← Back to home
Comparison · Analytics

OpenCTI vs ThingsBoard

A side-by-side editorial comparison of OpenCTI and ThingsBoard — release velocity, themes, recent moves, and the top alternatives to consider.

Shared themes:lts

OpenCTI vs ThingsBoard: at a glance

FeatureOpenCTIThingsBoard
SectorAnalyticsAnalytics
Velocity score5.05.0
Sparks · 30d00
Top themesthreat-intelligence, case-management, lts, security-fixesiot platform, security, release maintenance, lts
Last editorial update11h ago10d ago
WebsiteVisit →Visit →

What is OpenCTI?

OpenCTI adds custom fields to cases and backports its draft-access fix to both LTS lines.

OpenCTI 7.261106.0 adds custom fields and templates to Cases and Incidents, a configurable de-duplication window for sightings, blog post items and form intake for view-only users, plus Elasticsearch query speedups. The same week, LTS 7.260811.0-lts.2 and 7.260309.0-lts.9 backport the security fixes from the main line: draft-context checks on TAXII and HTTP routes, a timeout for JSONPath ingestion scripts and a size cap on artifact imports.

Read the full OpenCTI trajectory →

What is ThingsBoard?

ThingsBoard closes a script-sandbox file write and dozens of CVEs on its 4.3 and 4.2 lines.

ThingsBoard keeps three lines patched in parallel: 4.4, 4.3.1 and the 4.2 LTS. On October 27, 4.3.1.8 and 4.2.2.8 shipped a large security batch, including a fix for arbitrary file writes from the TBEL script sandbox and tamper protection for the OAuth2 authorization cookie. On October 30, 4.4.0.2 followed with security patches, though its notes list no details.

Read the full ThingsBoard trajectory →

OpenCTI vs ThingsBoard: editorial side-by-side

O
OpenCTI
ANALYTICS
5.0

OpenCTI adds custom fields to cases and backports its draft-access fix to both LTS lines.

◆ Current state

OpenCTI 7.261106.0 adds custom fields and templates to Cases and Incidents, a configurable de-duplication window for sightings, blog post items and form intake for view-only users, plus Elasticsearch query speedups. The same week, LTS 7.260811.0-lts.2 and 7.260309.0-lts.9 backport the security fixes from the main line: draft-context checks on TAXII and HTTP routes, a timeout for JSONPath ingestion scripts and a size cap on artifact imports.

◆ Where it's heading

The main line keeps adding analyst and case-management features every few days, while two LTS lines get the security fixes. Case management is gaining configurability, after custom views and Hub imports in late October.

◆ Prediction

Expect further case and incident customization in the next main releases and another LTS round when security fixes land.

T
ThingsBoard
ANALYTICS
5.0

ThingsBoard closes a script-sandbox file write and dozens of CVEs on its 4.3 and 4.2 lines.

◆ Current state

ThingsBoard keeps three lines patched in parallel: 4.4, 4.3.1 and the 4.2 LTS. On October 27, 4.3.1.8 and 4.2.2.8 shipped a large security batch, including a fix for arbitrary file writes from the TBEL script sandbox and tamper protection for the OAuth2 authorization cookie. On October 30, 4.4.0.2 followed with security patches, though its notes list no details.

◆ Where it's heading

After the 4.4 feature release the project is back to maintenance on all supported lines, mostly security and runtime fixes, with the IoT Hub catalogue getting steady UI work alongside. Feature work arrives in larger, infrequent releases.

◆ Prediction

Expect the next entries to be routine patches across all three lines. The notes do not say whether 4.4.0.2 carries the same fixes as the 4.3 batch.

Alternatives to OpenCTI and ThingsBoard

Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either OpenCTI or ThingsBoard.

See all OpenCTI alternatives → · See all ThingsBoard alternatives →

Recent activity from OpenCTI and ThingsBoard

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 3d agoOpenCTIOpenCTI 7.261106.0: custom fields and templates for cases
  2. 3d agoOpenCTIOpenCTI LTS 7.260811.0-lts.2 backports draft-access fix
  3. 3d agoOpenCTIOpenCTI LTS 7.260309.0-lts.9 backports draft-access fix
  4. 6d agoOpenCTIOpenCTI 7.261103.0: Filigran license install, draft access checks
  5. 10d agoOpenCTIOpenCTI 7.261030.1: indicator lifecycle kept on low-confidence upsert
  6. 10d agoOpenCTIOpenCTI 7.261030.0: Hub import for views, manual coverage updates
  7. 10d agoThingsBoardThingsBoard 4.4.0.2: security patches, no details listed
  8. 13d agoThingsBoardThingsBoard 4.3.1.8 fixes TBEL sandbox file write and CVE batch
  9. 13d agoThingsBoardThingsBoard 4.2.2.8: LTS security backport
  10. 18d agoThingsBoardThingsBoard 4.4.0.1: 2026 time zone data update
  11. 18d agoThingsBoardThingsBoard 4.3.1.7: 2026 time zone data update
  12. 18d agoThingsBoardThingsBoard 4.2.2.7: 2026 time zone data update

Frequently asked questions

What is the difference between OpenCTI and ThingsBoard?

Both compete on the same themes — lts — within Analytics. OpenCTI and ThingsBoard are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is OpenCTI better than ThingsBoard?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. OpenCTI and ThingsBoard are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.

What are the best alternatives to OpenCTI?

Top OpenCTI alternatives in Analytics are ranked by recent ship velocity. Browse the "OpenCTI alternatives" section above for the current picks, or visit /alternatives/opencti for the full list with editorial commentary on each.

What are the best alternatives to ThingsBoard?

Top ThingsBoard alternatives in Analytics are ranked by recent ship velocity. Browse the "ThingsBoard alternatives" section above for the current picks, or visit /alternatives/thingsboard for the full list with editorial commentary on each.