Data Exchange Layer

Data Exchange Layer

Easy, one-to-many app integrations and instant communication

Data Sheet

Secure, high-speed communications

Now you can enrich security operations and connect security solutions into an effective team. The McAfee Data Exchange Layer (DXL) communication fabric connects and optimizes security actions across multiple vendor products, as well as internally developed solutions. Enterprises gain secure, real-time access to new data and lightweight, instant interactions with other products.

Download DXL Components

OpenDXL: An open standard and ecosystem

Enabling more applications to run across the DXL fabric, OpenDXL is an open source project that helps developers freely leverage DXL. The OpenDXL community and resources empower DXL integrations and nurture new ideas.  OpenDXL Integrations  OpenDXL SDK on GitHub

OpenDXL Idea Book

Read fifteen easy ways to integrate, orchestrate, and expedite security operations.

Change your security dynamics

Shorten threat defense lifecycle workflows

Nearly instant sharing of information and orchestration of tasks shrink the time to detect, contain, and correct newly identified threats.

Reduce integration complexity

Connect security products, both from vendors and your own applications, without waiting for vendor negotiations, reducing effort and delays.

Increase the value of your applications

Applications can now share the useful threat data they generate and guide or take action immediately.

Get Started

DXL Features

Location unaware, persistent connections, and service- and event-based communications are a few of the key capabilities of DXL.

Learn More >

DXL Integration Types

Learn more about the two primary integration roles: information consumers and information providers.

Learn More >

DXL Architecture Guide

Explore the various components inside DXL, such as brokers and clients.

Learn More >

How it works

Develop once

The DXL application framework increases integration flexibility and simplicity. Unlike typical integrations, each application connects to the universal DXL communication fabric with just one integration process. Applications can attach and communicate over a universal orchestration layer. One app publishes a message or calls a service; one or more apps consume the message or respond to the service request. As is the goal for any standard, the interaction is independent of the underlying proprietary architecture. Integrations are much simpler because of this abstraction from vendor-specific APIs and requirements.

Wrap once

Wrap services, your own or a commercial product, to publish data onto DXL. Other services can listen to DXL messages and calls to enrich their functionality with the latest data or take appropriate action. For a more sophisticated app, these sorts of actions can be scripted together to drive a waterfall or simultaneous set of actions—an orchestrated response with or without human involvement.

Deploy once

Deploy a standardized integration and communication layer over your existing network with a small DXL client and broker that manages message exchanges. All DXL traffic is contained within your network, offering data privacy and operational control. A firewall-friendly model maintains a connection between client and server for continuous access to the latest information flowing over the DXL. If something in the publishing or receiving application changes, the DXL abstraction layer insulates the rest of the deployment from the change, reducing risk and costs of integration maintenance.

McAfee DXL-Integrated Partners

Advanced Cyber Security
Check Point
TrapX Security
See All Partners



Questions or concerns with your DXL integration? Stop by the OpenDXL Community forum and connect with experts and fellow developers.

Learn More >


Follow the latest announcements about our open platform.

Learn More >
Back to top