Integrations
Explore the REST API, TAXII API, STIX bundle export, and OpenCTI integration to see how Obstracts fits into the rest of your security stack.
Overview
Obstracts is built to be interoperable.
Because the platform is STIX 2.1 native, there are multiple ways to get intelligence out of Obstracts and into the rest of your stack. That includes direct API access, TAXII-based sharing, portable STIX bundle exports, and integrations with platforms such as OpenCTI.
This section introduces the main integration options and the workflows they support.
Explore integrations
- REST API: Build custom tooling, enrich internal workflows, and access Obstracts data programmatically.
- TAXII API: Share structured threat intelligence through a standards-based CTI workflow.
- STIX Bundle Export: Export structured public threat intelligence as portable STIX 2.1 bundles for file-based or batch workflows.
- OpenCTI Integration: Sync Obstracts intelligence into OpenCTI to expand and enrich your existing knowledge graph.
Why this matters
The value of Obstracts is not only in collecting and structuring public reporting. It is also in making that intelligence portable.
That means teams can:
- move intelligence into existing TIPs and CTI platforms
- build custom services around extracted IoCs, TTPs, and reports
- enrich detections, investigations, and hunts with external context
- support AI agents and automations with structured data instead of raw articles
Explore next
- Want the broader interoperability story? See Scale Security Workflows with AI-Ready Threat Intelligence.
- Want the workflow-level view? See Integrate Obstracts into Your Security Stack and AI Workflows.
