Cyber Threat Exchange Logo

Cyber Threat Exchange REST API

Use the Cyber Threat Exchange REST API to publish structured CTI into feeds and consume that intelligence programmatically.

Cyber Threat Exchange REST API

Overview

The REST API is the most flexible way to publish into Cyber Threat Exchange and to build custom consumption workflows around subscribed feeds.

It is a strong fit when you want scripting, internal tooling, automation, or AI-assisted workflows to interact directly with structured CTI.

Common uses

  • Publish STIX 2.1 bundles into a feed.
  • Build custom consumers and enrichment services.
  • Integrate Cyber Threat Exchange into internal applications and workflow automation.