OpenCTI Now Available on Microsoft Azure Marketplace

We are thrilled to announce that OpenCTI Enterprise Edition is now available as a Software-as-a-Service (SaaS) offering on the Microsoft Azure Marketplace! This milestone represents another step forward in our mission to make advanced cyber threat intelligence capabilities more accessible to organizations worldwide.

Expanding Deployment Options for the Growing OpenCTI Community

The OpenCTI community has been growing at a remarkable pace, with cybersecurity teams across industries recognizing the platform’s value in managing and operationalizing threat intelligence. With this new Azure Marketplace offering, we’re providing our community with additional deployment flexibility, allowing organizations to leverage OpenCTI while taking advantage of Azure’s robust cloud infrastructure.

This SaaS offering simplifies procurement and deployment, enabling security teams to rapidly implement OpenCTI without the complexity of managing the underlying infrastructure. For organizations already utilizing Azure, this integration provides a seamless pathway to incorporate advanced threat intelligence capabilities into their security operations.

Fully Managed Service on Your Azure Environment

What makes this offering unique is that while the platform runs within your own Azure instance, Filigran’s Customer Success team handles all platform management aspects. This hybrid approach means you maintain control over your data and infrastructure while benefiting from expert support:

• Filigran ensures your OpenCTI platform is always updated to the latest version with all security patches
• Our team configures and maintains all required integrations and connectors
• You retain full control of your data as everything operates within your Azure environment

Powerful Azure Security Integrations

OpenCTI seamlessly connects with Azure’s security solutions to enhance your threat intelligence operations:

Microsoft Security Suite Integration

OpenCTI offers comprehensive integration with Microsoft’s security tools, creating a unified threat intelligence ecosystem. Push contextual threat data to Microsoft Sentinel for improved detection while ingesting alerts and incidents back into OpenCTI for analysis. Ingest Microsoft Defender incidents directly into your intelligence platform for enhanced contextualization. Coming soon, our new connector will enable direct integration with Microsoft Defender Threat Intelligence, allowing you to incorporate Microsoft’s extensive threat data into your knowledge base.

Leading the Way in Cyber Threat Intelligence

OpenCTI continues to set the standard for open-source threat intelligence platforms, offering unparalleled capabilities for collecting, analyzing, and sharing threat intelligence in an accessible format. The platform’s structured approach to intelligence, based on the STIX2 standard, ensures compatibility with a wide range of security tools while providing the depth and context needed for effective threat analysis.

“Our mission has always been to democratize access to advanced threat intelligence capabilities,” said Jan Johansen, SVP of Global Alliances. “By bringing OpenCTI to the Azure Marketplace, we’re enabling more organizations to leverage our platform within their existing cloud environments, ultimately strengthening their security posture against evolving threats.”

Getting Started

Deploying OpenCTI Enterprise Edition on Azure requires minimal technical prerequisites. Organizations will need an Azure account and the ability to delegate a DNS zone. The streamlined deployment process ensures you can quickly begin operationalizing threat intelligence within your security operations.

To learn more about OpenCTI on Azure Marketplace, visit the official listing.

For organizations looking to explore other deployment options, remember that OpenCTI is also available on AWS Marketplace as announced last year.

Join the growing community of security professionals who trust OpenCTI to manage their threat intelligence operations and take advantage of this new deployment option today!