TAXII API
Use the Stixify TAXII API to share structured threat intelligence from extracted reports through a standards-based CTI workflow.
Overview
The Stixify TAXII API provides a standards-based way to move structured intelligence from Stixify into other systems.
For teams already using STIX and TAXII workflows, this is often the simplest way to distribute report-derived intelligence without building a custom integration around every downstream platform.
Why teams use the TAXII API
The TAXII API is a strong fit when teams want interoperability and consistency.
That can include:
- sharing Stixify intelligence with TAXII-capable CTI platforms
- moving extracted report intelligence into existing collection workflows
- standardising how external report intelligence is distributed internally
- combining Stixify data with other STIX-native intelligence sources
Example use cases
- Add report-derived intelligence to an existing TAXII collection workflow.
- Feed structured report intelligence into a CTI platform that already supports TAXII ingestion.
- Give multiple internal systems access to a consistent external intelligence stream.
When to choose TAXII API
Choose the TAXII API when you want a standards-based sharing model and your environment already supports TAXII workflows.
If you want more control over application logic and custom enrichment behaviour, the REST API may be a better fit.
Explore next
- Want more custom integration flexibility? See REST API.
- Want a direct platform connector for OpenCTI? See OpenCTI Integration.
- Want a direct export format for downstream ingestion? See STIX Bundle Export.
- Want the workflow view? See Integrate Stixify into Your Security Stack and AI Workflows.
