PAGES
← all tools
◆ Threat Intelligence

Flashpoint

changelog-20261031-6acbd188 commercial

Summary

Flashpoint is a commercial threat-intelligence platform that aggregates and analyzes data from sources like compromised credentials, ransomware activity, technical indicators, vulnerability feeds, and open-source and geospatial intelligence, delivered as a hosted service (Ignite) with add-on modules such as EASMEASMExternal Attack Surface Management: a discipline and category of tooling that continuously discovers and monitors an organization's internet-facing assets to identify exposures before attackers do. and Echosec. It authenticates against an organization's existing subscription and now exposes its intelligence to AI assistants through an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, with a read-only access model that lets analysts query and enrich data without altering configurations. It's built for cyber threat intelligence and fraud teams, SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts, and OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. researchers rather than individual developers, and it sits in the threat-intel category alongside tools that combine dark web monitoring, attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management, and analyst tooling. Launched in 2010 and still shipping releases roughly monthly, with its latest just 15 days old, it is actively maintained.

How Flashpoint helps

Have any of our employee or customer credentials shown up in a breach?

searches Compromised Credentials data across Enterprise and Customer sets and returns matches an analyst can pull into an investigation

Is this indicator or CVE something we should actually worry about right now?

cross-references Technical Indicators and Vulnerability Intelligence against Finished Intelligence Reports and News to surface context on active exploitation

Is a ransomware group naming us or a partner as a target?

queries Ransomware Activity data and returns matches by entity so a team can check exposure without opening a separate dashboard

Which of our hosts are already infected and talking to attacker infrastructure?

looks up Infected Hosts data and returns entries tied to the organization's watched assets

Can an analyst pull this intelligence into Claude or Gemini without risking a config change?

exposes the data through a read-only MCP connection, so the AI assistant can search, retrieve, and enrich results but cannot alter settings, create alerts, or touch workflows

Where has a location or business name turned up across open-source and geospatial sources?

runs a plain-language query through Echosec's natural language search over its geospatial OSINT sources instead of requiring structured query syntax

all 12 features, with the evidence for each →

Languages

Not documented

Features

12 capabilities

Built from Flashpoint's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What Flashpoint offers you

  • MCP server1
  • Natural-language query1
All capabilities 12 capabilities
Managed Attribution anonymous browsing shipped suggested Provides a redesigned Managed Attribution environment with a built-in Anonymous Browser for conducting attribution-controlled analysis of threats, including direct pivot workflows from Flashpoint Ignite and on-demand exit location changes. 9 releases · 4 other sources · first seen Dec 2025

Suggested capability: Malware sandbox analysis. This is our guess, not confirmed.

release 9 total

  • Enables on-demand Exit Location changes for Managed Attribution virtual machines without interrupting workflow. changelog · Oct 2026 · source · release history
  • Adds a streamlined workflow to transition directly from discovering a threat in Flashpoint Ignite to safely analyzing it within Managed Attribution. changelog · Oct 2026 · source · release history
  • Adds a full product redesign of Flashpoint Managed Attribution with a built-in Anonymous Browser capability. changelog · Oct 2026 · source · release history
  • Adds zero-persistence session behavior that automatically wipes all cookies and history upon closing a browser instance May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026 · source · release history
  • Introduces an Anonymous Browser capability alongside the persistent Managed VM for instant, isolated triage sessions May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026 · source · release history
  • Adds support for rotating exit IPs to mask analyst identity during active research within the anonymous browser May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026 · source · release history

