Skip to main content
To use this feature, you must have a Pulsedive Feed plan. Your export access and available options are determined by your plan.
Pulsedive Feed supports two export formats: CSV and STIX/TAXII 2.1. The right choice depends on your use case, the tools you’re integrating with, and your Feed plan.

​
Choose CSV if…

  • Your SIEM, SOAR, or pipeline ingests flat files.
  • You want simplicity: one URL, one file, straightforward parsing.
  • You need broad compatibility with tools that don’t natively speak TAXII.
  • You’re on a Light Feed plan.
To get started, visit CSV Export.

​
Choose STIX/TAXII 2.1 if…

  • Your security platform (such as Microsoft Azure Sentinel or OpenCTI) natively supports TAXII 2.1.
  • You need structured threat objects alongside indicators.
  • You want fault-tolerant pagination: if a pull fails, you can resume from where you left off using a timestamp or pagination token rather than restarting the full download.
  • You’re on a Standard or Complete Feed plan.
To get started, visit the STIX/TAXII documentation.