Open Cybersecurity Alliance (OCA)

OCA is building an open ecosystems where cybersecurity products interoperate without the need for customized integrations. We're making standards-based interoperable cybersecurity a reality.

Although many tools already integrate with one another, there is a lack of industry-wide vendor cooperation on protocols and standards surrounding sharing cybersecurity insights and findings.

The OCA works to change that. We develop and promote sets of common code, patterns, and practices so that cybersecurity tools can share data. Products that support the OCA ecosystem will be able to seamlessly interoperate with one another.

Our focus is on data interchange over a common, standardized messaging bus within the threat management lifecycle. That includes threat hunting and detection, analytics, operations, and response.

OCA supports current standards such as STIX and OpenC2, as well as other standards that may be chosen by the community (no matter where they’re developed).