Intel Security

McAfee Data Exchange Layer (DXL)

Through our OpenDXL initiative, leverage DXL to quickly integrate data and actions for real-time security operations

Read Data Sheet


Developers can now replace multiple 1:1 integrations over proprietary application programming interfaces (APIs) through OpenDXL and a single link to the McAfee Data Exchange Layer (DXL) application framework. This simple connection fabric provides a secure, real-time way to unite data and actions across multiple applications from different vendors as well as internally developed applications. Enterprises gain the time and efficiency advantages of instant communication and collaboration, connecting security solutions into an effective team. Partners gain real-time access to new data and lightweight, instant interactions with other apps to enrich security operations. As the OpenDXL community expands, everyone wins.

Learn More About OpenDXL


Shorten the threat defense lifecycle workflows

Nearly instant sharing of information and orchestration of tasks can shrink time to detect, contain, and correct newly identified threats.

Reduce integration complexity across security products and vendors

Our open platform lets you connect security products from multiple vendors with your own applications and tools, without waiting for vendor negotiations and reducing effort and delays. The power of choice is in your hands.

Increase the value of the applications you deploy

Applications can now share the useful threat data they generate and guide or take action immediately.

McAfee DXL-Integrated Partners

McAfee DXL connects security technologies from multiple vendors through an open platform that builds deeper integration among products. The Security Innovation Alliance facilitates technology interoperability and streamlines the integration of security products. Innovation Alliance partners with McAfee DXL-ready solutions enable bi-directional threat information sharing that helps deliver immediate threat protection. The following Innovation Alliance partners have integrated their solutions with McAfee DXL.

Advanced Cyber Security
Boldon James
Cicada Security Technology

How It Works

Develop once, use many

The OpenDXL application framework increases integration flexibility, simplicity, and opportunity for developers. Unlike typical integrations, each application connects to the universal DXL communication fabric. There is just one integration process instead of multiple efforts. OpenDXL will support a broad range of languages enabling developers to create integrations using their favorite development environment. With OpenDXL, applications can attach and communicate over a universal orchestration layer. One app publishes a message or calls a service; one or more apps consume the message or respond to the service request. As is the goal for any standard, the interaction is independent of the underlying proprietary architecture. Integrations are much simpler because of this abstraction from vendor-specific APIs and requirements.

Wrap once, use many

Developers can also wrap services, their own or a commercial product, to publish data onto DXL. Other services can listen to DXL messages and calls to enrich their functionality with the latest data or take appropriate action. For a more sophisticated app, these sorts of actions can be scripted together to drive a waterfall or simultaneous set of actions—an orchestrated response with or without human involvement.

Deploy once, use many

Enterprises deploy a standardized integration and communication layer over their existing network, with a small DXL client and broker that will manage message exchanges. All DXL traffic is contained within that enterprise’s network, offering data privacy and operational control. A firewall-friendly model maintains a connection between client and server for continuous access to the latest information flowing over the DXL. If something in the publishing or receiving application itself changes, the DXL abstraction layer insulates the rest of the deployment from the change, reducing risk and costs of integration maintenance.

Learn more about OpenDXL

OpenDXL Access

The industry is encouraged to try out OpenDXL now. Python clients, sample codes, and other resources are accessible on our GitHub repository. Security Innovation Alliance (SIA) partners should contact their account teams to gain extra support and opportunities. Customers can download the required DXL components using their grant numbers.

OpenDXL on GitHub Download DXL Components