OpenHouse
OpenHouse starts simplifying replication by making its catalog, not Iceberg metadata, the source.
Comparison · Analytics
OpenCTI vs OpenPanel
A side-by-side editorial comparison of OpenCTI and OpenPanel — release velocity, themes, recent moves, and the top alternatives to consider.
OpenCTI vs OpenPanel: at a glance
What is OpenCTI?
OpenCTI's weekly train now merges entities in the knowledge view and reads defanged IOCs.
Filigran ships an OpenCTI weekly build plus backports to two LTS lines (7.2603 and 7.2608). The 10-16 weekly lets analysts merge entities directly from the knowledge view, search defanged indicators globally, collapse the ATT&CK pattern matrix and trim empty sections from generated Fintel reports. Earlier weeklies added enrichment from investigations, chatbot quotas and manual security coverage.
What is OpenPanel?
OpenPanel ships 3.1.0 and 3.1.1 within a day of 3.0, all supporter-first builds with no notes.
OpenPanel's self-hosted line went from 3.0.0 to 3.1.1 in under a day on October 16-17. Each is a build of main delivered to supporters through openpanel upgrade --supporter, with public releases following from the self-hosting tag. None of the three builds carries release notes. Before them came the supporter preview of the rewritten v2 self-hosting CLI and a fix keeping saved reports' filters and cohort ids.
OpenCTI vs OpenPanel: editorial side-by-side
OpenCTI
5.0ANALYTICS
OpenCTI's weekly train now merges entities in the knowledge view and reads defanged IOCs.
◆ Current state
Filigran ships an OpenCTI weekly build plus backports to two LTS lines (7.2603 and 7.2608). The 10-16 weekly lets analysts merge entities directly from the knowledge view, search defanged indicators globally, collapse the ATT&CK pattern matrix and trim empty sections from generated Fintel reports. Earlier weeklies added enrichment from investigations, chatbot quotas and manual security coverage.
◆ Where it's heading
The arc is analyst ergonomics inside the knowledge graph: fewer context switches to deduplicate, enrich and report, layered on an access-control hardening pass that the LTS patches backport. Many long-standing feature requests (some with issue numbers in the 8,000-14,000 range) are now landing, which suggests a backlog-clearing phase.
◆ Prediction
Expect more old knowledge-view and filter requests to close in coming weeklies, and LTS patches that backport this month's access fixes. The entries don't show when a new LTS line will be cut.
OpenPanel
5.0ANALYTICS
OpenPanel ships 3.1.0 and 3.1.1 within a day of 3.0, all supporter-first builds with no notes.
◆ Current state
OpenPanel's self-hosted line went from 3.0.0 to 3.1.1 in under a day on October 16-17. Each is a build of main delivered to supporters through openpanel upgrade --supporter, with public releases following from the self-hosting tag. None of the three builds carries release notes. Before them came the supporter preview of the rewritten v2 self-hosting CLI and a fix keeping saved reports' filters and cohort ids.
◆ Where it's heading
The visible pattern is a fast post-3.0 release train on the self-hosted path, with the new CLI's upgrade command as the delivery channel and paying supporters as the early ring. Two minor bumps right after a major suggest follow-up fixes or small additions on top of 3.0. What 3.x changes for analytics users is still not documented in the entries.
◆ Prediction
Expect more 3.1.x builds and a public 3.x release through the self-hosting tag. Without release notes, it's unclear whether the 3.x line adds analytics features or mainly reworks self-hosting infrastructure.
Alternatives to OpenCTI and OpenPanel
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either OpenCTI or OpenPanel.
Basedash
Basedash adds view-only seats so whole departments can read dashboards without editing.
OpenReplay
OpenReplay adds offline license tokens so air-gapped installs can run licensed.
Tinybird
Tinybird switches off Classic for Free and Developer plans, leaving Forward as the only path.
Fulcrum
Fulcrum gives admins one FastFill Settings panel while Photo FastFill stays in Alpha.
OpenObserve
OpenObserve 1.1.1 follows the 1.1 stable release with indexing and traces UI fixes.
See all OpenCTI alternatives → · See all OpenPanel alternatives →
Recent activity from OpenCTI and OpenPanel
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 10h agoOpenPanelOpenPanel 3.1.1 patch build ships to supporters
- 15h agoOpenPanelOpenPanel 3.1.0 build follows 3.0 within hours
- 1d agoOpenPanelOpenPanel 3.0.0 build ships to supporters first
- 1d agoOpenCTIEntity merge in knowledge view, defanged search, Fintel trimming
- 3d agoOpenCTIEnrichment from investigations, custom fields, 30+ fixes
- 5d agoOpenPanelSelf-hosting CLI v2 rewrite enters supporter-only preview
- 9d agoOpenCTIWeekly build 7.261008.0 ships without release notes
- 10d agoOpenCTILTS 7.2603 patch: feed identity confinement and org segregation fixes
- 15d agoOpenCTIChatbot quotas and feedback, one-click investigation duplication
- 17d agoOpenCTILTS security patch: allowlist bypass and dashboard access fixes
- 19d agoOpenPanelSaved reports keep their filter type and cohort ids
- 2mo agoOpenPanelv2.3.0: CI moves to Node 22.20.0
Frequently asked questions
What is the difference between OpenCTI and OpenPanel?
They serve adjacent needs but don't currently overlap on shipped themes. OpenCTI and OpenPanel are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is OpenCTI better than OpenPanel?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. OpenCTI and OpenPanel are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
What are the best alternatives to OpenCTI?
Top OpenCTI alternatives in Analytics are ranked by recent ship velocity. Browse the "OpenCTI alternatives" section above for the current picks, or visit /alternatives/opencti for the full list with editorial commentary on each.
What are the best alternatives to OpenPanel?
Top OpenPanel alternatives in Analytics are ranked by recent ship velocity. Browse the "OpenPanel alternatives" section above for the current picks, or visit /alternatives/openpanel for the full list with editorial commentary on each.