---
title: June 2026
slug: releases/june-2026
docTags: 
createdAt: 2026-06-01T14:22:16.658Z
---

## Identifier Discovery Policies moved to the Policies tab

**Release date**: June 29, 2026

Identifiers Discovery Policies are now managed alongside all other policy types under the Policies tab on the Identifiers page. Previously, Discovery Policies were displayed in a separate tab.

This consolidation brings all policy management into a single location, so you can create and manage Identifier Matching Policies, Identifier Discovery Policies, Tenant Ignored Terms Policies, and Tenant Duplication Policies from one place.

[Learn more](docId\:bmzupnRd3txZNwn0VeUn2)

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/heRKz0gRtRm_GQuGaSt3H_image.png" size="70" width="1276" height="744" isUploading="false" darkWidth="1276" darkHeight="744" position="flex-start" showCaption="false"}

***

## Profile Page Redesign

**Release date:** June 29, 2026

The user Profile page has been updated with a cleaner layout, improved hierarchy, and a more cohesive design. No change in functionality, just a fresh new look.

[Learn more](docId\:MUFLZ4fa2xFLlfBc8TIYZ)

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/dCgNfNU1A48KmAl8WIhOq_image.png" size="70" width="1580" height="1148" isUploading="false" darkWidth="1580" darkHeight="1148" position="flex-start" showCaption="false"}

***

## Search and Switch Tenants

**Release date:** June 29, 2026

The Tenant navigator has been updated with two new capabilities. In addition to easily switching between Tenants, you can now search for a Tenant by name and create new Tenants directly from the navigator:

- **Search:** Use the search bar to quickly find a Tenant by name.
- **Create Tenant:** Create a new Tenant directly from the Tenant navigator without having to access the Settings menu.

[Learn more](docId:4jnD2N4qP8zbuc7ti7REF)

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/QtxWEFakSsT-EKMBb3kYZ_image.png" size="70" isUploading="false" width="1176" height="482" darkWidth="1176" darkHeight="482" position="flex-start" showCaption="false"}

***

## The Cyber Threat Intelligence (CTI) Module

**Release date:** June 24, 2026

The Cyber Threat Intelligence (CTI) Module brings threat intelligence research, reporting, operationalization, and analysis together in the Flare Platform, and offers the following capabilities:

- **Intelligence Browser: **Research threats, actors, campaigns, and indicators and follow the relationships between them to build a full picture of a threat.
- **Threat Flow: **Generate technical and executive-ready intelligence reports scoped to your organization's context, with the ability to pivot any named entity back into the Intelligence Browser.
- **Enterprise IOC Feed:** Deliver IOCs surfaced during research and reporting to your detection and response tools in STIX 2.1 format over the TAXII 2.1 protocol, compatible with SIEMs, SOARs, EDRs, TIPs, and firewalls.
- **Sandbox and File Analysis *****(add-on):*** Investigate suspicious files and URLs discovered inside or outside Flare with enterprise-grade sandbox and analysis technology.

[Learn more](docId\:rrHH7-7ULNlXqtkG-iJTc) | [See how it works](https://flaredemo.storylane.io/hub/atjmfwrb4wrp)

:::Iframe{iframeHeight="0" code="<script async src=&#x22;https://js.storylane.io/js/v2/storylane.js&#x22; data-verify-origin=&#x22;&#x22;></script>&#xA;  <div class=&#x22;sl-embed&#x22; style=&#x22;position:relative;padding-bottom:calc(57.49% + 25px);width:100%;height:0;transform:scale(1)&#x22;>&#xA;    <iframe loading=&#x22;lazy&#x22; class=&#x22;sl-demo&#x22; src=&#x22;https://app.storylane.io/demo/vzbfkkb0vbph?embed=inline&#x22; name=&#x22;sl-embed&#x22; allow=&#x22;fullscreen&#x22; allowfullscreen style=&#x22;position:absolute;top:0;left:0;width:100%!important;height:100%!important;border:1px solid rgba(63,95,172,0.35);box-shadow: 0px 0px 18px rgba(26, 19, 72, 0.15);border-radius:10px;box-sizing:border-box;&#x22;></iframe>&#xA;  </div>"}

:::



***

## Platform Navigation Updates

**Release date:** June 24, 2026

The Flare Platform navigation has been reorganized to make key features easier to find. Here's what has changed:

- There are dedicated sections in the left navigation for Identity Exposure and Threat Intelligence modules.&#x20;
- Settings and Help menus have moved to the top right corner.&#x20;

Click through the following product tour to learn more.

