Skip to main content
To use this feature, you must have a Pulsedive Feed plan. Your export access and available options are determined by your plan.
Start pulling Pulsedive threat intelligence into your security stack.

​
Before You Begin

You’ll need your Pulsedive API key. Find it on your account page. Not sure which format to use? Visit Choose an Export Format.

​
Get a CSV Export

1

Build your Direct URL

Your Direct URL encodes your API key and chosen filters as query parameters. Construct the URL manually using the parameters in CSV Export or use the download form to configure and generate it.
Your Direct URL contains your API key. Treat it as a secret. Do not commit it to version control or share it publicly.
2

Pull your export

Go to your Direct URL to download your CSV:
https://pulsedive.com/export/csv?key=<YOUR_API_KEY>&<YOUR_FILTERS>
To automate ingestion, point your tooling at the Direct URL on your chosen schedule. To learn more, visit Automate Your Export.

​
Get a STIX/TAXII Export

STIX/TAXII 2.1 export is available on Standard and Complete Feed plans.
1

Discover the server

Query the discovery endpoint to confirm your authentication and find available API roots. Authenticate using HTTP Basic Auth with taxii2 as the username and your API key as the password:
    curl -u "taxii2:<YOUR_API_KEY>" \
         -H "Accept: application/taxii+json;version=2.1" \
         https://pulsedive.com/taxii2/
A successful response returns the available API roots and server information. To learn more, visit Authentication.
2

Browse collections

Query the collections endpoint to find which collections contain the data you need. Pulsedive provides separate collections for indicators and threats.
    curl -u "taxii2:<YOUR_API_KEY>" \
         -H "Accept: application/taxii+json;version=2.1" \
         https://pulsedive.com/taxii2/api/collections/
The response includes each collection’s ID, title, and description. Use the collection ID in the next step to retrieve objects. To learn more, visit Collections.
3

Retrieve objects

Query a collection’s objects endpoint using the collection ID from the previous step. Use filter parameters to limit results by risk level, indicator type, timestamps, and retirement status.
    curl -u "taxii2:<YOUR_API_KEY>" \
         -H "Accept: application/taxii+json;version=2.1" \
         "https://pulsedive.com/taxii2/api/collections/<COLLECTION_ID>/objects/?match[risk]=high,critical&limit=100"
For large collections, use the next pagination token from each response to retrieve the next page. To learn more, visit Filtering and Pagination.
For full configuration instructions, collection IDs, filtering options, and client setup guides, visit the STIX/TAXII documentation.
You can evaluate Pulsedive’s TAXII service before purchasing using the free test collection, which contains live Pulsedive data. You only need a free API key. To get one, sign up for a free account.

​
Troubleshooting

​
CSV export failed

If a CSV pull fails, retry the same Direct URL. The download will restart and pull the full dataset again with the configured filters. If the export consistently fails, contact Pulsedive Support.

​
STIX/TAXII pull failed

TAXII is more fault-tolerant than CSV. If a pull fails mid-stream, you can resume from where you left off using a timestamp or the next pagination token from your last successful response, without restarting the full export. To learn more, visit Pagination. If you continue to have issues, contact Pulsedive Support.