# Flare

## docs.flare.io

- [Collection Data Categories](https://docs.flare.io/collection-data-categories.md)
- [Understand Event Severity](https://docs.flare.io/understand-event-severity.md): Learn how Flare, a powerful security tool, assigns severity levels to activities based on personal information and login credentials. This prioritization helps users filter events, with options to adjust severity thresholds for identifiers and search resu
- [Intelligence Browser](https://docs.flare.io/intelligence-browser.md)
- [Illicit Networks Event Category](https://docs.flare.io/illicit-networks-events.md)
- [Lookalike Domains Event Category](https://docs.flare.io/lookalike-domains-event-category.md)
- [Lookalike Domains Browser](https://docs.flare.io/lookalike-domains-browser.md)
- [Collection Overview](https://docs.flare.io/collection-overview.md)
- [Actions](https://docs.flare.io/actions.md)
- [IOC Feeds](https://docs.flare.io/ioc-feeds.md)
- [Identity Exposure Management Overview](https://docs.flare.io/identity-exposure-management-overview.md)
- [Identifier Recommendations](https://docs.flare.io/identifier-recommendations.md)
- [Rate-limiting of Identifier Event Feeds](https://docs.flare.io/rate-limiting-of-identifier-event-feeds.md)
- [Matching Policies for Account and Session Takeover Prevention](https://docs.flare.io/matching-policies-for-account-and-session-takeover-prevention.md)
- [Identity Profile](https://docs.flare.io/identity-profile.md)
- [Respond to .ph Domain Alerts](https://docs.flare.io/respond-to-ph-domain-alerts.md)
- [Scheduled Reports](https://docs.flare.io/scheduled-reports.md)
- [Severity Rules](https://docs.flare.io/severity-rules.md)
- [IEM Okta Setup](https://docs.flare.io/iem-okta-setup.md)
- [Global Search - Quota](https://docs.flare.io/global-search-quota.md)
- [Integrations Hub](https://docs.flare.io/integrations-hub.md)
- [Breaches](https://docs.flare.io/breaches.md)
- [Advanced Search](https://docs.flare.io/advanced-search.md): Learn how to optimize your search experience on our platform with Lucene Query Syntax. Discover advanced search options like boolean operators and regexes, and ensure accurate results by using double quotes for domains, keywords, and more. Access the Adva
- [Policies](https://docs.flare.io/policies.md): Learn how to manage the flow of alerts in Flare with the help of policies. These customizable rules prevent repetitive alerts for market listings, forum posts, chat messages, and paste files. Discover how these policies minimize noise and redundancy.
- [Matching Policies to Filter Events](https://docs.flare.io/matching-policies-to-filter-events.md)
- [Duplication Policies for Tenants](https://docs.flare.io/duplication-policies-for-tenants.md)
- [Identifiers](https://docs.flare.io/identifiers.md): Learn how to create, manage, and track data using Identifiers with Flare. Set up email alerts, query external sources, and monitor resources effortlessly. This document offers step-by-step instructions for creating Identifiers and Identifier groups, as we
- [Audit Logs](https://docs.flare.io/audit-logs.md)
- [Intel](https://docs.flare.io/intel.md)
- [Events](https://docs.flare.io/events.md): Learn how Flare's Events feature allows you to effortlessly collect and view data based on Identifiers. Dive into detailed reports summarizing the collected data for individual Identifiers or groups. Take advantage of various actions like marking events a
- [Search with AI](https://docs.flare.io/search-with-ai.md)
- [Reports Migration FAQ](https://docs.flare.io/reports-migration-faq.md)
- [Sandbox](https://docs.flare.io/sandbox.md)
- [Flare Executive and VIP Monitoring](https://docs.flare.io/flare-executive-and-vip-monitoring.md)
- [Dashboard](https://docs.flare.io/dashboard.md)
- [Global Search](https://docs.flare.io/global-search.md)
- [IEM Credential Browser](https://docs.flare.io/iem-credential-browser.md)
- [ServiceNow](https://docs.flare.io/servicenow.md): The ServiceNow integration posts alert data as records into a ServiceNow table using API key authentication. Setup requires an authentication profile, REST API key, and access policy in ServiceNow.
- [Pre-Sales Tenants](https://docs.flare.io/pre-sales-tenants.md)
- [The CTI Module](https://docs.flare.io/the-cti-module.md)
- [Sentinel Integration](https://docs.flare.io/sentinel-integration.md): The Sentinel integration sends alert data into Microsoft Sentinel through a codeless connector in the content hub. It includes prebuilt analytic rules and workbooks for visualizing risk scores and leaked credentials.
