OpenAEV

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

OpenAEV is an Adversarial Exposure Validation platform for building cyberattack simulations and crisis exercises. Its breach and attack simulations draw on cyber threat intelligence and map scenarios to MITRE ATT&CK and ATLAS. Attack Chaining can connect actions into attack paths based on findings, with manual or agent-led orchestration. Teams can also run structured tabletop exercises focused on readiness, escalation, coordination, communication and response. Adversarial Exposure Scoring tracks posture over time and maps coverage to MITRE ATT&CK and domain-based controls. The product lists more than 30 integrations, including connections to OpenCTI, threat feeds, EDR/XDR, SIEM and SOC playbooks. Deployment options include cloud, on-premise and multi-tenant setups; Enterprise Edition also lists air-gapped and bring-your-own-cloud options. Community Edition is free forever for on-premise core simulations and tabletop exercises, with community support. Enterprise pricing is quote-based, and its SaaS trial runs for 30 days. Components are available as Docker images or manual installation packages; Kubernetes is recommended for production deployments.

Who it is for

OpenAEV suits cybersecurity and crisis management teams that need attack simulation, exposure scoring or structured response exercises. Teams can choose a free on-premise Community Edition or evaluate Enterprise Edition through its 30-day SaaS trial.

What is good

Scenarios map to MITRE ATT&CK and ATLAS.
Attack paths can be orchestrated manually or autonomously.
Lists more than 30 integrations.
Community Edition is free forever for on-premise use.
Supports cloud, on-premise and multi-tenant deployments.

What to know first

Enterprise pricing is quote-based.
Community Edition includes community support.
Kubernetes is recommended for production deployments.

Verdict

OpenAEV brings attack simulation, tabletop exercises and exposure scoring into one platform, with both community and enterprise deployment options. Teams should compare Community Edition’s included capabilities with Enterprise governance and support requirements before choosing.

Compared on threat intelligence platforms

Free plan: Yesfiligran.io
Attack simulation modes: hybridfiligran.io
Included attack surfaces: endpoints, asset groups, people, teams, network hosts, email, phishing landing pages, SMS, phone-based social engineering, media pressure, tabletop exercisesfiligran.io
MITRE ATT&CK mapping: Yesfiligran.io
Custom attack scenarios: Yesfiligran.io
Continuous scheduling: Yesfiligran.io
Deployment model: hybridfiligran.io

Facts

Purpose: OpenAEV is an Adversarial Exposure Validation platform for creating attack simulations, stress tests, and crisis management exercises.filigran.io · 29 Sept 2026
Threat-led simulations: Its breach and attack simulations use cyber threat intelligence and map scenarios to MITRE ATT&CK and ATLAS.filigran.io · 29 Sept 2026
Autonomous attack chaining: Attack Chaining links actions into attack paths based on findings and can be orchestrated manually or autonomously with dedicated agents.filigran.io · 29 Sept 2026
Crisis exercises: The platform supports structured tabletop exercises to evaluate team readiness, escalation, coordination, communication, and response.filigran.io · 29 Sept 2026
Exposure scoring: Adversarial Exposure Scoring tracks posture over time and maps coverage against MITRE ATT&CK and domain-based controls.filigran.io · 29 Sept 2026
Integrations: The product page states that OpenAEV has 30+ integrations and describes connecting OpenCTI, threat feeds, EDR/XDR, SIEM, and SOC playbooks.filigran.io · 29 Sept 2026
Deployment: OpenAEV supports cloud, on-premise, and multi-tenant deployments, with or without an endpoint agent; Enterprise Edition also lists air-gapped and bring-your-own-cloud options.filigran.io · 29 Sept 2026
Community features: Community Edition includes OpenCTI security coverage integration, prepackaged scenarios, Threat Arsenal, atomic testing, tabletop exercises, scoring, CVE findings, alert fetching, and RBAC.filigran.io · 29 Sept 2026
Enterprise governance: Enterprise Edition lists SSO, full audit logging, data segregation, and advanced role-based access controls.filigran.io · 29 Sept 2026
Trial: The Enterprise Edition SaaS trial provides 30 days to explore the platform.filigran.io · 29 Sept 2026
Support: Enterprise Edition includes a customer support portal and dedicated Customer Success Manager; Filigran lists standard 8×5 and premium 24×7 support options.filigran.io · 29 Sept 2026
Install options: The documentation says OpenAEV components are available as Docker images and manual installation packages, with Kubernetes also recommended for production deployments.docs.openaev.io · 29 Sept 2026
Intended users: Filigran describes OpenAEV as serving cybersecurity and crisis management teams, and says its Enterprise Edition is trusted by governments, financial institutions, and enterprises.filigran.io · 29 Sept 2026
Company security attestations: Filigran lists SOC 2 Type 2, ISO 27001:2022, and GDPR trust items on its site.filigran.io · 29 Sept 2026