# libtaxii

libtaxii is a Threat Intel Platforms product. It runs on-premises. Pricing is free.

A Python library for handling TAXII v1.x messages and services to enable automated threat intelligence sharing and indicator exchange.

Checked October 2026.

## What is libtaxii?

libtaxii is a Python library designed for handling Trusted Automated eXchange of Indicator Information (TAXII™) v1.x Messages and invoking TAXII Services.

The library aims to remain faithful to both TAXII specifications and standard Python development practices. It provides functionality for processing TAXII messages and interacting with TAXII services in a way that is accessible to both Python developers and XML developers.

The repository includes comprehensive documentation, source code, test suites, and TAXII XML Schemas for validation purposes. The library follows a structured major.minor.revision versioning scheme for releases.

libtaxii serves as a foundational component for applications that need to implement TAXII protocol support for automated threat intelligence sharing and indicator exchange.

Tags: Open Source, XML, Cyber Threat Intelligence, TAXII

## Quick facts

- Category: [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence) · [Threat Intel Platforms](https://cybersectools.com/categories/tip)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 73
- Website: github.com

## Where it ranks

libtaxii is not a pick on the current [Best Threat Intelligence Platform Solutions for Business](https://cybersectools.com/shortlists/best-threat-intelligence-platforms).

## libtaxii FAQ

### What is libtaxii?

libtaxii is a product in the Threat Intel Platforms category. It covers Open Source, XML and Cyber Threat Intelligence.

### What is the pricing for libtaxii?

libtaxii is free. Download and setup instructions are at https://github.com/TAXIIProject/libtaxii/.

### What are alternatives to libtaxii?

Alternatives to libtaxii listed on CybersecTools:

1. [Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/tools/hudson-rock-cybercrime-intelligence-tools) - Cybercrime intelligence tools for searching compromised credentials from infostealers (Free)
2. [Filigran OpenCTI](https://cybersectools.com/tools/filigran-opencti) - Open-source threat intelligence platform for organizing and operationalizing CTI (Commercial)
3. [CatchProbe ThreatWay](https://cybersectools.com/tools/catchprobe-threatway) - Cyber threat intelligence sharing platform with TAXII/STIX support (Commercial)
4. [StalkPhish.io](https://cybersectools.com/tools/stalkphishio) - Phishing threat intel platform detecting phishing URLs, kits & brand impersonation. (Commercial)
5. [ThreatConnect Polarity Community Edition](https://cybersectools.com/tools/threatconnect-polarity-community-edition) - Free contextual federated search tool for threat intelligence enrichment (Free)

Compare all libtaxii alternatives at [https://cybersectools.com/alternatives/libtaxii](https://cybersectools.com/alternatives/libtaxii)

### What deployment and organization size does libtaxii fit?

libtaxii is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare libtaxii with similar solutions

- [libtaxii vs Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/compare/hudson-rock-cybercrime-intelligence-tools-vs-libtaxii)
- [libtaxii vs Filigran OpenCTI](https://cybersectools.com/compare/filigran-opencti-vs-libtaxii)
- [libtaxii vs CatchProbe ThreatWay](https://cybersectools.com/compare/catchprobe-threatway-vs-libtaxii)

All alternatives to libtaxii: [/alternatives/libtaxii](https://cybersectools.com/alternatives/libtaxii)

---

Source: https://cybersectools.com/tools/libtaxii

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on libtaxii: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md