* [PlatformProducts
  + Flashpoint Ignite
  + Flashpoint IntegrationsServices
  + Managed Intelligence
  + Professional Services
* SolutionsBy Threats and Risks
  + Fraud
  + Ransomware
  + Account Takeover
  + Brand and Reputation
  + Vulnerability
  + Physical Security
  + National SecurityBy Industry
  + Financial Services
  + Retail
  + Healthcare & Pharmaceutical
  + Technology
  + Public Sector & National Security
* Resources
  + Threat Intel Blog
  + Events & Webinars
  + Resource Library
  + Intelligence Glossary
  + Partners
* Company
  + About Us
  + Careers
  + News
  + Contact Us
* !
!
* Platform
  + 
    - 
  + Services
* Solutions
  + By Threats and Risks
  + By Industry
######
# Flashpoint Integrations
Get the most out of your security investments by integrating Flashpoint into your workflow where it matters most.
!!Table of Contents Moresubscribe to our newsletter
## Partner Integrations
---
### Threat Intelligence Platforms (TIP)
**Anomali | ThreatStream**
**Type:** TIP
Anomali ThreatStream combines threat intelligence, big data management, and machine learning to provide security teams with tools and insights for rapid threat detection, analysis, and response.
The Anomali Threat Platform connects Flashpoint’s finished intelligence with existing security solutions so Anomali customers can gain visibility into industry-specific threats and threat actors.
**Supported Datasets:**  Alerting, Compromised Credentials, Intelligence Reports, Technical Indicators, Vulnerabilities
**Silobreaker**
Silobreaker aggregates and analyzes data from millions of sources across 17 languages to provide actionable insights for cyber threat intelligence, geopolitical risk assessment, and strategic decision-making.
Correlating Flashpoint’s data with Silobreaker’s surface web sources and powerful analytical tools gives customers the visibility and context needed to assess trends and efficiently combat threats to their operations.
**Supported Datasets:** Card Fraud, Communities, Compromised Credentials, Intelligence Reports, Marketplaces
**ThreatConnect**
ThreatConnect enables organizations to aggregate, analyze, and operationalize threat data for enhanced security and risk management.
Flashpoint complements ThreatConnect with intelligence reports and Indicators of Compromise (IoCs) so customers can associate incidents with indicators and gain helpful context like MITRE ATT&CK tags and scoring.
**Supported Datasets:**  Intelligence Reports, Technical Indicators, Vulnerabilities
**ThreatQuotient** **| ThreatQ**
ThreatQ combines, normalizes, and contextualizes threat data from external and internal sources into a Threat library used across the organization.
The ThreatQ and Flashpoint integration offers access to an extensive range of datasets to provide a “state of the threat” landscape to assist security personnel in developing and prioritizing intelligence on emerging threats.
**Supported Datasets:** Alerting, Card Fraud, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Media, Technical Indicators, Vulnerabilities
**EclecticIQ**
With EclecticIQ and Flashpoint, teams use a set of workflows in a collaborative workplace to focus, triage, analyze, collaborate, and act decisively on the right course of action.
**Supported Datasets:** Communities, Intelligence Reports, Marketplaces, Technical Indicators
**Cyware** **CTIX**
Cyware CTIX provides a comprehensive platform for threat intelligence management, security orchestration and automation, and collaborative threat response, enabling organizations to build cyber fusion centers and enhance their overall security posture.
The Cyware CTIX Flashpoint integration provides critical external threat insight for security teams of all sizes and maturities in a centralized location to more quickly and efficiently identify and respond to emerging threats targeting their organizations.
**Supported Datasets:** Intelligence Reports, Technical Indicators, Vulnerabilities
**Analyst1**
Analyst1 is a threat intelligence platform designed to enhance cybersecurity by streamlining the processes of threat detection, analysis, and response.
Analysts can leverage the Analyst1 and Flashpoint integration to access comprehensive threat intelligence, query indicators across multiple datasets, perform enhanced threat analysis and hunting, and gain real-time context for faster triage and more informed decision-making within their existing workflows.
**Supported Datasets:** Intelligence Reports
**Filigran OpenCTI**
OpenCTI, an open-source threat intelligence platform enriched with Flashpoint intelligence, serves as a unified intelligence hub and a comprehensive analyst workbench. It seamlessly ingests, enriches, manages, and visualizes all threat intelligence sources in a single workspace.
**Supported Datasets:** Alerting, Communities, Compromised Credentials, Intelligence Reports, Technical Indicators
### Security Orchestration, Automation, and Response (SOAR)
**Cortex** **XSOAR**
**Type:** SOAR
Cortex XSOAR unifies case management, automation, real-time collaboration, and threat intelligence management to help security teams improve efficiency and standardize incident response processes.
XSOAR users can access and integrate Flashpoint’s data and finished intelligence with their existing workflows and automated tools to enhance their threat intelligence capabilities and streamline incident response processes.
**Supported Datasets:** Alerting, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Technical Indicators, Vulnerabilities
**Cyware** **Orchestrate**
The combined capabilities of Orchestrate and Flashpoint data enable users to automate workflows based on actionable intelligence. This saves teams time by escalating critical incidents or indicators related to the organizations. This joint integration eliminates the human analyst time and manual internal processes by proactively mitigating the risk to the enterprise.
