Provides a list of machine-readable, actionable indicators curated by the IBM X-Force team. They directly integrate into existing security solutions and tools, such as firewalls, intrusion prevention systems (IPS) and security information and event management (SIEM) platforms.
Allows users to automate the consumption of threat intelligence from IBM X-Force Exchange, the cloud-based threat intelligence sharing platform from IBM. The Commercial API license has a quota of 10,000 monthly records while the Enterprise API has unlimited daily records.
Provides a subscription to curated threat intelligence, malware report and detection rules, threat group profiles, threat activity reports and industry analysis reports.
X-Force threat intelligence offerings for X-Force Exchange platform
Note that X-Force Threat Intelligence for the IBM Security QRadar XDR Connect platform is licensed separately.
Product Features
Use case
IBM X-Force Exchange
Enrichment, Research
X-Force Exchange Commercial API
Enrichment, Research
X-Force Exchange Enterprise API
Enrichment, Research
Advanced Threat Protection Feed
Detection, Protection (High Fidelity Block List)
Charge metric
Free
By usage (quota)
Per instance (quantity 1 administrator)
Per instance (quantity 1 administrator)
Number of records
Unlimited via Portal
Packs of 10,000 records per month
Unlimited daily records
Per instance (excludes MSSP)
Support
Limited: FAQ
Standard
Standard
Standard
Delivery mechanism
UI access only
RESTful API, STIX, TAXII
RESTful API, STIX, TAXII
RESTful API, STIX, TAXII
IP and URL (Command and Control)
Vuln
Malware (IP, URL, Families)
Sample only
pDNS and WHOIS
Botnet IP, Phishing URL Anonymization, Crypto-mining
Early warning data
Sample only
Premium threat intelligence reports
Sample only
Am I affected scanning
Manual + ad-hoc only
We can help you find the right edition and pricing for your business needs.