Skip to content
SPECIFICTION
Get listed

Flare

flare.io

Free trial WebAPI
Visit flare.io
Spec score 7.5 #12 of 26 in Digital Risk Protection Software

What it is

Flare is an identity-first cyber threat intelligence SaaS platform for finding and responding to external threats across dark and clear web sources. Its monitoring includes Telegram channels, dark web forums and markets, paste sites, ransomware leak sites, GitHub repositories, and the clear web. It tracks exposed credentials and identities and maps their links to services. Flare says it collects over one million new stealer logs weekly, including logs from RedLine, Raccoon, Vidar, and Lumma. Its Threat Flow AI engine translates multilingual dark web discussions, connects information across sources, and produces intelligence reports in under five seconds. With Microsoft Entra ID, it can validate exposed credentials and trigger password resets, session revocations, and account lockdowns. Listed integrations include Jira, Microsoft Teams, Slack, Okta, Splunk, and Azure Sentinel; API access includes Python and Go SDKs. Paid pricing is on request. The 14-day free trial requires a video call to verify identity, is for security teams, and is limited to the customer's domain.

Spec sheet

Product
Flare is an identity-first cyber threat intelligence SaaS platform that monitors dark and clear web sources to help organizations detect, prioritize, and respond to external threats.Read 3 Oct 2026 · flare.io
Intended users
Flare describes the platform as built for security operations, threat intelligence, fraud and abuse teams, and security service providers.Read 3 Oct 2026 · flare.io
Integrations
The integrations page lists Jira, Microsoft Teams, Slack, Microsoft Entra ID, Okta, Splunk, and Azure Sentinel, and describes API access with Python and Go SDKs.Read 3 Oct 2026 · flare.io
Headquarters
Montreal, Quebec, CanadaRead 28 Sep 2026 · flare.io
Founded
2017Read 28 Sep 2026 · flare.io
Company
Flare says it was founded in 2017 and is made in Canada; its site lists its office at 1751 Rue Richardson, Unit 3.108, Montreal, Quebec, H3K 1G6.Read 3 Oct 2026 · flare.io
AI analysis
Flare's Threat Flow AI engine translates multilingual dark web discussions, correlates sources, and generates intelligence reports in under five seconds.Read 3 Oct 2026 · flare.io
Identity exposure
Flare monitors for exposed credentials and identities, maps their connections to services, and can trigger remediation through an identity provider.Read 3 Oct 2026 · flare.io
Remediation
Flare can integrate with Microsoft Entra ID to validate exposed credentials and trigger password resets, session revocations, and account lockdowns.Read 3 Oct 2026 · flare.io
Security documents
Flare's trust center lists its privacy policies, data processing addendum, terms, ethical-use policy, and service level agreement; it marks the SOC 2 report and pentest report as private resources available by request.Read 3 Oct 2026 · flare.io
Stealer logs
Flare says it collects over one million new stealer logs weekly, including logs from RedLine, Raccoon, Vidar, and Lumma.Read 3 Oct 2026 · flare.io
Takedown service
Takedown services are a paid feature; some subscription packages include annual requests, and additional takedowns or packages can be purchased separately.Read 3 Oct 2026 · docs.flare.io
Threat sources
Flare says it monitors Telegram channels, dark web forums and markets, paste sites, ransomware leak sites, GitHub repositories, and the clear web.Read 3 Oct 2026 · flare.io
Trial conditions
The free trial is for security teams, requires a video call to verify identity, and is scoped to the customer's domain.Read 3 Oct 2026 · signup.flare.io

Plans and prices

Free 2-Week Trial Free 14 days · no payment info required · identity verification call required · scoped to your domain Read 3 Oct 2026 · signup.flare.io

Every Flare plan and price →

Strong points and limits

Strong points

  • Monitors dark web and clear web sources.
  • Maps exposed identities to connected services.
  • Microsoft Entra ID can trigger account remediation.
  • API access includes Python and Go SDKs.

Limits

  • Paid pricing is available on request.
  • Trial requires an identity-verification video call.
  • Trial scope is limited to the customer's domain.
  • Takedown services are a paid feature.

Who it suits

Flare describes the platform for security operations, threat intelligence, fraud and abuse teams, and security service providers. Trial access is specifically for security teams.

Verdict

Flare combines identity exposure monitoring with threat intelligence sources and remediation workflows. Teams considering it should account for the domain-scoped, verified trial and request pricing directly.

Where Specifiction places it

Alternatives to FlareAll alternatives →