from "put a dashboard in your app" to "give your users a full BI app inside your product." These are complementary — Creator Mode is more compelling when the embedded experience can also answer questions in Slack and self-heal queries with calculated fields.
◆ Prediction
Expect Creator Mode to grow more embedding controls (white-labeling, role mapping, audit) since it's positioned for ISVs serving downstream customers. The Slack Agent likely gets siblings (Teams, in-app chat) and tighter wiring to dashboards so an agent can produce a chart, save it, and share it back. Calculated Fields expansion (filtered measures, more types) is already telegraphed in the release notes.
OpenCTI
6.3ANALYTICS
OpenCTI spends a release unblocking queues and hardening upserts
◆ Current state
7.260817.0 is a fix release. The most consequential item is malformed STIX messages nacking forever and blocking worker queues indefinitely — a stall in the ingestion path rather than a display bug. Alongside it: upsert clearing an existing createdBy when incoming confidence is higher, draft upserts crashing on existing attack patterns, OTP handling in the stream middleware, and case template relation authorization. Score fields were added to threat actor groups, intrusion sets and malware.
◆ Where it's heading
The platform's feature energy went into the connector catalog and integrations rework in July, and the releases since have been consolidating: mass operations on relation times, shareable saved searches, and now a pass over ingestion robustness. Adding score to more entity types continues the slow enrichment of the data model that runs underneath the feature work.
◆ Prediction
Given score arriving on three entity types in one release, expect it to keep spreading across the data model, and the queue-blocking class of bug to draw more worker-side hardening.
Alternatives to Cube and OpenCTI
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Cube or OpenCTI.
silx
silx settles into maintenance a release after its PySide6 migration
Plotly
Plotly is turning its cloud into a metered compute platform with an enterprise on-ramp.
aniread
aniread stops asking you to know which tracker wrote the file
Rho
Rho's release machinery finally produced a stable build — and it shipped no new product.
Usermaven
Usermaven closed the loop: data comes in from anywhere, and now it goes back out.
See all Cube alternatives → · See all OpenCTI alternatives →
Recent activity from Cube and OpenCTI
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoOpenCTIMalformed STIX no longer blocks worker queues indefinitely
- 4d agoOpenCTILTS branch gets the security backport: access-scoped streams, dependency sweep
- 7d agoOpenCTIMass operations can now edit relation start and stop times
- 11d agoOpenCTISaved searches and dashboard filters become shareable and reusable
- 15d agoOpenCTIData sanity operations can be stopped mid-run
- 20d agoOpenCTIIntegrations experience reworked around the new catalog, plus draft approval workflows
- 3mo agoCubeCustom chart palettes
- 3mo agoCubeCreator Mode: embed the full Cube application ⚡
- 4mo agoCubeSlack Agent Anyone in your Slack workspace can now send a direct message to the Cube app and get AI-powered answers from the Analytics Ch…
- 4mo agoCubeFilters Update The filtering experience across Explore, Workbooks, and Dashboards has been updated.
- 4mo agoCubeWorkbooks Versions With workbook versions, users can roll back changes to their workbooks and restore the state of the workbook as it was…
- 4mo agoCubeCalculated Fields Calculated fields let you define query-level calculations — such as custom measures or dimensions — directly from the E…
Frequently asked questions
What is the difference between Cube and OpenCTI?
They serve adjacent needs but don't currently overlap on shipped themes. Cube and OpenCTI are shipping at a similar cadence (velocity 6.3 vs 6.3, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Cube better than OpenCTI?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Cube and OpenCTI are shipping at a similar cadence (velocity 6.3 vs 6.3, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
What are the best alternatives to Cube?
Top Cube alternatives in Analytics are ranked by recent ship velocity. Browse the "Cube alternatives" section above for the current picks, or visit /alternatives/cube for the full list with editorial commentary on each.
What are the best alternatives to OpenCTI?
Top OpenCTI alternatives in Analytics are ranked by recent ship velocity. Browse the "OpenCTI alternatives" section above for the current picks, or visit /alternatives/opencti for the full list with editorial commentary on each.