**Supported Datasets:** Alerting, Technical Indicators, Vulnerabilities
**ServiceNow**
ServiceNow is a cloud-based workflow automation platform that enhances operational efficiencies across enterprise organizations by streamlining and automating various business functions.
ServiceNow users can access and integrate Flashpoint’s data and finished intelligence with their existing workflows and automated tools to enhance their threat intelligence capabilities and streamline incident response processes.
**Supported Datasets:** Alerting, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Technical Indicators, Vulnerabilities
**Splunk** **|** **Phantom**
Splunk Phantom integrates with over 300 security tools to automate repetitive tasks, streamline incident response workflows, and enable security teams to investigate and remediate threats more quickly and efficiently.
The Flashpoint Splunk Phantom integration facilitates easy access to Flashpoint data and intelligence with associated context specifically for Splunk Phantom users. Flashpoint datasets enrich internal data, assisting security teams to automate tasks, orchestrate workflows, and support a broad range of SOC functions.
**Supported Datasets:** Alerting, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Technical Indicators
### Security Information and Event Management (SIEM)
**IBM** **QRadar**
**Type:** SIEM
IBM QRadar collects and analyzes log data, and network flows across an organization’s IT infrastructure to detect, prioritize, and respond to security threats in real time.
With the ‘Flashpoint for QRadar’ app, QRadar customers have visibility into illicit online communities to correlate information related to their infrastructure and can be notified when indicators from internal log data match with Flashpoint intelligence.
**Supported Datasets:** Intelligence Reports, Technical Indicators
**Splunk**
Splunk is a data platform that enables organizations to collect, search, analyze, and visualize machine-generated data.
With the Flashpoint Splunk app and add-on, Splunk users are notified when internal log data indicators correspond with Flashpoint intelligence, enabling them to prioritize their response.
### Analysis and Investigations
**Maltego**
**Type:** Analysis and Investigations
Maltego is an investigation platform that accelerates complex cyber investigations by enabling users to gather, analyze, and visualize data from diverse sources to uncover relationships and patterns between entities like domains, IP addresses, and social media profiles.
With Flashpoint’s Maltego Transforms, investigators can incorporate Flashpoint data into Maltego workflows to obtain actionable intelligence, mitigate risk, and combat threats and adversaries.
**Polarity**
Polarity is a free-floating overlay platform that automatically searches unlimited sources in parallel to augment data and information from existing applications, accelerating analysis by enriching every tool and workflow.
Polarity users can leverage the Flashpoint integration for threat analysis, threat hunting, and malware analysis by correlating information from Flashpoint.
Polarity users can leverage Flashpoint data for real-time context and insights on indicators like IP addresses, domains, file hashes, and CVEs within their existing workflows, enabling faster triage and more informed decision-making.
**Vertex** **Project** **| Synapse** **Enterprise**
Synapse is a comprehensive central intelligence and analysis system that supports analyst teams throughout the intelligence lifecycle.
This integration merges Flashpoint’s threat intelligence with Vertex’s data analytics platform so users can gain deeper insights into threats.
**Supported Datasets:** Communities, Marketplaces, Technical Indicators
**Ontic**
Ontic is a protective intelligence software provider that helps organizations identify, investigate, assess, and manage physical security threats.
With the integration of Flashpoint Alerting, Ontic customers can augment their data to get a full picture of potential physical and cyber threats.
**Supported Datasets:** Alerting
**TRM Labs**
TRM Labs provides blockchain intelligence to help government agencies investigate and build cases for digital asset fraud and financial crime.
Investigators using TRM Forensics can access real-time and historical information from Flashpoint’s illicit communities and marketplaces.
Customers with access to Flashpoint Ignite can seamlessly pivot into Ignite directly from Forensics, unlocking deeper insights and investigative pathways.
**Supported Datasets:** Communities, Marketplaces
## Product Integrations
**Slack**
Flashpoint customers can receive alerts from the Ignite platform within Slack for rapid visibility and streamlined workflows.
**MISP**
Flashpoint’s Technical Indicators API provides MISP endpoints to support integrations to automate information sharing.
**STIX** **TAXII**
Flashpoint’s Technical Indicators API provides STIX/TAXII 2.1 endpoints to support integrations to automate information sharing.
## Dataset Descriptions
***Alerting*:** Email alerts that match a user’s area of concern such as leaked assets, organizational risks, or industry-related threats.
***Card Fraud*:** Visibility into exposed card data within illicit card shops and threat actor communities provides insight into cybercriminal tactics so organizations can detect, prevent, and respond to fraud-related threats.
***Communities*:** Discussions from illicit threat actor communities operating in chat services, forums, blogs, and social media networks provide early warning signals to help organizations stay ahead of attacks.
***Compromised Credentials*:** Database of over 48 billion stolen and leaked credentials from open sources, illicit communities, marketplaces, and infostealer malware logs.
