AlienVault Open Threat Exchange (OTX)

About AlienVault Open Threat Exchange (OTX)

AlienVault Open Threat Exchange (OTX) provides a DirectConnect API that synchronizes threat intelligence data into tools used to monitor an environment for security threats. Access is available via pre-built DirectConnect agents for products such as LevelBlue OSSIM, LevelBlue USM, Bro-IDS, TAXII, and Suricata, or directly through a command-line interface using an API key (X-OTX-API-KEY header).

For products without a pre-built agent, a DirectConnect SDK is available in Java, Python, and Golang to build custom integrations. The API is documented for developers building or extending threat-detection integrations, with particular built-in support for LevelBlue USM and OSSIM users. OTX operates under LevelBlue, Inc.

Key features

• Synchronizes threat intelligence pulses into your monitoring tools via the DirectConnect API
• Pre-built DirectConnect agents for LevelBlue OSSIM, LevelBlue USM, Bro-IDS, TAXII, and Suricata
• DirectConnect SDK available in Java, Python, and Golang for building custom integrations
• REST API access via API key, e.g. fetching subscribed pulses with curl

Frequently asked questions