- [Respond to Illicit Networks Events](https://docs.flare.io/respond-to-illicit-networks-events.md): Learn how to effectively handle various alerts received from the Dark Web with this comprehensive guide. From Market Listing alerts to Infected Devices alerts, discover the potential risks and discover step-by-step instructions on how to analyze, evaluate
- [Credentials Browser](https://docs.flare.io/credentials-browser.md)
- [Roles & Permissions](https://docs.flare.io/roles-and-permissions.md)
- [Open Ports](https://docs.flare.io/open-ports.md): Discover the risk scores associated with different ports for digital footprint events. Learn which ports are low risk, such as port 80 (HTTP) and port 443 (HTTPS), as well as port 20 (FTP), port 21 (FTP control), and more. Find out which ports are medium
- [IEM Entra ID Setup](https://docs.flare.io/iem-entra-id-setup.md)
- [Azure Sentinel IOC Feed Setup](https://docs.flare.io/azure-sentinel-ioc-feed-setup.md)
- [Use Cases](https://docs.flare.io/use-cases.md)
- [Configure Identifiers - Advanced](https://docs.flare.io/configure-identifiers-advanced.md): Learn advanced techniques to identify and monitor ransomware victims effectively. Discover how to set up an identifier for receiving timely notifications about new victims from different online sources. Find out how to tailor your monitoring activities to
- [What We Are Working On](https://docs.flare.io/what-we-are-working-on.md)
- [Network](https://docs.flare.io/network.md)
- [Supply Chain Ransomware Exposure Monitoring](https://docs.flare.io/supply-chain-ransomware-exposure-monitoring.md)
- [Threat Flow](https://docs.flare.io/threat-flow.md)
- [Alert Central](https://docs.flare.io/alert-central.md)
- [SSO and Authentication](https://docs.flare.io/sso-and-authentication.md): Learn how to configure Single Sign-On (SSO) in Flare using SAML providers such as Microsoft Azure Active Directory, Okta, and Google. This document guides organization administrators in selecting the desired identity provider and choosing between "Enabled
- [IEM FAQ](https://docs.flare.io/iem-faq.md)
- [SSO SAML Configuration](https://docs.flare.io/sso-saml-configuration.md)
- [Forum Thread Intelligence](https://docs.flare.io/forum-thread-intelligence.md)
- [Takedown Services](https://docs.flare.io/takedown-services.md)
- [Tenants](https://docs.flare.io/tenants.md): Learn how to manage tenants in Flare workspaces with this document. Understand the concept of shared and personal tenants, and discover how to create, edit, switch between, and delete them. Find useful links for configuring identifiers, browsing an event
- [Microsoft Entra ID](https://docs.flare.io/microsoft-entra-id.md): The Microsoft Entra ID integration checks whether flagged credentials are still active in Entra ID and links to the affected user. It requires an app registration with directory read permissions.
- [Search in Existing Data](https://docs.flare.io/search-in-existing-data.md): Discover the risk scores associated with different ports for digital footprint events. Learn which ports are low risk, such as port 80 (HTTP) and port 443 (HTTPS), as well as port 20 (FTP), port 21 (FTP control), and more. Find out which ports are medium
- [Respond to Open Web Events](https://docs.flare.io/respond-to-open-web-events.md): This document provides comprehensive guidance on how to respond to various security events detected by Flare. From Open Web sources to Google, source code, and cloud platforms, it covers a wide range of event types. Each event is thoroughly explained, inc
- [Jira](https://docs.flare.io/jira.md): The Jira integration creates Jira issues automatically from alerts, with optional Jira Service Management support. It supports custom labels, dynamic formatting, and additional custom fields.
- [Discord](https://docs.flare.io/discord.md): The Discord integration sends alerts to a Discord channel through Discord's native webhook feature. Setup takes just a channel name and a webhook URL.
- [Event Trends](https://docs.flare.io/event-trends.md)
- [Azure Sentinel Integration (Legacy)](https://docs.flare.io/azure-sentinel-integration-legacy.md): The Azure Sentinel integration (legacy) sends alerts directly to an Azure Sentinel workspace using a workspace ID and shared key. New setups should use the Sentinel integration instead.
