View STIX TAXII Feeds

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • View and manage STIX TAXII threat intelligence feeds that provide automated security data to your ServiceNow instance.

    Before you begin

    Role required: sn_sec_tisc.admin

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Select the Integrations icon.
    3. Select STIX TAXII.
      The STIX TAXII feeds within the base system are described in the following table.
      Threat Feed Description URL
      Cyware TAXII The Cyware Threat Intelligence eXchange (CTIX) is a platform that facilitates cyberthreat intelligence sharing. It enables organizations to share threat intelligence among themselves. https://threatfeed.cyware.com/ctixapi/ctix21/
      RecordedFuture TAXII Recorded Future is an independent threat intelligence cloud platform. It enables organizations to identify and mitigate threats across cyber, supply-chain, physical and fraud domains. https://api.recordedfuture.com/taxii2
      Pulsedive TAXII Pulsedive is a threat intelligence platform. It provides a wide range of cyberthreat intelligence services and tools to organizations. https://pulsedive.com/taxii2/api/
    4. Select Edit to edit the feed, if required.
    5. Select Save to apply the changes.