example

  • Pivot from a threat discovered in Ignite directly into Managed Attribution's Anonymous Browser for safe, attribution-controlled analysis. In Flashpoint Ignite, locate a threat item of interest, then select 'Analyze in Managed Attribution' to open it inside the built-in Anonymous Browser with a chosen Exit Location. changelog · Oct 2026 · source
  • Leverage the new anonymous browsing for attribution tasks. Access the built-in Anonymous Browser via the Managed Attribution interface. May 8, 2026: Managed Attribution Redesign and Anonymous Browsing · May 2026 · source
  • Perform rapid, untraceable triage of a suspicious link without leaving artifacts in the browser history. In the Managed Attribution interface, launch the new 'Anonymous Browser' instance to open and analyze the target URL. May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026 · source
  • Pivot from a discovered malware attachment in Ignite to an isolated analysis environment without exposing your local machine. Locate the file attachment in an Ignite search thread and click the 'Download Safely' icon next to the standard download button. Jan 22, 2026: Download Safely in Managed Attribution (2026-01-21) · Jan 2026 · source
Natural language intelligence search shipped Enables querying Flashpoint intelligence collections and Echosec geospatial data using plain-language queries instead of structured search syntax. 7 releases · 5 other sources · first seen Dec 2025

Also counts toward: Natural-language query

release 7 total

  • Adds Optimize, an AI-powered feature that automatically suggests and inserts location-based keywords (business names, street names, landmarks) into real-time location-based searches. changelog · Oct 2026 · source · release history
  • Adds Natural Language Search and AI Results Refinement to the Echosec Locate view for geospatial OSINT discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ changelog · Oct 2026 · source · release history
  • Adds Natural Language Search to Echosec, Flashpoint's geospatial open-source intelligence tool, enabling query-by-plain-language across geospatial data sources. changelog · Aug 2026 · source · release history
  • Allows users to search using plain language descriptions instead of Boolean syntax Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026 · source · release history
  • Adds natural language query input to Echosec search workflow for plain-language threat and location discovery Aug 6: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026 · source · release history
  • Supports natural-language retrieval across Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials (Enterprise & Customers), Infected Hosts, and Strategic Entity Data (SED). June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026 · source · release history

docs

  • Aug 6: Search and Discover Using Natural Language in Echosec Flashpoint’s geospatial open-source intelligence tool, Echosec, now features Natural Language Search and AI Results Refinement, bringing an intuitive approach to search and discovery in the Locate view. docs update · Oct 2026 · source
  • Product Update: Search and Discover Using Natural Language in Echosec Ask Questions, Get Answers: A New Way to Search and Refine Results in Echosec SHARE THIS: See it in action. Get a Demo Contact Sales seen Aug 2026 · source

example

  • Use Natural Language Search in Echosec to find geospatial intelligence without crafting boolean queries. In Echosec, open the Locate view, type a plain-language query such as 'protests near central station last 48 hours', then use AI Results Refinement to narrow the returned posts. changelog · Oct 2026 · source
  • Use plain language to quickly find relevant OSINT posts about a specific location or topic In the Echosec search interface, type your query in natural language (e.g., 'protests near central park last week') and review the relevance-ranked results. Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026 · source
  • Use the new UI controls in the Monitor view to automate keyword research for location-based monitoring alerts. In the Monitor view, create a new location-based search and click the 'Optimize Locations' button next to the search bar. Dec 16, 2025: Introducing Echosec Optimize: Improving Location-Based Results with AI (2025-12-16) · Dec 2025 · source
MCP Server for AI assistant integration shipped Allows AI assistants to query Flashpoint intelligence directly using the Model Context Protocol, with read-only access authenticated via OAuth or API token and scoped to the organization's existing subscription entitlements. 10 releases · 1 other source · first seen Jun 2026

Shared capability: MCP server

Also counts toward: MCP server

release 10 total

  • Exposes Ransomware Files intelligence programmatically via Flashpoint's Model Context Protocol (MCP) server for ingestion into SIEMs, SOARs, and internal tools. Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source · release history
  • Exposes Flashpoint intelligence modules including Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials, Infected Hosts, and Strategic Entity Data as queryable tools. June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026 · source · release history
  • Read-only access model: AI systems can search, retrieve, enrich, and analyze intelligence without the ability to alter settings, create alerts, or modify operational workflows. June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026 · source · release history
  • Supports OAuth authentication or API tokens for connecting AI assistants to the Flashpoint MCP Server. June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026 · source · release history
  • Supports OAuth authentication or API token connections for MCP-compatible clients like Claude and Gemini June 25: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026 · source · release history
  • Authenticates via OAuth or API token, automatically inheriting the organization's existing Flashpoint subscription entitlements. June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026 · source · release history