:::Iframe{iframeHeight="0" code="<script async src=&#x22;https://js.storylane.io/js/v2/storylane.js&#x22; data-verify-origin=&#x22;&#x22;></script>&#xA;  <div class=&#x22;sl-embed&#x22; style=&#x22;position:relative;padding-bottom:calc(54.88% + 25px);width:100%;height:0;transform:scale(1)&#x22;>&#xA;    <iframe loading=&#x22;lazy&#x22; class=&#x22;sl-demo&#x22; src=&#x22;https://app.storylane.io/demo/lmg4bck0fecc?embed=inline&#x22; name=&#x22;sl-embed&#x22; allow=&#x22;fullscreen&#x22; allowfullscreen style=&#x22;position:absolute;top:0;left:0;width:100%!important;height:100%!important;border:1px solid rgba(63,95,172,0.35);box-shadow: 0px 0px 18px rgba(26, 19, 72, 0.15);border-radius:10px;box-sizing:border-box;&#x22;></iframe>&#xA;  </div>"}

:::



***

## Okta Integration

**Release date:** June 24, 2026

As part of the Identity Exposure Management (IEM) module, you can now integrate with Okta to sync user identities as Identity Identifiers. With proper configuration, the Okta integration provides the following benefits:

- **Identity Sync:** Pulls users from your Okta directory and creates Identity Identifiers to match against leaked credentials.
- **Identity Profiles:&#x20;**&#x45;ach synced user gets an Identity Profile used for investigation following a credential exposure event.
- **Automated Credential Validation:&#x20;**&#x4C;eaked credentials can be automatically validated to determine whether they are still valid.
- **Bulk Password Validation:&#x20;**&#x42;ulk password validation allows you to select leaked credentials and validate them all at once.
- **Remediation Actions:&#x20;**&#x57;hen a credential is confirmed valid, manual or automated remidiation actions can be performed on it.

[Learn more](docId\:gVu3V0Xvtlo_eJ0KYlEBB)

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/O-oqgtVB1an2r5fqE4Yen_image.png" size="80" width="1646" height="510" isUploading="false" darkWidth="1646" darkHeight="510" position="flex-start" showCaption="false"}

***

## Domain Matching Policy for Identifiers

**Release date:&#x20;**&#x4A;une 17, 2026

Domain Matching Policy for Identifiers is now available for ASTP subscribers. It monitors for compromised credentials associated with your domain and scopes detections to the user population most relevant to your threat model.

Compromised credentials are surfaced using two match modes:

- **Email domain:** Surfaces detections where the compromised credential includes an email address at your organization's domain.
- **Authentication domain:** Surfaces credentials that can potentially grant access to your platform, identifying any user who authenticates on your domain regardless of where their email is hosted.

This gives security teams precise visibility into credential exposures without noise from out-of-scope identities.

[Learn more](docId\:Zg1zxObuLcIJhudRJ_Hkg)

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/szOuTFaNyu0eJkyZcsgWy_image.png" size="70" width="1262" height="1074" isUploading="false" darkWidth="1262" darkHeight="1074" position="flex-start" showCaption="false"}

***

## Usage Dashboard

**Release date:** June 17, 2026

The Usage Dashboard now includes an Overall Organization Usage section at the top of the page. It provides an at-a-glance view of how your organization is consuming key Flare resources for the current month, with a summary card for each of the following:

- **Identifier Usage:** Current Identifier count with your total allotment.
- **IdP-Synced Identities:** Total identities synced from your connected identity provider.
- **Global Search Usage:** Searches run against your quota, with a breakdown by module, member, and Tenant.
- **Takedowns:&#x20;**&#x54;akedown Request usage when the service is enabled.
- **Sandbox Usage:&#x20;**&#x53;andbox quota consumption.

