What I make of it
Machine-readable security advisories, including VEX. Pairs with CycloneDX and SPDX.
CSAF (Common Security Advisory Framework)
Exchange Schema
Security
openly published
Specification Presentations Events Tools Lister Schemas FAQ Github Specification Presentations Events Tools Lister Schemas FAQ Github CSAF Community Days 2026: Nov 16-18, Germany – Call for Presentations and Call for Sponsors open OASIS
Other security data models
CACAO Security Playbooks (Collaborative Automated Course of Action Operations)
Information Model
CycloneDX
Information Model
IODEF (RFC 7970)
Exchange Schema
KMIP (Key Management Interoperability Protocol)
Information Model
MISP core format (Malware Information Sharing Platform)
Exchange Schema
OCSF (Open Cybersecurity Schema Framework)
Information Model
OpenC2
Exchange Schema
OSV Schema (Open Source Vulnerability)
Exchange Schema
SCAP (Security Content Automation Protocol)
Information Model
Sigma detection rules
Exchange Schema
SPDX
Information Model
STIX / TAXII
Information Model