example

  • Connect an MCP-compatible AI client like Claude to access Flashpoint intelligence via OAuth. Configure your MCP client (e.g., Claude) to connect to the Flashpoint MCP Server using OAuth authentication or an API token. June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026 · source
AI-driven location keyword optimization shipped Uses AI to generate hyper-relevant, location-based keywords and automates keyword research for monitoring alerts to address the scarcity of geotagged social media data. 7 releases · 3 other sources · first seen Dec 2025

release 7 total

  • Adds AI-driven optimization that suggests and inserts relevant location-based keywords (business names, street names, landmarks) into real-time searches within the Locate View. Apr 23, 2026: AI Location Optimization in the Locate View · Apr 2026 · source · release history
  • Enables specification of suggestion types (e.g., schools, landmarks) via a new location pin icon dropdown in the Optimize workflow Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026 · source · release history
  • Adds Optimize now button to generate and select location suggestions within the current geographic area before searching Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026 · source · release history
  • Adds AI-powered Optimize feature to the Locate view's location search bar that automatically suggests and inserts relevant location-based keywords (business names, street names, landmarks) into real-time searches Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026 · source · release history
  • Adds an Optimize Locations button next to the search bar in the Monitor view for AI-generated location-based keyword suggestions Dec 16, 2025: Introducing Echosec Optimize: Improving Location-Based Results with AI (2025-12-16) · Dec 2025 · source · release history
  • Adds Echosec Optimize, an AI-driven capability that generates hyper-relevant, location-based keywords to address the scarcity of geotagged social media data. Dec 16, 2025: Introducing Echosec Optimize: Improving Location-Based Results wit · Dec 2025 · source · release history

example

  • Automatically enrich a real-time location search with relevant keywords like business names and landmarks. Enter a location query in the Locate View; observe AI-suggested keywords appearing automatically. Apr 23, 2026: AI Location Optimization in the Locate View · Apr 2026 · source
  • Use this to quickly build a context-rich search for an unfamiliar area by letting AI suggest key local landmarks. In the Locate view location search bar, click 'Optimize' > click the location pin icon > select 'landmarks' > click 'Apply' > click 'Optimize now' > select suggested locations > click 'Search'. Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026 · source
  • Capture ground-level conversations by layering specific business names and streets into a real-time query. In the Locate view location search bar, click 'Optimize' > click the location pin icon > select 'businesses' > click 'Apply' > click 'Optimize now' > manually add or check suggested locations in the… Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026 · source
Ransomware Files search and exposure monitoring shipped Enables organizations to search leaked ransomware file trees by name, path, or keyword within Ignite, filter results by threat group, victim, or file type, trace results back to originating victim posts, submit RFIs from matches, and receive proactive alerts when sensitive file paths appear in new leaks. 6 releases · 3 other sources · first seen Oct 2026

release

  • Adds Ransomware Files as a searchable data type in Ignite, enabling search across leaked file trees by file name, path, or keyword.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source · release history
  • Adds filters — Ransomware Group, Victim Name, and File Type — to refine Ransomware Files search results. Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source · release history
  • Adds a file sample view on ransomware victim posts with one-click search to surface all related files from a given leak. Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source · release history
  • Enables direct RFI (Request for Intelligence) submission from a confirmed Ransomware Files match inside Ignite. Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source · release history
  • Links every Ransomware Files search result directly to its originating ransomware victim post for full threat-actor context. Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source · release history
  • Adds proactive alerting on critical file paths with real-time notifications delivered in-platform, via email, or to Slack channels. Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source · release history

docs

  • Oct 22, 2026: Ransomware Files in Ignite Ransomware Files in Ignite gives organizations direct, instant visibility into leaked file paths and trees within Flashpoint Ignite, enabling teams to assess exposure, prioritize response, and mitigate risk before threat actors can further exploit the data. docs update · Oct 2026 · source

