October 15, 2026ParisSessions in EnglishInaugural Event
The annual gathering of the global threat intelligence and cyber defense community — where intelligence, exposure management and action come together.
New to THREAD? Check the FAQ
Why THREAD
An anomaly. An indicator. A signal that does not quite fit. So you pull on it — carefully, patiently. One connection reveals another. A pattern starts to emerge. What looked like noise gradually becomes a picture: the structure of a threat, visible at last.
That is not a metaphor. That is what this community does every day — in SOCs, CTI teams, CERTs and research labs around the world.
THREAD brings that community into one room. The people who use and build OpenCTI and OpenAEV, who write the connectors, share the playbooks, report the bugs and answer each other's questions on Slack and GitHub — together in person, for one day. Because some threads only connect when people actually meet.
One full day, morning plenary to evening aperitif — sessions in English
Rue Saint-Dominique, Paris 7e — by Les Invalides
Leaders, industry, practitioner & community
Community aperitif at the OpenBAR
Built around doing: labs, workshops, roundtables and open spaces — not slides.
Two audiences, one thread
Strategic. Decision-makers. Focus on cyber risk reduction.
A high-value, high-touch experience designed around strategic insights, trusted peer conversations, and tangible outcomes.
Expect closed-door roundtables with CISOs and security leaders from leading organizations — by industry, off the record, no sales pressure. Strategic clarity on XTM, CTEM, NIS2, DORA, and what comes next.
Hands-on. Community-led. Focus on technology optimization.
A community-first gathering: CTI analysts, SOC teams, red/blue/purple teamers, GRC practitioners, open-source contributors — all in the same room. This is your event.
Expect hands-on labs, Filigran certification sessions, adversarial simulations, CTF challenges, and the kind of frank, unfiltered conversations that only happen when the right people are in the same room.
October 15, 2026
Draft agenda — sessions and speakers are being finalized.
All sessions are held in English. Bring your laptop for the afternoon labs and workshops.
Arrive, grab coffee, explore demos, and start connecting with the community.
Kick off the day with key themes, highlights, and what to expect.
Making security proactive, thread by thread: a look inside the founding bet behind Filigran, why intelligence, validation and response belong in one platform, and where that vision goes next.
The vision, validated: a security leader shares, in his own words, how connecting intelligence across security operations changed the way his teams work, the wins, the trade-offs and what is still in progress.
The vision, validated: a CISO shares how threat intelligence became the strategic lever of his cyber resilience program, and what the shift really looks like in practice.
Meet peers, visit demos, and continue conversations across the community space.
A candid, unscripted panel with security leaders on where security operations are heading: how agentic AI and unified exposure management abstract away the complexity of disconnected tools, and what that shift looks like in practice.
A new chapter for the XTM family. Filigran opens up the market problem it has been working on, then puts the answer on stage. Be in the room, then head to the Community Zone to see it up close.
The five roadmap items that matter most, and how to turn them into next steps. Continue the conversation at the demo pods in the Community Zone.
Refuel, connect with attendees, and explore the community and demo spaces.
Voices
Filigran founders and product leaders, customer CISOs, government voices and community contributors. More names are added as the line-up is confirmed.
Want to lead a session? The agenda is built with the community, reach out at thread@filigran.io.
The venue
In the heart of the 7th arrondissement, 5 minutes from Les Invalides — an auditorium, breakout salons, an exhibition floor and a garden for the evening aperitif.
Join us
THREAD gathers the open-source threat management community — analysts, engineers, contributors and the leaders they work with. One day to share what works, learn from each other and meet in person the people you know from Slack and GitHub.
We use cookies to analyze traffic and improve your experience. See our privacy policy for details. Privacy policy
