Open Threat Exchange (OTX)

What it is

Open Threat Exchange (OTX) is a free community threat intelligence platform operated by LevelBlue (otx.alienvault.com). It was widely known as AlienVault OTX and Alien Labs OTX under earlier AT&T AlienVault branding. Members publish and subscribe to pulses that bundle indicators of compromise and contextual research for collaborative defence.

What it helps with

- Browsing and contributing community pulses with IoCs tied to campaigns and malware families.
- Pulling OTX data into security tools via API and partner integrations for detection enrichment.
- Collaborating on emerging threats with a public research community rather than a closed feed alone.
- Using free OTX-powered utilities such as endpoint IoC scanning where offered by the vendor.
- Supplementing commercial TI programmes with open, community-sourced indicators.
- Signing up without a commercial licence for standard end-user community access.

Who it's for

SOC analysts, threat researchers and defenders who want a free open threat-sharing community alongside platforms such as MISP and commercial TI vendors.

Worth knowing

OTX is free for end users for non-commercial use under the vendor end-user agreement; commercial product integrations may sit under separate LevelBlue or partner terms. Current operator branding is LevelBlue; the service URL and historical AlienVault OTX name remain widely recognised. Confirm current terms on the LevelBlue/OTX legal pages.