example

  • Verify whether your organization's files appear in any ransomware leak, narrowing results to a specific threat group and file type. In Ignite, select the 'Ransomware Files' data type > enter a file name or path keyword > apply filters: Ransomware Group = <group name>, File Type = <extension> > review results and click any result… Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source
  • Automate monitoring of a sensitive file path so your team is instantly notified the moment it appears in a new leak. In Ignite, open 'Ransomware Files' > run a search for the sensitive path > click 'Set Alert' > configure notification channels: in-platform, email, and/or Slack channel > save the alert. Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026 · source
AI-summarized alert briefings shipped Generates structured, reference-backed summaries for Community alerts, surfaced as an in-platform view or delivered via daily email briefings. 5 releases · 3 other sources · first seen Jan 2026

release

  • Adds AI Summarization for Alerting in Flashpoint Ignite, delivering structured, reference-backed summaries for Community alerts via in-platform view or daily email briefings. changelog · Oct 2026 · source · release history
  • Adds Daily AI Summary Emails feature, enabling automatic bundling of the previous 24 hours of alert activity into structured emails sent to designated recipients Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026 · source · release history
  • Adds Summarize button in the My Alert Results tab to generate structured, reference-backed intelligence briefs from a selected alert rule Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026 · source · release history
  • Adds in-platform AI-generated summaries for Community alerts that are structured and reference-backed to reduce alert fatigue Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite · Jan 2026 · source · release history
  • Adds configurable Summary Intent options (CTI, Fraud, Physical Security, Executive Risk) and custom guidance fields to refine AI summaries before generation Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026 · source · release history

example

  • Generate a quick intelligence brief for a specific alert rule directly from the inbox. In My Alert Results tab, select an alert rule, click Summarize. Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026 · source
  • Refine the summary focus using a domain-specific intent before generation. Before clicking Summarize, select Summary Intent: CTI or provide custom prompt like 'Identify and prioritize immediate financial or account takeover risks'. Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026 · source
  • Automate daily intelligence updates for stakeholders via email. In alert rule settings, enable Daily AI Summary Emails. Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026 · source
Intelligence Requirements Management shipped Enables creation and management of Priority Intelligence Requirements (PIRs) and General Intelligence Requirements (GIRs) using templates or custom definitions, with visibility metrics and workflow integration. 6 releases · 2 other sources · first seen May 2026

release

  • Enables escalation of intelligence findings into Investigations workflows with optional direct connection to specific PIRs for operational tracing May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source · release history
  • Introduces a dedicated Intelligence Requirements experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in Flashpoint Ignite May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source · release history
  • Enables pre-built PIR templates and custom requirement creation to accelerate onboarding May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source · release history
  • Provides visibility metrics on monitoring activity, investigative escalations, and operational workflows tied to specific intelligence priorities May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source · release history
  • Introduces a dedicated experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in the platform, supported by pre-built templates or custom definitions May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source · release history
  • Adds capability to align monitoring alert rules—both existing user-created rules and AI-recommended ones—to specific PIRs within the platform May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source · release history

example

  • Create a new Priority Intelligence Requirement (PIR) for monitoring ransomware activity in your industry. In the Ignite UI, navigate to Intelligence Requirements > New PIR and select the pre-built 'Ransomware Targeting' template. May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source
  • Align an existing alert rule to a specific PIR to reduce noise and focus monitoring on strategic priorities. In the Ignite UI, open an existing Alert Rule > Edit > Select 'Priority Intelligence Requirement' and choose the relevant PIR from the dropdown. May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026 · source
ATM Receipts Dashboard shipped Analyzes compromised ATM receipt images within Flashpoint Fraud Intelligence, exposing card and account data, deposits, and fraud trends. 2 releases · 1 other source · first seen Nov 2025

release

  • Introduces the ATM Receipts Dashboard in Flashpoint Fraud Intelligence for analyzing compromised ATM receipt images, exposing card and account data, deposits, and fraud trends. changelog · Oct 2026 · source · release history
  • Adds the ATM Receipts Dashboard in Flashpoint Fraud Intelligence to analyze compromised ATM receipt images from illicit sources Nov 6, 2025: Introducing the ATM Receipts Dashboard for Flashpoint Fraud Intelli · Nov 2025 · source · release history

