Data Export allows Enterprise customers to access, download, and automate the export of threat intelligence data, including historical archives, bulk datasets, IOFA (Indicators of Future Attack) feeds, organization-specific feeds, and IP context insights.
Whether you're conducting in-depth analysis, integrating data into third-party tools, or maintaining compliance, Data Export provides scalable, flexible options.
Prerequisites
Enterprise user with appropriate permissions
API key for automated exports (see knowledge base)
Some features require add-ons (e.g., IP Context)
IP Context
Enterprise add-on for real-time IP threat insights and automation.
How to View IP Context
From the left navigation menu, select Data Export > IP Context
Browse detailed IP context and threat activities
Archive Exports
Historical threat data for domains/IPs – great for patterns and audit trails.
How to View
From the left navigation menu, select Data Export > Archive Exports
Choose Card or Table view
Automate Export
Card view → Click Automate Export on feed
Select file type
Copy API Endpoint (3-hour URL)
Use cURL/Python/PHP code samples
Manual Text File Export
Click Download File
Select type → Download
Bulk Data Exports
Large AWS-hosted threat datasets (New Domains, Nameservers, Mail Servers, etc.).
Access Feeds
From the left navigation menu, select Data Export > Bulk Data Exports
Export Options
Same as Archive Exports: Automate Export (API + code snippets) or manual Download File.
IOFA Exports
Centralized access to all IOFA threat indicators via one endpoint.
How to View
From the left navigation menu, select Data Export > IOFA Exports
Review feed table (Name, Size, Type, Owner, Tags, etc.)
Export API URL
View feed → Export → Automate Export
Choose Python/cURL/PHP → Copy API Endpoint (JSON, 3 hours)
Organization Exports
Central hub for your team's custom threat indicator feeds.
Access & Search
From the left navigation menu, select Data Export > Organization Exports
Use Search by Name + filters
Download Manually
Click Download → Choose CSV/JSON/TXT/RPZ/STIX
Automate
Click Automate Export
Select format → Copy API Endpoint
Use cURL/Python/PHP snippets
Real World Examples and Use Cases provide more details.
Tips
Use descriptive names/tags
Test endpoints in the browser first
Prefer JSON/CSV for high-volume feeds
API URLs expire after 3 hours – schedule pulls accordingly
Monitor download credits for Organization Exports
Contact support if features are missing