Flashpoint is a commercial threat-intelligence platform that aggregates and analyzes data from sources like compromised credentials, ransomware activity, technical indicators, vulnerability feeds, and open-source and geospatial intelligence, delivered as a hosted service (Ignite) with add-on modules such as EASMEASMExternal Attack Surface Management: a discipline and category of tooling that continuously discovers and monitors an organization's internet-facing assets to identify exposures before attackers do. and Echosec. It authenticates against an organization's existing subscription and now exposes its intelligence to AI assistants through an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, with a read-only access model that lets analysts query and enrich data without altering configurations. It's built for cyber threat intelligence and fraud teams, SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts, and OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. researchers rather than individual developers, and it sits in the threat-intel category alongside tools that combine dark web monitoring, attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management, and analyst tooling. Launched in 2010 and still shipping releases roughly monthly, with its latest just 15 days old, it is actively maintained.
Have any of our employee or customer credentials shown up in a breach?
searches Compromised Credentials data across Enterprise and Customer sets and returns matches an analyst can pull into an investigation
Is this indicator or CVE something we should actually worry about right now?
cross-references Technical Indicators and Vulnerability Intelligence against Finished Intelligence Reports and News to surface context on active exploitation
Is a ransomware group naming us or a partner as a target?
queries Ransomware Activity data and returns matches by entity so a team can check exposure without opening a separate dashboard
Which of our hosts are already infected and talking to attacker infrastructure?
looks up Infected Hosts data and returns entries tied to the organization's watched assets
Can an analyst pull this intelligence into Claude or Gemini without risking a config change?
exposes the data through a read-only MCP connection, so the AI assistant can search, retrieve, and enrich results but cannot alter settings, create alerts, or touch workflows
Where has a location or business name turned up across open-source and geospatial sources?
runs a plain-language query through Echosec's natural language search over its geospatial OSINT sources instead of requiring structured query syntax
Built from Flashpoint's releases, docs, README and our own runs.
“Seen” marks the month we first spotted a release the vendor didn't date.
Group names and tags are our labels.
+Managed Attribution anonymous browsingshippedsuggestedProvides a redesigned Managed Attribution environment with a built-in Anonymous Browser for conducting attribution-controlled analysis of threats, including direct pivot workflows from Flashpoint Ignite and on-demand exit location changes.9 releases · 4 other sources · first seen Dec 2025▸
Suggested capability: Malware sandbox analysis. This is our guess, not confirmed.
release
9 total
Enables on-demand Exit Location changes for Managed Attribution virtual machines without interrupting workflow.
changelog · Oct 2026
· source
· release history
Adds a streamlined workflow to transition directly from discovering a threat in Flashpoint Ignite to safely analyzing it within Managed Attribution.
changelog · Oct 2026
· source
· release history
Adds a full product redesign of Flashpoint Managed Attribution with a built-in Anonymous Browser capability.
changelog · Oct 2026
· source
· release history
Adds zero-persistence session behavior that automatically wipes all cookies and history upon closing a browser instance
May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026
· source
· release history
Introduces an Anonymous Browser capability alongside the persistent Managed VM for instant, isolated triage sessions
May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026
· source
· release history
Adds support for rotating exit IPs to mask analyst identity during active research within the anonymous browser
May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026
· source
· release history
example
Pivot from a threat discovered in Ignite directly into Managed Attribution's Anonymous Browser for safe, attribution-controlled analysis.$ In Flashpoint Ignite, locate a threat item of interest, then select 'Analyze in Managed Attribution' to open it inside the built-in Anonymous Browser with a chosen Exit Location.
changelog · Oct 2026
· source
Leverage the new anonymous browsing for attribution tasks.$ Access the built-in Anonymous Browser via the Managed Attribution interface.
May 8, 2026: Managed Attribution Redesign and Anonymous Browsing · May 2026
· source
Perform rapid, untraceable triage of a suspicious link without leaving artifacts in the browser history.$ In the Managed Attribution interface, launch the new 'Anonymous Browser' instance to open and analyze the target URL.
May 8, 2026: Managed Attribution Redesign and Anonymous Browsing (2026-05-08) · May 2026
· source
Pivot from a discovered malware attachment in Ignite to an isolated analysis environment without exposing your local machine.$ Locate the file attachment in an Ignite search thread and click the 'Download Safely' icon next to the standard download button.