example

  • Use the new dashboard to detect exposed card and account data from compromised ATM receipts at scale. In Fraud Intelligence, navigate to the new ATM Receipts Dashboard to begin analyzing illicit receipt imagery. Nov 6, 2025: Introducing the ATM Receipts Dashboard for Flashpoint Fraud Intelli · Nov 2025 · source
Echosec filter sharing shipped Allows teams to share saved filters in Echosec to synchronize workflows and reduce noise when working with large datasets. 3 releases · first seen Dec 2025

release

  • Introduces Filter Sharing in Echosec to synchronize teams and reduce noise in large datasets. changelog · Oct 2026 · source · release history
  • Adds Filter Sharing capability in Echosec to enable team synchronization of filters. Dec 18, 2025: Introducing Filter Sharing in Echosec · Dec 2025 · source · release history
  • Enables sharing of saved search filters within the Echosec interface to standardize monitoring across teams. Dec 18, 2025: Introducing Filter Sharing in Echosec (2025-12-18) · Dec 2025 · source · release history
External Attack Surface Management (EASM) shipped Provides a continuous attacker's-eye view of an organization's external perimeter as an add-on module within Flashpoint Ignite. 2 releases · 1 other source · first seen May 2026

release

  • Launches Flashpoint External Attack Surface Management (EASM) as an add-on module in Ignite, providing a continuous attacker's-eye view of the perimeter. changelog · Oct 2026 · source · release history
  • New EASM module available as an add-on in the Flashpoint Ignite service, providing continuous external attack surface management. May 5, 2026: Introducing Flashpoint External Attack Surface Management (EASM) (2026-05-05) · May 2026 · source · release history

example

  • Operationalize EASM by seeding it with your known domains and IPs to begin continuous asset discovery within Ignite. In the Ignite console, navigate to the new EASM module and enter your seed keywords (known domains and IP addresses) to start the inventory triage workflow. May 5, 2026: Introducing Flashpoint External Attack Surface Management (EASM) (2026-05-05) · May 2026 · source
Intent-Based Result Ranking shipped Ranks search results based on relevance to user intent rather than chronological order. 2 releases · first seen Aug 2026

release

  • Implements relevance-based ranking of results based on search intent rather than chronology Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026 · source · release history
  • Introduces AI-driven relevance ranking that prioritizes results by user intent rather than chronological order Aug 6: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026 · source · release history
Iterative Deep-Dive Search shipped Supports follow-up questioning and drilling into search results while preserving context parameters. 2 releases · first seen Aug 2026

release

  • Adds iterative follow-up questioning capability to drill deeper into search results while preserving context Aug 6: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026 · source · release history
  • Enables follow-up questions to drill deeper into initial search context without losing original parameters Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Screenshots

From the release notes, newest first. Click one to see it full size.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Flashpoint, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Flashpoint puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Website history

flashpoint.io, every change

Flashpoint's home page and 39 more pages as they looked each month from January 2023 to October 2026: 48 renders, 6 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Coverage

Missing something? Tell us

What Flashpoint connects to, runs on and detects, read from its release notes and docs. So far: 1 new detection.

Show

1 change, tracked since Oct 31, 2026.

  • Oct 312026

    new Ransomware Files in Ignite

    With Flashpoint Ignite

    Ransomware Files in Ignite gives organizations direct, instant visibility into leaked file paths and trees within Flashpoint Ignite, enabling teams to assess exposure, prioritize response, and mitigate risk before threat actors can further exploit the data.

    Source ↗

How we count

Read from 3 of 28 release notes and docs updates we hold for Flashpoint. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through Flashpoint's life, so an old integration can show a recent first-seen date.

Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.

Releases

Show
Coverage in all entries

28 entries

  1. October 20266
  2. August 20263
  3. June 20263
  4. May 20265
  5. April 20262
  6. January 20263
  7. December 20255
  8. November 20251
    Show
    Coverage in all entries

    28 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →