Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

View STIX TAXII Feeds

View and manage STIX TAXII threat intelligence feeds that provide automated security data to your ServiceNow instance.

Before you begin

Role required: sn_sec_tisc.admin

Procedure

  1. Navigate to Workspaces > Threat Intelligence Security Center.

  2. Select the Integrations icon.

  3. Select STIX TAXII.

    The STIX TAXII feeds within the base system are described in the following table.

    Threat FeedDescriptionURL
    Cyware TAXIIThe Cyware Threat Intelligence eXchange (CTIX) is a platform that facilitates cyberthreat intelligence sharing. It enables organizations to share threat intelligence among themselves.https://threatfeed.cyware.com/ctixapi/ctix21/
    RecordedFuture TAXIIRecorded Future is an independent threat intelligence cloud platform. It enables organizations to identify and mitigate threats across cyber, supply-chain, physical and fraud domains.https://api.recordedfuture.com/taxii2
    Pulsedive TAXIIPulsedive is a threat intelligence platform. It provides a wide range of cyberthreat intelligence services and tools to organizations.https://pulsedive.com/taxii2/api/
  4. Select Edit to edit the feed, if required.

  5. Select Save to apply the changes.

Parent Topic:View Threat Intel Feeds