Jan 22, 2026: Download Safely in Managed Attribution (2026-01-21) · Jan 2026
· source
+Natural language intelligence searchshippedEnables querying Flashpoint intelligence collections and Echosec geospatial data using plain-language queries instead of structured search syntax.7 releases · 5 other sources · first seen Dec 2025▸
Also counts toward: Natural-language query
release
7 total
Adds Optimize, an AI-powered feature that automatically suggests and inserts location-based keywords (business names, street names, landmarks) into real-time location-based searches.
changelog · Oct 2026
· source
· release history
Adds Natural Language Search and AI Results Refinement to the Echosec Locate view for geospatial OSINT discovery.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
changelog · Oct 2026
· source
· release history
Adds Natural Language Search to Echosec, Flashpoint's geospatial open-source intelligence tool, enabling query-by-plain-language across geospatial data sources.
changelog · Aug 2026
· source
· release history
Allows users to search using plain language descriptions instead of Boolean syntax
Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026
· source
· release history
Adds natural language query input to Echosec search workflow for plain-language threat and location discovery
Aug 6: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026
· source
· release history
Supports natural-language retrieval across Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials (Enterprise & Customers), Infected Hosts, and Strategic Entity Data (SED).
June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026
· source
· release history
docs
Aug 6: Search and Discover Using Natural Language in Echosec Flashpoint’s geospatial open-source intelligence tool, Echosec, now features Natural Language Search and AI Results Refinement, bringing an intuitive approach to search and discovery in the Locate view.
docs update · Oct 2026
· source
Product Update: Search and Discover Using Natural Language in Echosec Ask Questions, Get Answers: A New Way to Search and Refine Results in Echosec SHARE THIS: See it in action. Get a Demo Contact Sales
seen Aug 2026
· source
example
Use Natural Language Search in Echosec to find geospatial intelligence without crafting boolean queries.$ In Echosec, open the Locate view, type a plain-language query such as 'protests near central station last 48 hours', then use AI Results Refinement to narrow the returned posts.
changelog · Oct 2026
· source
Use plain language to quickly find relevant OSINT posts about a specific location or topic$ In the Echosec search interface, type your query in natural language (e.g., 'protests near central park last week') and review the relevance-ranked results.
Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026
· source
Use the new UI controls in the Monitor view to automate keyword research for location-based monitoring alerts.$ In the Monitor view, create a new location-based search and click the 'Optimize Locations' button next to the search bar.
Dec 16, 2025: Introducing Echosec Optimize: Improving Location-Based Results with AI (2025-12-16) · Dec 2025
· source
+MCP Server for AI assistant integrationshippedAllows AI assistants to query Flashpoint intelligence directly using the Model Context Protocol, with read-only access authenticated via OAuth or API token and scoped to the organization's existing subscription entitlements.10 releases · 1 other source · first seen Jun 2026▸
Shared capability: MCP server
Also counts toward: MCP server
release
10 total
Exposes Ransomware Files intelligence programmatically via Flashpoint's Model Context Protocol (MCP) server for ingestion into SIEMs, SOARs, and internal tools.
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
· release history
Exposes Flashpoint intelligence modules including Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials, Infected Hosts, and Strategic Entity Data as queryable tools.
June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026
· source
· release history
Read-only access model: AI systems can search, retrieve, enrich, and analyze intelligence without the ability to alter settings, create alerts, or modify operational workflows.
June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026
· source
· release history
Supports OAuth authentication or API tokens for connecting AI assistants to the Flashpoint MCP Server.
June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026
· source
· release history
Supports OAuth authentication or API token connections for MCP-compatible clients like Claude and Gemini
June 25: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026
· source
· release history
Authenticates via OAuth or API token, automatically inheriting the organization's existing Flashpoint subscription entitlements.
June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026
· source
· release history
example
Connect an MCP-compatible AI client like Claude to access Flashpoint intelligence via OAuth.$ Configure your MCP client (e.g., Claude) to connect to the Flashpoint MCP Server using OAuth authentication or an API token.
June 25, 2026: Introducing the Flashpoint MCP Server (2026-06-25) · Jun 2026
· source
+AI-driven location keyword optimizationshippedUses AI to generate hyper-relevant, location-based keywords and automates keyword research for monitoring alerts to address the scarcity of geotagged social media data.7 releases · 3 other sources · first seen Dec 2025▸
release
7 total
Adds AI-driven optimization that suggests and inserts relevant location-based keywords (business names, street names, landmarks) into real-time searches within the Locate View.