- [Respond to Leaked Credentials Events](https://docs.flare.io/respond-to-leaked-credentials-events.md): Learn how to effectively respond to credential leaks and protect your users with this comprehensive guide. Discover important steps to take before notifying users, such as ensuring leaked credentials align with password policies and verifying breach dates
- [Unresolved Events](https://docs.flare.io/unresolved-events.md)
- [Reports](https://docs.flare.io/reports.md): Learn how to analyze and understand collected data with Flare's comprehensive reporting feature. Create custom reports and tailor them to your specific audience, whether technical or executive. Access a range of options such as security incident details,
- [Tenant Portfolio](https://docs.flare.io/tenant-portfolio.md)
- [Discovery Policies for Identifiers](https://docs.flare.io/discovery-policies-for-identifiers.md)
- [Ignored Terms Policies for Tenants](https://docs.flare.io/ignored-terms-policies-for-tenants.md)
- [Notifications Center](https://docs.flare.io/notifications-center.md)
- [Identifier Trends](https://docs.flare.io/identifier-trends.md)
- [Matching Policies for Identifiers](https://docs.flare.io/matching-policies-for-identifiers.md)
- [Saved Queries](https://docs.flare.io/saved-queries.md)
- [Respond to Look-alike Domains Events](https://docs.flare.io/respond-to-look-alike-domains-events.md): Learn how to protect your brand and intellectual property from phishing and malware attacks with the "Look-alike Domains" alert. Find out how to verify the alert, investigate suspicious domains, report incidents, and take necessary actions to mitigate the
- [Conversation Explorer](https://docs.flare.io/conversation-explorer.md)
- [Team](https://docs.flare.io/team.md): Learn how teams in Flare can enhance user management for your organization. With customizable permissions and access levels, teams offer improved organization and control over data access. Administrators can easily add, edit, and disable members, and inst
- [Profile](https://docs.flare.io/profile.md): Learn how to access and manage your profile on our platform with this comprehensive document. Discover how to view and update personal information, modify preferences, and enhance security settings. Explore the option to generate API keys for secure authe
- [Usage](https://docs.flare.io/usage.md)
- [Actor Intelligence](https://docs.flare.io/actor-intelligence.md)
- [Playbooks](https://docs.flare.io/playbooks.md)
- [Event Explorer](https://docs.flare.io/event-explorer.md)
- [Telegram Channels](https://docs.flare.io/telegram-channels.md)
- [Configure Identifiers](https://docs.flare.io/configure-identifiers.md): Learn about the different identifier types in the Flare system and how they can be used to search for specific information. Discover how to select categories and severity levels, configure alerts, add identifiers to groups, and explore related articles fo
- [Welcome to Flare!](https://docs.flare.io.md): Welcome to Flare! Explore our product documentation to better understand how to navigate the Flare platform, create Tenants and Identifiers, collaborate with your teammates, and more
- [Intelligence Objects Event Category](https://docs.flare.io/Xd3c-intelligence-object-events.md)
- [Leaked Credentials Event Category](https://docs.flare.io/leaked-credentials-events.md)
- [Email Alerts](https://docs.flare.io/email-alerts.md): Learn how to add email alerts in Flare with this comprehensive document. Discover how to create an Alert Channel from the Team page for efficient management of new alerts. Alternatively, follow the step-by-step instructions and screenshots to create alert
- [Collection](https://docs.flare.io/collection.md)
- [Get Started](https://docs.flare.io/get-started.md): Improve your organization's online security with Flare, the comprehensive platform that searches, monitors, and alerts you to potential threats and data leaks.
- [Identifiers - Listing Subdomains](https://docs.flare.io/identifiers-listing-subdomains.md): Learn how to list subdomains using the Flare tool in this helpful document. Discover how the tool utilizes Amass to access third-party services for subdomain enumeration, but be cautious when using it for sensitive domains due to potential disclosure of i
- [Emerging Sources](https://docs.flare.io/emerging-sources.md)
- [Source Code Secret Detection](https://docs.flare.io/source-code-secret-detection.md)
- [DATA SOURCES](https://docs.flare.io/data-sources.md): Learn more about the specific sources from which Flare's data originates and how it can benefit your business. Explore this document for valuable insights and make well-informed decisions based on reliable and accurate information.
- [Product Specifications](https://docs.flare.io/product-specifications.md): Flare is a powerful SaaS platform hosted on AWS, accessible through a user-friendly web interface. Compatible with popular browsers like Google Chrome, Firefox, and Microsoft browsers, Flare offers seamless sign-in using created accounts. With no need for
- [Permutation strategies](https://docs.flare.io/permutation-strategies.md)
- [REFERENCES](https://docs.flare.io/references.md): Unfortunately, since there is no information or content available in the document, it is not possible to generate an SEO description.
