CycloneDX
Information Model
Security
openly published
Explore a wide array of use cases along with corresponding examples in both XML and JSON formats....
Also in the API standards catalog
This standard shows up on both sides of the house — as a data model here, and as a standard applied in API operations. Same standard, two lenses.
See it as an API standard →Other security data models
CACAO Security Playbooks (Collaborative Automated Course of Action Operations)
Information Model
CSAF (Common Security Advisory Framework)
Exchange Schema
IODEF (RFC 7970)
Exchange Schema
KMIP (Key Management Interoperability Protocol)
Information Model
MISP core format (Malware Information Sharing Platform)
Exchange Schema
OCSF (Open Cybersecurity Schema Framework)
Information Model
OpenC2
Exchange Schema
OSV Schema (Open Source Vulnerability)
Exchange Schema
SCAP (Security Content Automation Protocol)
Information Model
Sigma detection rules
Exchange Schema
SPDX
Information Model
STIX / TAXII
Information Model