Skip to main content
Flarehawk sees attack traffic across every customer on the platform. Flarehawk Intel turns that collective signal into intelligence you can act on, in two ways:

Intel lookup

Look up an IP, ASN, CIDR range, or JA3/JA4 fingerprint and see reputation, attack profile, behavioral fingerprint, and how widely it has been seen across the platform.

Platform-aware detections

When an attacker hitting you is already known-bad across the platform, Flarehawk automatically raises the severity of your own detections and explains why.
Everything cross-customer is anonymized and k-anonymized — Flarehawk Intel never exposes another organization’s identity or data. See Privacy & anonymization for exactly how that works.
Flarehawk Intel is a paid add-on available on Enterprise plans. To enable it, contact [email protected] or use the live chat in the dashboard. Once enabled, an Intel item appears in the dashboard sidebar.

​
What you get

​
The Flarehawk Intel Score

Most lookups lead with the Flarehawk Intel Score, a 0–100 verdict that combines several anonymized signals into one number so you can triage at a glance: The score is a starting point for triage, not a verdict to automate blocking on by itself — always combine it with the detailed panels and your own context.

​
Where the data comes from

Flarehawk Intel blends three sources:
  • Flarehawk platform telemetry — anonymized, aggregated attack patterns observed across all customers (the part you can’t get anywhere else).
  • IPInfo — geolocation, ASN, network classification, and Places venue context (airport, hotel, campus Wi-Fi) for IP lookups.
  • AbuseIPDB — community abuse reputation for IP lookups.
External enrichment (IPInfo, AbuseIPDB) applies to IP lookups. Platform telemetry powers every lookup type, including ASN, CIDR, and TLS fingerprints.

​
Next steps

Run a lookup

Learn the supported query types and how to read every result panel.

Detection signals

Understand how platform intelligence escalates and annotates your alerts.

Privacy & anonymization

See how cross-customer intelligence stays anonymous and k-anonymized.

Plans & add-ons

Review Enterprise pricing and how to add Flarehawk Intel to your contract.