Feedly vs OpenObserve

Feedly now ships on a two-week cadence almost entirely against its Threat Intelligence product. The surface is a family of AI agents — Custom Intel Agents, Cyberattack Agent, Vulnerability Agent, plus tuned models for insider threats and threat-actor campaigns — wrapped in Insight Cards that carry CVE, IoC and detection-rule context. Report Builder and newsletters are the output layer; the RSS reader heritage barely appears in the changelog anymore.

Two threads run through every release. First, agents are being fleshed out into complete workflow objects: they gained Ask AI Analyze and Research actions, then table controls, then alerting. Second, Feedly is closing the trust gap that AI-generated intel opens — MITRE ATT&CK tagging accuracy, exploit confidence and evidence on CVE cards, and Report Builder citations that resolve to the source passage. The integrations (Censys, GreyNoise, VirusTotal, Analyst1, SPL alongside KQL) point at fitting into SOC tooling rather than replacing it.

Expect the alerting added to Custom Intel Agents to spread to the other agents, and continued query-language and enrichment coverage aimed at existing SIEM workflows. Whether the Ask AI Research Playground becomes a real self-serve entry point or stays an evaluation demo is not readable from these entries.