[Learn more](docId\:jr9FD-wclV88VilNG3694)

::Image[]{src="https://images.archbee.com/wtmLmyh6YG71yn5qVtkMM/TU8jkTFctet00PoisKLB7_image.png?format=webp" size="80" width="800" height="486" isUploading="false" darkWidth="800" darkHeight="486" position="flex-start" showCaption="false"}

***

## Audit Logs

**Release date:** June 12, 2026

The following enhancements have been made to Audit Logs:

- Filtering is now available to focus the view to the actions most relevant to your investigation.
- Active filters are reflected in the URL, making filtered views easy to share directly with others.
- Log entries are now retained for one year.

[Learn more](docId\:IurOoR-UUh1F318v4BOQy)

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/p8Fma5efcvrxHd6eJajU8-20260611-154930.png" size="80" width="1731" height="1082" darkWidth="1731" darkHeight="1082" position="flex-start" showCaption="false"}

***

## Identifier API Endpoints

**Release date:** June 9, 2026

Five new endpoints are now available in the [public API for managing Identifiers](https://api.docs.flare.io/api-reference/v4/endpoints/list-identifiers):

- [List Identifiers](https://api.docs.flare.io/api-reference/v4/endpoints/list-identifiers)
- [Create Identifier](https://api.docs.flare.io/api-reference/v4/endpoints/create-identifier)
- [Update Identifier](https://api.docs.flare.io/api-reference/v4/endpoints/update-identifier)
- [Retrieve Identifier](https://api.docs.flare.io/api-reference/v4/endpoints/retrieve-identifier)
- [Delete Identifier](https://api.docs.flare.io/api-reference/v4/endpoints/delete-identifier)

These new endpoints follow a standardized request and response structure, with clearly defined payloads, parameters, and response schemas, improving on the previous assets-based format that caused inconsistencies for some users. The original endpoints remain available alongside the new ones to support current integrations. For new integrations, we recommend using the new endpoints.

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/poccvpY3HVzu1RhFd-_iB_image.png" size="70" isUploading="false" width="1760" height="836" darkWidth="1760" darkHeight="836" position="flex-start" showCaption="false"}

***

## The Breaches Directory

**Release date:** June 9, 2026

The Breaches Directory has been updated with the following changes:

- Breaches without credentials now appear in the directory alongside credential breaches.
- Three new columns (Verified, Credentials, and PII) support granular filtering and clearer at-a-glance context.
- Active filters are reflected in the URL, making it easy to share a filtered view directly with others.
- Breaches with credentials link directly to the Credentials Browser and Leaked Events. Breaches without credentials link directly to the Global Events feed.

[Learn more](docId\:MFoPhcda703RhaUiXoisJ)

![](https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/Fynz08ItDj2XHU-bR7y9j-20260608-020959.png)

***

## Updates to Ransom Leak Events&#x20;

**Release date:** Progressive rollout beginning June 9, 2026

Flare now detects when a ransomware blog post is updated after it has already been crawled and generates a new Ransom Leak Event. The update Event includes a structured view of what changed between the original and updated versions.

[Learn more](docId\:w6hs-sglbc_zGV1RtHOwM)

![](https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/8JNfT8XPKhom7gqz4wf-H-20260608-095110.png)

***

## Jira Service Management Support in Jira Alert Channels

**Release date**: June 10, 2026

Jira Alert Channels now include custom fields which can be used to configure Jira Service Management (JSM) request types. This allows Flare alerts to be routed directly to JSM projects and tracked alongside existing service requests.&#x20;

[Learn more](docId\:KxvmCnotECpsBlK_YPofr)

***

## Sharing Events from The Events Feed

**Release date:** June 3, 2026

A new Share Event action is now available in the Event details -> Actions menu. Selecting it copies a link to the Event to your clipboard, which automatically routes recipients to the correct tenant context when opened.

[Learn more](docId\:DtLs7NX5g-qWOdcS3YdPD)

::Image[]{src="https://api.archbee.com/api/optimize/wtmLmyh6YG71yn5qVtkMM/nQmjDOekM11T30VWkVri9_image.png" size="68" width="1290" height="750" position="flex-start" darkWidth="1290" darkHeight="750" showCaption="false"}