Apr 23, 2026: AI Location Optimization in the Locate View · Apr 2026
· source
· release history
Enables specification of suggestion types (e.g., schools, landmarks) via a new location pin icon dropdown in the Optimize workflow
Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026
· source
· release history
Adds Optimize now button to generate and select location suggestions within the current geographic area before searching
Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026
· source
· release history
Adds AI-powered Optimize feature to the Locate view's location search bar that automatically suggests and inserts relevant location-based keywords (business names, street names, landmarks) into real-time searches
Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026
· source
· release history
Adds an Optimize Locations button next to the search bar in the Monitor view for AI-generated location-based keyword suggestions
Dec 16, 2025: Introducing Echosec Optimize: Improving Location-Based Results with AI (2025-12-16) · Dec 2025
· source
· release history
Adds Echosec Optimize, an AI-driven capability that generates hyper-relevant, location-based keywords to address the scarcity of geotagged social media data.
Dec 16, 2025: Introducing Echosec Optimize: Improving Location-Based Results wit · Dec 2025
· source
· release history
example
Automatically enrich a real-time location search with relevant keywords like business names and landmarks.$ Enter a location query in the Locate View; observe AI-suggested keywords appearing automatically.
Apr 23, 2026: AI Location Optimization in the Locate View · Apr 2026
· source
Use this to quickly build a context-rich search for an unfamiliar area by letting AI suggest key local landmarks.$ In the Locate view location search bar, click 'Optimize' > click the location pin icon > select 'landmarks' > click 'Apply' > click 'Optimize now' > select suggested locations > click 'Search'.
Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026
· source
Capture ground-level conversations by layering specific business names and streets into a real-time query.$ In the Locate view location search bar, click 'Optimize' > click the location pin icon > select 'businesses' > click 'Apply' > click 'Optimize now' > manually add or check suggested locations in the…
Apr 23, 2026: AI Location Optimization in the Locate View (2026-04-23) · Apr 2026
· source
+Ransomware Files search and exposure monitoringshippedEnables organizations to search leaked ransomware file trees by name, path, or keyword within Ignite, filter results by threat group, victim, or file type, trace results back to originating victim posts, submit RFIs from matches, and receive proactive alerts when sensitive file paths appear in new leaks.6 releases · 3 other sources · first seen Oct 2026▸
release
Adds Ransomware Files as a searchable data type in Ignite, enabling search across leaked file trees by file name, path, or keyword.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
· release history
Adds filters — Ransomware Group, Victim Name, and File Type — to refine Ransomware Files search results.
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
· release history
Adds a file sample view on ransomware victim posts with one-click search to surface all related files from a given leak.
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
· release history
Enables direct RFI (Request for Intelligence) submission from a confirmed Ransomware Files match inside Ignite.
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
· release history
Links every Ransomware Files search result directly to its originating ransomware victim post for full threat-actor context.
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
· release history
Adds proactive alerting on critical file paths with real-time notifications delivered in-platform, via email, or to Slack channels.
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
· release history
docs
Oct 22, 2026: Ransomware Files in Ignite Ransomware Files in Ignite gives organizations direct, instant visibility into leaked file paths and trees within Flashpoint Ignite, enabling teams to assess exposure, prioritize response, and mitigate risk before threat actors can further exploit the data.
docs update · Oct 2026
· source
example
Verify whether your organization's files appear in any ransomware leak, narrowing results to a specific threat group and file type.$ In Ignite, select the 'Ransomware Files' data type > enter a file name or path keyword > apply filters: Ransomware Group = <group name>, File Type = <extension> > review results and click any result…
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
Automate monitoring of a sensitive file path so your team is instantly notified the moment it appears in a new leak.$ In Ignite, open 'Ransomware Files' > run a search for the sensitive path > click 'Set Alert' > configure notification channels: in-platform, email, and/or Slack channel > save the alert.
