Flare
Montreal, Quebec, Canada
What it is
Flare is an identity-first cyber threat intelligence platform that monitors dark and clear web sources to help organizations detect, prioritize, and respond to external threats. It tracks exposed credentials and identities, maps connections to services, and can support remediation through an identity provider. Sources it says it monitors include Telegram channels, dark web forums and markets, paste sites, ransomware leak sites, GitHub repositories, and the clear web. Flare says it collects over one million new stealer logs weekly, including logs associated with RedLine, Raccoon, Vidar, and Lumma. Its Threat Flow AI engine translates multilingual dark web discussions, correlates sources, and generates intelligence reports in under five seconds. Microsoft Entra ID integration can validate exposed credentials and trigger password resets, session revocations, or account lockdowns. Listed integrations include Jira, Microsoft Teams, Slack, Okta, Splunk, and Azure Sentinel, along with API access and Python and Go SDKs. A free 14-day trial is available to security teams, requires an identity-verification video call, and is scoped to the customer's domain. Paid pricing is on request.
For and against
For
- Monitors dark and clear web sources.
- Tracks exposed credentials and identity connections.
- Integrates with Microsoft Entra ID for remediation actions.
- Offers API access with Python and Go SDKs.
- Free trial lasts 14 days.
Against
- Paid pricing is available on request.
- Trial requires an identity-verification video call.
- Trial scope is limited to the customer's domain.
The verdict
Flare brings external threat monitoring and identity exposure response into one platform, with listed integrations and API access. Its trial has verification and domain-scope conditions, and paid pricing requires an inquiry.
Who it suits
Flare is aimed at security operations, threat intelligence, fraud and abuse teams, and security service providers. Its trial is specifically for security teams and is limited to the customer's domain.
Plans and prices
Free 2-Week Trial
14 days · no payment info required · identity verification call required · scoped to your domain
Read 3 Oct 2026 · signup.flare.io
On the record
- AI analysis
- Flare's Threat Flow AI engine translates multilingual dark web discussions, correlates sources, and generates intelligence reports in under five seconds.flare.io · read 3 Oct 2026
- Company
- Flare says it was founded in 2017 and is made in Canada; its site lists its office at 1751 Rue Richardson, Unit 3.108, Montreal, Quebec, H3K 1G6.flare.io · read 3 Oct 2026
- Identity exposure
- Flare monitors for exposed credentials and identities, maps their connections to services, and can trigger remediation through an identity provider.flare.io · read 3 Oct 2026
- Integrations
- The integrations page lists Jira, Microsoft Teams, Slack, Microsoft Entra ID, Okta, Splunk, and Azure Sentinel, and describes API access with Python and Go SDKs.flare.io · read 3 Oct 2026
- Intended users
- Flare describes the platform as built for security operations, threat intelligence, fraud and abuse teams, and security service providers.flare.io · read 3 Oct 2026
- Product
- Flare is an identity-first cyber threat intelligence SaaS platform that monitors dark and clear web sources to help organizations detect, prioritize, and respond to external threats.flare.io · read 3 Oct 2026
- Remediation
- Flare can integrate with Microsoft Entra ID to validate exposed credentials and trigger password resets, session revocations, and account lockdowns.flare.io · read 3 Oct 2026
- Security documents
- Flare's trust center lists its privacy policies, data processing addendum, terms, ethical-use policy, and service level agreement; it marks the SOC 2 report and pentest report as private resources available by request.flare.io · read 3 Oct 2026
- Stealer logs
- Flare says it collects over one million new stealer logs weekly, including logs from RedLine, Raccoon, Vidar, and Lumma.flare.io · read 3 Oct 2026
- Takedown service
- Takedown services are a paid feature; some subscription packages include annual requests, and additional takedowns or packages can be purchased separately.docs.flare.io · read 3 Oct 2026
- Threat sources
- Flare says it monitors Telegram channels, dark web forums and markets, paste sites, ransomware leak sites, GitHub repositories, and the clear web.flare.io · read 3 Oct 2026
- Trial conditions
- The free trial is for security teams, requires a video call to verify identity, and is scoped to the customer's domain.signup.flare.io · read 3 Oct 2026
