OpenMetadata
OpenMetadata 2.0.8 widens Hex, Sigma and BigQuery coverage while 2.1 waits in release candidates.
Comparison · Analytics
OpenCTI vs Dovetail
A side-by-side editorial comparison of OpenCTI and Dovetail — release velocity, themes, recent moves, and the top alternatives to consider.
OpenCTI vs Dovetail: at a glance
What is OpenCTI?
OpenCTI lets analysts run enrichment connectors straight from the investigation graph.
OpenCTI 7.261106.0 added custom fields and templates to Cases and Incidents, and LTS lines received matching security backports the same week. 7.261109.0 adds a right-click option to run an enrichment connector from the investigation graph, prepares ingestion health reporting, exports and imports labels in config presets, and fixes a cache race that could stop a started playbook from running. 7.261109.3 is a bare backend release tag.
What is Dovetail?
Dovetail lets admins choose which connectors members can plug into the workspace.
Channels 2.0 reached general availability on October 21. In November Dovetail opened itself to outside assistants: Claude and ChatGPT can co-author docs, agents can be managed from MCP clients such as Claude and Cursor, and Jira roadmap items can pull in Dovetail evidence. On November 12 it added the matching control: workspace admins decide which connectors members may use.
OpenCTI vs Dovetail: editorial side-by-side
OpenCTI
5.0ANALYTICS
OpenCTI lets analysts run enrichment connectors straight from the investigation graph.
◆ Current state
OpenCTI 7.261106.0 added custom fields and templates to Cases and Incidents, and LTS lines received matching security backports the same week. 7.261109.0 adds a right-click option to run an enrichment connector from the investigation graph, prepares ingestion health reporting, exports and imports labels in config presets, and fixes a cache race that could stop a started playbook from running. 7.261109.3 is a bare backend release tag.
◆ Where it's heading
Filigran keeps a near-weekly cadence that mixes small analyst workflow additions with platform reliability: playbook triggers, cache consistency, stream compatibility and ingestion health. Two LTS branches are maintained alongside the main line.
◆ Prediction
Expect ingestion health to surface as a visible feature in an upcoming release, given this one calls the work 'preparation', plus further LTS backports.
Dovetail
5.0ANALYTICS
Dovetail lets admins choose which connectors members can plug into the workspace.
◆ Current state
Channels 2.0 reached general availability on October 21. In November Dovetail opened itself to outside assistants: Claude and ChatGPT can co-author docs, agents can be managed from MCP clients such as Claude and Cursor, and Jira roadmap items can pull in Dovetail evidence. On November 12 it added the matching control: workspace admins decide which connectors members may use.
◆ Where it's heading
Dovetail is turning its research repository into a source that other tools and assistants read and write, rather than a place people must visit. The admin connector controls show the cost of that openness: each new integration needs a security gate before larger customers will turn it on.
◆ Prediction
With connectors now gated by admins, expect more connectors and MCP actions to ship behind the same controls, plus audit detail on what connected tools did.
Alternatives to OpenCTI and Dovetail
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either OpenCTI or Dovetail.
Dagster
Dagster drops Python 3.10 and lets agents run schedules and sensors through MCP.
OpenHouse
OpenHouse adds time-zone-aware retention and per-database table caps.
Countly
Countly 25.03.59 defaults to Node 26, supports MongoDB 9 and tightens app scoping.
Kubecost
Kubecost cuts three 3.3.2 release candidates in two days, still without notes.
RStudio
RStudio opens the 2026.11 train with another NOTICE file update.
See all OpenCTI alternatives → · See all Dovetail alternatives →
Recent activity from OpenCTI and Dovetail
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 2d agoDovetailAdmin controls for connector compliance
- 4d agoOpenCTIOpenCTI 7.261109.0: run enrichment from the investigation graph
- 4d agoDovetailManage agents from your favorite LLM
- 4d agoDovetailEnrich your Jira roadmap with Dovetail data
- 4d agoDovetailSee your Workspace Sources activity in every Channel
- 4d agoOpenCTIOpenCTI 7.261109.3 backend and worker release tag
- 5d agoDovetailChat answers from Dovetail help docs
- 7d agoOpenCTIOpenCTI 7.261106.0: custom fields and templates for cases
- 7d agoOpenCTIOpenCTI LTS 7.260811.0-lts.2 backports draft-access fix
- 8d agoOpenCTIOpenCTI LTS 7.260309.0-lts.9 backports draft-access fix
- 8d agoDovetailCo-author docs with Claude and ChatGPT
- 10d agoOpenCTIOpenCTI 7.261103.0: Filigran license install, draft access checks
Frequently asked questions
What is the difference between OpenCTI and Dovetail?
They serve adjacent needs but don't currently overlap on shipped themes. OpenCTI and Dovetail are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is OpenCTI better than Dovetail?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. OpenCTI and Dovetail are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
What are the best alternatives to OpenCTI?
Top OpenCTI alternatives in Analytics are ranked by recent ship velocity. Browse the "OpenCTI alternatives" section above for the current picks, or visit /alternatives/opencti for the full list with editorial commentary on each.
What are the best alternatives to Dovetail?
Top Dovetail alternatives in Analytics are ranked by recent ship velocity. Browse the "Dovetail alternatives" section above for the current picks, or visit /alternatives/dovetail for the full list with editorial commentary on each.