Oct 22, 2026: Ransomware Files in Ignite (2026-10-22) · Oct 2026
· source
+AI-summarized alert briefingsshippedGenerates structured, reference-backed summaries for Community alerts, surfaced as an in-platform view or delivered via daily email briefings.5 releases · 3 other sources · first seen Jan 2026▸
release
Adds AI Summarization for Alerting in Flashpoint Ignite, delivering structured, reference-backed summaries for Community alerts via in-platform view or daily email briefings.
changelog · Oct 2026
· source
· release history
Adds Daily AI Summary Emails feature, enabling automatic bundling of the previous 24 hours of alert activity into structured emails sent to designated recipients
Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026
· source
· release history
Adds Summarize button in the My Alert Results tab to generate structured, reference-backed intelligence briefs from a selected alert rule
Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026
· source
· release history
Adds in-platform AI-generated summaries for Community alerts that are structured and reference-backed to reduce alert fatigue
Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite · Jan 2026
· source
· release history
Adds configurable Summary Intent options (CTI, Fraud, Physical Security, Executive Risk) and custom guidance fields to refine AI summaries before generation
Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026
· source
· release history
example
Generate a quick intelligence brief for a specific alert rule directly from the inbox.$ In My Alert Results tab, select an alert rule, click Summarize.
Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026
· source
Refine the summary focus using a domain-specific intent before generation.$ Before clicking Summarize, select Summary Intent: CTI or provide custom prompt like 'Identify and prioritize immediate financial or account takeover risks'.
Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026
· source
Automate daily intelligence updates for stakeholders via email.$ In alert rule settings, enable Daily AI Summary Emails.
Jan 15, 2026: Introducing AI Summarization for Alerting for Flashpoint Ignite (2026-01-15) · Jan 2026
· source
+Intelligence Requirements ManagementshippedEnables creation and management of Priority Intelligence Requirements (PIRs) and General Intelligence Requirements (GIRs) using templates or custom definitions, with visibility metrics and workflow integration.6 releases · 2 other sources · first seen May 2026▸
release
Enables escalation of intelligence findings into Investigations workflows with optional direct connection to specific PIRs for operational tracing
May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
· release history
Introduces a dedicated Intelligence Requirements experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in Flashpoint Ignite
May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
· release history
Enables pre-built PIR templates and custom requirement creation to accelerate onboarding
May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
· release history
Provides visibility metrics on monitoring activity, investigative escalations, and operational workflows tied to specific intelligence priorities
May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
· release history
Introduces a dedicated experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in the platform, supported by pre-built templates or custom definitions
May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
· release history
Adds capability to align monitoring alert rules—both existing user-created rules and AI-recommended ones—to specific PIRs within the platform
May 28: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
· release history
example
Create a new Priority Intelligence Requirement (PIR) for monitoring ransomware activity in your industry.$ In the Ignite UI, navigate to Intelligence Requirements > New PIR and select the pre-built 'Ransomware Targeting' template.
May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
Align an existing alert rule to a specific PIR to reduce noise and focus monitoring on strategic priorities.$ In the Ignite UI, open an existing Alert Rule > Edit > Select 'Priority Intelligence Requirement' and choose the relevant PIR from the dropdown.
May 28, 2026: Intelligence Requirements in Flashpoint Ignite (2026-05-28) · May 2026
· source
+ATM Receipts DashboardshippedAnalyzes compromised ATM receipt images within Flashpoint Fraud Intelligence, exposing card and account data, deposits, and fraud trends.2 releases · 1 other source · first seen Nov 2025▸
release
Introduces the ATM Receipts Dashboard in Flashpoint Fraud Intelligence for analyzing compromised ATM receipt images, exposing card and account data, deposits, and fraud trends.
changelog · Oct 2026
· source
· release history
Adds the ATM Receipts Dashboard in Flashpoint Fraud Intelligence to analyze compromised ATM receipt images from illicit sources
Nov 6, 2025: Introducing the ATM Receipts Dashboard for Flashpoint Fraud Intelli · Nov 2025
· source
· release history
example
Use the new dashboard to detect exposed card and account data from compromised ATM receipts at scale.$ In Fraud Intelligence, navigate to the new ATM Receipts Dashboard to begin analyzing illicit receipt imagery.
Nov 6, 2025: Introducing the ATM Receipts Dashboard for Flashpoint Fraud Intelli · Nov 2025
· source
+Echosec filter sharingshippedAllows teams to share saved filters in Echosec to synchronize workflows and reduce noise when working with large datasets.3 releases · first seen Dec 2025▸
release
Introduces Filter Sharing in Echosec to synchronize teams and reduce noise in large datasets.
changelog · Oct 2026
· source
· release history
Adds Filter Sharing capability in Echosec to enable team synchronization of filters.
