The Trusted Automated eXchange of Indicator Information (TAXII™)

By Julie Connolly , Mark Davidson , Matt Richard , Clement Skorupka, Ph.D.

Trusted Automated eXchange of Indicator Information (TAXII) is a set of technical specifications and supporting documentation for securely exchanging cyber threat information in order to detect, prevent, and mitigate cyber threats in real time.

Download Resources


PDF Accessibility

One or more of the PDF files on this page fall under E202.2 Legacy Exceptions and may not be completely accessible. You may request an accessible version of a PDF using the form on the Contact Us page.

Today, an ever-growing number of organizations actively share cyber threat data in order to get a more complete view of adversary activity and help prioritize the organization’s own cyber defenses. Current cyber threat information sharing, however, is either a time-consuming, manual process or a limited-scope automation effort. The Trusted Automated eXchange of Indicator Information (TAXII) effort aims to enable robust, secure, and high-volume exchanges of significantly more expressive sets of cyber threat information. This paper describes the TAXII effort, the motivation behind TAXII, its goals, components, and development approach.