EverythingXiaomi
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your app
Vendor dashboard

IBM X-Force Exchange

C
C tier on Threat Intelligence PlatformsScore 6.9 · #2 of 31
Android app
Not listed
Free plan
Yes
Runs on
api, Web
Visit site Alternatives

Summary

IBM X-Force Exchange is a cloud-based threat intelligence platform for researching threats, gathering intelligence and collaborating with peers. Reports provide context for IP addresses, URLs, malware hashes, web applications, signatures and vulnerabilities. Logged-in users can search, comment, create collections and share research; collections can be public or private and hold reports, IP or URL data, comments and other content. A QRadar plug-in supports IP and URL lookups from events and lets users submit data from searches, offenses and rules to collections. API documentation covers IP and URL category feeds, reports, vulnerability feeds and TAXII feeds, using JSON and STIX/TAXII formats. However, API use requires a purchased premium subscription, and freemium API keys no longer have access. The free plan offers limited portal access, and guest users cannot use all website features. The GUI requires a supported browser and a direct internet connection. IBM describes the API Enterprise license as suitable for security operations centers and managed security service providers.

Who it is for

X-Force Exchange may suit security teams researching threat indicators and sharing findings. IBM describes its API Enterprise license as suitable for security operations centers and managed security service providers.

What is good

  • Reports cover IPs, URLs, malware hashes and vulnerabilities.
  • Collections support public or private research sharing.
  • QRadar plug-in supports lookups and collection submissions.
  • API supports JSON and STIX/TAXII.

What to know first

  • Free plan has limited portal access.
  • Freemium API keys no longer access the API.
  • API use requires a purchased premium subscription.
  • GUI requires a supported browser and direct internet.

Verdict

X-Force Exchange offers threat research and collaboration in the portal, with API and QRadar options for licensed use. The free plan does not include API access, so verify access needs before selecting it.

IBM X-Force Exchange plans and pricing

All plans
Freemium Free Limited access to the X-Force Exchange portal · no X-Force API access ibm.com · 30 Sept 2026

Compared on threat intelligence platforms

Free plan
Yesexchange.xforce.ibmcloud.com
Indicator enrichment
Yesexchange.xforce.ibmcloud.com
STIX/TAXII support
Yesexchange.xforce.ibmcloud.com
Report management
Yesexchange.xforce.ibmcloud.com
Workflow automation
Yesexchange.xforce.ibmcloud.com
Case management
Yesexchange.xforce.ibmcloud.com
Deployment
cloudexchange.xforce.ibmcloud.com

Facts

Purpose
IBM X-Force Exchange is a cloud-based threat intelligence platform for researching security threats, aggregating actionable intelligence and collaborating with peers.ibm.com · 30 Sept 2026
Threat lookup
The QRadar plug-in can search Exchange information for IP addresses, URLs, CVEs and web applications found in QRadar.ibm.com · 30 Sept 2026
Collections
Collections can hold IP or URL data, reports, comments and other research content, and can be public or private.ibm.com · 30 Sept 2026
Collaboration
The platform includes searching, commenting, collections and sharing for logged-in users.xfe-integration.xforce.ibm.com · 30 Sept 2026
API capabilities
The API documentation describes access to IP and URL category feeds and reports, vulnerability feeds, and TAXII feeds.xfe-development.xforce.ibm.com · 30 Sept 2026
API access
Using the API requires purchasing a premium subscription through an IBM sales representative or the X-Force Threat Intelligence page.xfe-development.xforce.ibm.com · 30 Sept 2026
API security
The API accepts HTTPS connections supporting TLS 1.2 or newer and rejects other connections.xfe-development.xforce.ibm.com · 30 Sept 2026
API credentials
API keys and passwords are specific to the user's ID, do not expire, and the password is shown only when generated.xfe-development.xforce.ibm.com · 30 Sept 2026
QRadar integration
The Exchange plug-in lets QRadar users look up IP and URL data from events and submit data from searches, offenses and rules to collections.ibm.com · 30 Sept 2026
Feed integration
The Advanced Threat Protection Feed provides machine-readable indicators for integration with security tools such as firewalls, intrusion prevention systems and SIEMs through open standards.ibm.com · 30 Sept 2026
Limits
Guest users cannot use all features of the X-Force Exchange website.ibm.com · 30 Sept 2026
Support
Customers with a commercial ATP feed or Commercial API license can open IBM Support tickets; other inquiries can be emailed to [email protected].ibm.com · 30 Sept 2026
Availability
IBM identifies X-Force Exchange as platform independent, and its documented GUI requirements include a workstation or mobile device with a supported browser and a direct internet connection.ibm.com · 30 Sept 2026
Threat data
X-Force Exchange reports include context for IP addresses, URLs, malware hashes, web applications, signatures and vulnerabilities.ibm.com · 30 Sept 2026
API formats
The API supports JSON and STIX/TAXII for accessing and integrating threat intelligence.ibm.com · 30 Sept 2026
Trial
IBM Support says users can sign up for a 30-day trial of either dedicated Premium Threat Intelligence feed product.ibm.com · 30 Sept 2026
API limit
IBM says Freemium API keys no longer have access to the X-Force API.ibm.com · 30 Sept 2026
Platform requirements
The Exchange GUI requires a workstation or mobile device with a supported browser and a direct internet connection; the Commercial API requires a compatible third-party application.ibm.com · 30 Sept 2026
Audience
IBM describes the API Enterprise license as suitable for security operations centers and managed security service provider use cases.ibm.com · 30 Sept 2026

Best IBM X-Force Exchange alternatives

See all 12
Btier OpenAEV #1 7.0 FreeCtier ThreatForge #3 6.8 FreeCtier Security Vision TIP #4 6.7 Ctier SOCRadar Extended Threat Intelligence Platform #5 6.4 $379.17/moCtier Flashpoint Ignite #6 6.3 Ctier Anomali Platform #7 6.2

Where it ranks on Everything Xiaomi

Is IBM X-Force Exchange yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote IBM X-Force Exchange

Sources