Dec 18, 2025: Introducing Filter Sharing in Echosec · Dec 2025
· source
· release history
Enables sharing of saved search filters within the Echosec interface to standardize monitoring across teams.
Dec 18, 2025: Introducing Filter Sharing in Echosec (2025-12-18) · Dec 2025
· source
· release history
+External Attack Surface Management (EASM)shippedProvides a continuous attacker's-eye view of an organization's external perimeter as an add-on module within Flashpoint Ignite.2 releases · 1 other source · first seen May 2026▸
release
Launches Flashpoint External Attack Surface Management (EASM) as an add-on module in Ignite, providing a continuous attacker's-eye view of the perimeter.
changelog · Oct 2026
· source
· release history
New EASM module available as an add-on in the Flashpoint Ignite service, providing continuous external attack surface management.
May 5, 2026: Introducing Flashpoint External Attack Surface Management (EASM) (2026-05-05) · May 2026
· source
· release history
example
Operationalize EASM by seeding it with your known domains and IPs to begin continuous asset discovery within Ignite.$ In the Ignite console, navigate to the new EASM module and enter your seed keywords (known domains and IP addresses) to start the inventory triage workflow.
May 5, 2026: Introducing Flashpoint External Attack Surface Management (EASM) (2026-05-05) · May 2026
· source
+Intent-Based Result RankingshippedRanks search results based on relevance to user intent rather than chronological order.2 releases · first seen Aug 2026▸
release
Implements relevance-based ranking of results based on search intent rather than chronology
Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026
· source
· release history
Introduces AI-driven relevance ranking that prioritizes results by user intent rather than chronological order
Aug 6: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026
· source
· release history
+Iterative Deep-Dive SearchshippedSupports follow-up questioning and drilling into search results while preserving context parameters.2 releases · first seen Aug 2026▸
release
Adds iterative follow-up questioning capability to drill deeper into search results while preserving context
Aug 6: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026
· source
· release history
Enables follow-up questions to drill deeper into initial search context without losing original parameters
Aug 6, 2026: Search and Discover Using Natural Language in Echosec (2026-08-06) · Aug 2026
· source
· release history
Lines in monospace are the tool's own words: help text
parsed from its source, or an endpoint from its API document. Under
release, a line is our summary of a dated release. Under
docs, it is quoted from the tool's own documentation or
website. Each links back to the source it came from.
Screenshots
From the release notes, newest first. Click one to see it full size.
Breaking-change disciplinehow rarely a release breaks users, and notice given
Maintenance riskquiet time against its own cadence, maintainers
Innovation & surfacenew capabilities, API and MCP surface
Five scores for Flashpoint, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.
Each score is 0–100 on a published rubric, derived from data this site already shows.
A dimension we cannot measure says so — it is never scored 0 and never enters a rank.
How this is scored
Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
Documentation quality — the release-notes rubric published on the analytics page, unchanged.
Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.
Release-note detail over time
See how much detail Flashpoint puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.
Flashpoint's home page and 39 more pages as they looked each month from January 2023 to October 2026: 48 renders, 6 changes of tagline or palette. Step through them, play them, or put any two months side by side.
Website history is included with Researcher and Business.
What Flashpoint connects to, runs on and detects, read from its release notes and docs. So far: 1 new detection.
Show
1 change, tracked since Oct 31, 2026.
Oct 312026
newRansomware Files in Ignite
With Flashpoint Ignite
Ransomware Files in Ignite gives organizations direct, instant visibility into leaked file paths and trees within Flashpoint Ignite, enabling teams to assess exposure, prioritize response, and mitigate risk before threat actors can further exploit the data.
Nothing first seen in this window. That doesn't mean Flashpoint shipped nothing, only that we found no record of it.
Changes per month New Updated Retired
2026-10
1
How we count
Read from 3 of 28 release notes and docs updates we hold for Flashpoint. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through Flashpoint's life, so an old integration can show a recent first-seen date.
Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.
Releases
Show
Coverage in all entries
28 entries
No entries match these filters.
October 20266
August 20263
June 20263
May 20265
April 20262
January 20263
December 20255
November 20251
Add the badge to your README
Maintain this project? The badge links readers straight to this page, so they can
follow every release here.