TAXII 2.1

Standards-based threat intelligence via TAXII 2.1.

January 7, 2026

Table of contents

TAXII 2.1 Server enables the standardised exchange of cyber threat intelligence using the TAXII protocol.

Why connect TAXII 2.1 with CYJAX?‍

The CYJAX TAXII 2.1 server allows organisations to securely pull incident reports, Indicators of Compromise (IOCs), and threat actor intelligence from the CYJAX platform into any TAXII-compatible client. This supports scalable, standards-based intelligence sharing across security tools and platforms.

Key features of the CYJAX TAXII 2.1 integration

TAXII 2.1–compliant threat intelligence exchange
Pull incident reports, IOCs, and threat actor intelligence
Secure authentication using API keys
Dedicated CTI API root with multiple intelligence collections
Compatible with a wide range of TAXII-enabled platforms

‍

ThreatQ

Proactive threat intelligence ingestion for ThreatQ.

Splunk

Effortless threat intelligence ingestion for Splunk.

OpenCTI

Effortless threat intelligence ingestion via TAXII.

Python

Programmatic access to CYJAX threat intelligence.

MISP

Effortless threat intelligence ingestion for MISP.

IBM QRadar

Effortless threat intelligence ingestion for QRadar SIEM.

Get started

Get Started with CYJAX CTI

Empower Your Team. Strengthen Your Defences.CYJAX gives you the intelligence advantage: clear, validated insights that let your team act fast without being buried in noise.

See CYJAX in action