OTX.

OTX is an open, community-driven threat intelligence exchange — originally AlienVault, now LevelBlue OTX — where researchers publish indicators bundled into Pulses. It belongs to the Defense & Operations category of cybersecurity.

OTX is an open, community-driven threat intelligence exchange — originally AlienVault, now LevelBlue OTX — where researchers publish indicators bundled into Pulses.

The Open Threat Exchange (OTX), originally launched by AlienVault and now operated by LevelBlue, is a free crowdsourced platform on which researchers, vendors, and SOC analysts publish Pulses — curated bundles of indicators, context, and references tied to a specific campaign, malware family, or actor. Subscribers consume Pulses through the web UI, REST API, STIX/TAXII, or via integrations with SIEM, EDR, and TIP products. OTX is widely used as a low-cost enrichment source and a starting point for hunting, though defenders typically combine it with paid feeds and vetted ISAC content for high-confidence detection. The community feedback loop on each Pulse helps surface false positives quickly.

Defences for OTX typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: AlienVault OTX, LevelBlue OTX, Open Threat Exchange.