compare
OpenCTI vs Yeti
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | OpenCTI | Yeti |
|---|---|---|
| Language | TypeScript | Python |
| Licence | Other | Apache-2.0 |
| Stars | 10k | 2k |
| Latest | 7.261016.0 | 2.12.0 |
| Last push | 2026-10-18 | 2026-10-09 |
| Release cadence | about 4 days between releases | about 2 days between releases |
| Active contributors | 38+ commit authors on the default branch in the last 90 days | 6 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Anomali ThreatStream. Alternatives to Anomali ThreatStream →
PartialOpenCTIIngests, links and shares intelligence from many feeds in STIX format, self-hosted.
PartialYetiStores observables and threat entities and links them, with feeds and analytics; smaller than a commercial platform.
OpenCTI
- 7.261016.02026-10-16Version 7.261016.0
- 7.261014.02026-10-14Version 7.261014.0
- 7.261008.02026-10-09Version 7.261008.0
- 7.260309.0-lts.82026-10-07Version 7.260309.0-lts.8
- 7.261002.02026-10-02Version 7.261002.0
Yeti
- 2.12.02026-10-02Pairs with yeti-feeds-frontend 2.12.0. prod/docker-compose.yaml drives both from one YETI_IMAGE_TAG, so deploy them tog…
- 2.11.02026-09-01The chat can now be pointed at a different model, and conversations can be deleted.
- 2.10.02026-09-01A hit is now {score, matched, object_summary} rather than the whole object with semantic_score and matched_on written i…
- 2.9.02026-08-28Allow ChromaDB to run as a shared server
- 2.8.22026-08-28Split ChromaDB index writes to fit the backend batch limit
OpenCTI
✓ signed The latest release, 7.261016.0, carries a signature GitHub verified.
Loading the security report
Yeti
✓ signed The latest release, 2.12.0, carries a signature GitHub verified.
Loading the security report