World's First Open Threat Intelligence Community
Threat sharing in the security industry remains mainly ad-hoc and informal, filled with blind spots, frustration, and pitfalls. Our vision is for companies and government agencies to gather and share relevant, timely, and accurate information about new or ongoing cyberattacks and threats as quickly as possible to avoid major breaches (or minimize the damage from an attack). The Alien Labs® Open Threat Exchange® (OTX™) delivers the first truly open threat intelligence community that makes this vision a reality.
How OTX Works
OTX provides open access to a global community of threat researchers and security professionals. It now has more than 100,000 participants in 140 countries, who contribute over 19 million threat indicators daily. It delivers community-generated threat data, enables collaborative research, and automates the process of updating your security infrastructure with threat data from any source. OTX enables anyone in the security community to actively discuss, research, validate, and share the latest threat data, trends, and techniques, strengthening your defenses while helping others do the same.
Ready to Join OTX?Sign up for free
Take a Tour of OTX.
Integrate OTX Threat Intelligence with External Security Monitoring Tools
Most threat data sharing products or services are limited in what they provide or require users to pay extra for what the provider deems as “premium” features. Moreover, they can be overly complex to integrate with your existing tools. The result is that users often find themselves buying multiple services since the traditional, isolated approach to threat data limits their ability to export threat data from one tool to another.
OTX alleviates that problem by providing a comprehensive threat intelligence service that’s 100% free, along with multiple methods for your security tools to ingest relevant, timely, and accurate threat data.
Direct Integration with the AlienVault USM Platform
Connect OTX to AlienVault USM to correlate raw pulse data with incoming security events within the USM platform.
Ingest OTX Threat Data into Third-Party Security Tools
Easily consume OTX threat intelligence within your own environment by utilizing the OTX DirectConnect API.
Our DirectConnect API enables users to export IoCs automatically into third-party security products, eliminating the need to manually add IP addresses, malware file hashes, URLs, domain names, etc.
In addition to the API, OTX users also have the option of downloading IoCs from a pulse via the web portal -- as CSV, OpenIOC or STIX -- then importing into existing security tools.