***Marketplaces*:** Access to deep and dark web marketplaces helps users understand cyber threats, assess exposure, and potentially recover stolen data.
***Intelligence Reports*:** Finished intelligence reports written by seasoned analysts provide expert insight into a broad spectrum of current and emerging threats, including fraud, malware, ransomware, violent extremism, and physical threats.
***Technical Indicators*****:** Indicators of compromise (IoCs) and technical data across Flashpoint datasets and those included in finished intelligence reports.
***Vulnerabilities*****:** Access to Flashpoint’s extensive vulnerability data enables effective prioritization to prevent or mitigate exposure.
## See Flashpoint in Action
6218 Georgia Avenue NW Suite #1
PMB 3032 Washington, DC, 20011
United States
First Name \*
Last Name \*
Work E-mail \*
Enter a valid business email address.
Phone \*
Country \*
-- Please Select --
Canada
Afghanistan
Aland Islands
Albania
Algeria
Andorra
Angola
Anguilla
Antarctica
Antigua and Barbuda
Argentina
Armenia
Aruba
Australia
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belgium
Belize
Benin
Bermuda
Bhutan
Bolivia, Plurinational State of
Bonaire, Sint Eustatius and Saba
Bosnia and Herzegovina
Botswana
Bouvet Island
Brazil
British Indian Ocean Territory
Brunei Darussalam
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
China
Christmas Island
Cocos (Keeling) Islands
Colombia
Comoros
Congo
Congo, the Democratic Republic of the
Cook Islands
Cote d'Ivoire
Costa Rica
Croatia
Cuba
Curaçao
Cyprus
Czech Republic
Denmark
Djibouti
Dominica
Dominican Republic
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Ethiopia
Falkland Islands (Malvinas)
Faroe Islands
Fiji
Finland
France
French Guiana
French Polynesia
French Southern Territories
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guatemala
Guernsey
Guinea
Guinea-Bissau
Guyana
Haiti
Heard Island and McDonald Islands
Holy See (Vatican City State)
Honduras
Hong Kong
Hungary
Iceland
India
Indonesia
Iran, Islamic Republic of
Iraq
Ireland
Isle of Man
Israel
Italy
Jamaica
Japan
Jersey
Jordan
Kazakhstan
Kenya
Kiribati
Korea, Democratic People's Republic of
Korea, Republic of
Kosovo
Kuwait
Kyrgyzstan
Lao People's Democratic Republic
Latvia
Lebanon
Lesotho
Liberia
Libyan Arab Jamahiriya
Liechtenstein
Lithuania
Luxembourg
Macao
Macedonia, the former Yugoslav Republic of
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Martinique
Mauritania
Mauritius
Mayotte
Mexico
Moldova, Republic of
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Namibia
Nauru
Nepal
Netherlands
New Caledonia
New Zealand
Nicaragua
Niger
Nigeria
Niue
Norfolk Island
Norway
Oman
Pakistan
Palestinian Territory, Occupied
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Pitcairn
Poland
Portugal
Puerto Rico
Qatar
Reunion
Romania
Russian Federation
Rwanda
Saint Barthélemy
Saint Helena, Ascension and Tristan da Cunha
Saint Kitts and Nevis
Saint Lucia
Saint Martin (French part)
Saint Pierre and Miquelon
Saint Vincent and the Grenadines
Samoa
San Marino
Sao Tome and Principe
Saudi Arabia
Senegal
Serbia
Seychelles
Sierra Leone
Singapore
Sint Maarten (Dutch part)
Slovakia
Slovenia
Solomon Islands
Somalia
South Africa
South Georgia and the South Sandwich Islands
South Sudan
Spain
Sri Lanka
Sudan
Suriname
Svalbard and Jan Mayen
Swaziland
Sweden
Switzerland
Syrian Arab Republic
Taiwan
Tajikistan
Tanzania, United Republic of
Thailand
Timor-Leste
Togo
Tokelau
Tonga
Trinidad and Tobago
Tunisia
Turkey
Turkmenistan
Turks and Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United Kingdom
Uruguay
Uzbekistan
Vanuatu
Venezuela, Bolivarian Republic of
Vietnam
Virgin Islands, British
Wallis and Futuna
Western Sahara
Yemen
Zambia
Zimbabwe
State \*
Alabama
Alaska
Arizona
Arkansas
California
Colorado
Connecticut
Delaware
District Of Columbia
Florida
Hawaii
Idaho
Illinois
Indiana
Iowa
Kansas
Kentucky
Louisiana
Maine
Maryland
Massachusetts
Michigan
Minnesota
Mississippi
Missouri
Montana
Nebraska
Nevada
New Hampshire
New Jersey
New Mexico
New York
North Carolina
North Dakota
Ohio
Oklahoma
Oregon
Pennsylvania
Rhode Island
South Carolina
South Dakota
Tennessee
Texas
Utah
Vermont
Virginia
Washington
West Virginia
Wisconsin
Wyoming
Comments
+1 (888) 468-3598
  + Products
      * 
  + By Threats & Risks
* Menu Group
  + Resources
  + Sub-menu
* Social
© 2025 Flashpoint. All rights reserved.