- [Queries](https://docs.flare.io/queries.md)
- [Microsoft Teams](https://docs.flare.io/microsoft-teams.md): The Microsoft Teams integration sends alerts to a Microsoft Teams channel through an incoming webhook workflow. Setup steps changed as of April 30, 2026, when Microsoft updated how Teams webhooks are created.
- [Asset Relations](https://docs.flare.io/asset-relations.md): Discover the new advanced exploration features of Flare's API V3 release. Uncover insights into asset relationships with the glossary of specialized terms provided in this document. Learn about the API additions, including monitoring assets related to pub
- [Fraudster Jargon](https://docs.flare.io/fraudster-jargon.md): Learn about various fraudulent activities related to credit cards and banking in this document. Discover how criminals purchase credit card numbers, launder funds with bitcoin, bypass security measures, steal funds from bank accounts, and more. Explore ex
- [Illicit Networks](https://docs.flare.io/illicit-networks.md): Learn about the Illicit Networks category and its subcategories on the dark web with this document. Discover markets, account shops, infected devices, forum posts, profiles, chats, and ransom leaks. Explore the authentication, crawling, and scraping proce
- [Webhooks](https://docs.flare.io/webhooks.md): The webhooks integration sends alerts to any service that accepts incoming webhooks, such as Tines, Zapier, or IFTTT. It supports optional signature validation and basic auth for verifying payloads.
- [Splunk App](https://docs.flare.io/splunk-app.md): The Splunk app brings full event data into Splunk for correlation, enrichment, and automated response. It installs from the Splunk marketplace or Splunkbase and configures with an API key.
- [Event Date Fields](https://docs.flare.io/event-date-fields.md)
- [Slack](https://docs.flare.io/slack.md): The Slack integration sends alerts to a Slack channel through an incoming webhook. Setup takes just a channel name and a webhook URL.
- [Data Fields](https://docs.flare.io/data-fields.md): This document provides a comprehensive overview of the different fields extracted from Flare's data collection. Learn about Lucene Query Syntax and the three levels of document support. Understand the importance of metadata fields like unique ID, source,
- [RESEARCH CENTER](https://docs.flare.io/research-center.md): Visit Flare's Research Center to access valuable information and resources on various topics. Stay up to date with the latest research findings and enhance your knowledge in a wide range of subjects. Dive deep into the provided link and unlock a wealth of
- [Legacy Splunk App](https://docs.flare.io/legacy-splunk-app.md)
- [Open Web](https://docs.flare.io/open-web.md): Learn about the various categories of Open Web data collection, such as Pastes, Social Media, Source Code, Google, Digital Footprint, Shodan, and Buckets. Discover the methods for gathering data from GitHub, Stack Overflow, and Google. Explore the data en
- [Splunk Cloud (Legacy)](https://docs.flare.io/splunk-cloud-legacy.md): The Splunk Cloud integration (legacy) sends alert data into a Splunk index using an HTTP Event Collector token. The Splunk app is the newer on-premises option.
- [Leaked Credentials](https://docs.flare.io/leaked-credentials.md): This document discusses the risks and impacts of leaked information from data breaches, particularly focusing on the immediate risk of leaked credentials. It addresses the various risks associated with leaked personal information such as names, email addr
- [Lookalike Domains Data Source](https://docs.flare.io/lookalike-domains-data-source.md): This document explains how SSL certificate monitoring tracks certificates from specified authorities, using fuzzy match algorithms to prevent typosquatting and phishing. Factors such as suspected ownership, registration authority, domain similarity, and n

## Release Notes (/releases)

- [2024 Releases](https://docs.flare.io/releases/2024-releases.md)
- [August 2026](https://docs.flare.io/releases/august-2026.md)
- [February 2026](https://docs.flare.io/releases/february-2026.md)
- [May 2026](https://docs.flare.io/releases/may-2026.md)
- [July 2026](https://docs.flare.io/releases/july-2026.md)
- [March 2026](https://docs.flare.io/releases/march-2026.md)
- [April 2026](https://docs.flare.io/releases/april-2026.md)
- [January 2026](https://docs.flare.io/releases/january-2026.md)
- [2025 Releases](https://docs.flare.io/releases/2025-releases.md)
- [September 2026](https://docs.flare.io/releases.md)
- [June 2026](https://docs.flare.io/releases/june-2026.md)