01 · Product name
Flashpoint
Paid intelligence platform for illicit communities and threat data.
Published by Flashpoint.
In short
Flashpoint is a paid intelligence platform used by security and intelligence teams. It collects from illicit online communities and related threat data, then exposes that collection in a workspace and an API. It is not a free search box, and it does not publish a simple public price. Use VirusTotal or urlscan for one artifact. Use a platform like Flashpoint when the work is ongoing collection your team is allowed to license.
Product pricing strategy
02
Premium
Flashpoint is a premium product. Budget for a subscription or a quote. If the vendor does not publish a simple price, the number is sales-led. This listing does not invent one.
No. Flashpoint is a paid platform for teams. There is no community edition, and this page does not invent a price.
Utility and features
03
Flashpoint sells access to a collection most people should not try to build: illicit forums and markets, and the threat data that comes out of them, searched from a workspace with an API for teams that need it in their own systems. It is an enterprise product. Recorded Future is the other paid platform in this directory, with a broader finished-intelligence pitch. They overlap in the budget conversation and they are not the same corpus.
- What you are buying. Licensed access to illicit-community and threat data, plus a workspace and an API. Not a desktop tool and not a free account.
- How it differs from a lookup. VirusTotal and urlscan judge or render one artifact. Flashpoint is a collection you search because your team tracks that kind of risk every week.
- Who it is for. Security and intelligence teams with a lawful reason and a budget. It is not a personal OSINT kit.
Do not treat a platform login as permission to go collect the same material yourself in places you are not allowed to be. For a single file, domain, or URL, VirusTotal and urlscan answer faster and cheaper. Shodan covers exposed services. Flashpoint is the listing for the question “what does the team platform add when the sources are illicit communities?” Pricing stays on a quote. Nothing on this page invents one.
- 1
Name the intelligence gap free lookups leave open before you book a sales call.
- 2
Ask which collections and which API access the quote includes.
- 3
Pilot on entities you already track so you can see what is new, not just what is familiar.
- 4
Keep a person between the platform and anything you report. Access is not attribution.
Caveats
04
Flashpoint is a paid intelligence platform. Access to illicit-community collection is a license, not a technique this page will describe. There is no free tier that stands in for that collection.
A finished indicator can still be checked in VirusTotal or urlscan. API use follows the contract. Do not copy forum content into a report. Pricing is a quote.
Screenshots
05
Potential use cases
06
- Your team is licensed for Flashpoint’s collection and the question is inside that license. Search there. The output is the vendor’s illicit-community and related collection, which you do not reproduce in this directory and do not republish. Pivot a single hash or URL to VirusTotal or urlscan for a public technical check. The platform is the program. The artifact lookup is the free tool.
- An indicator should land in an internal system through the API the contract includes. The output is that integration, with Flashpoint named as the source. Do not scrape the UI to avoid the API terms. Recorded Future is the comparison when you are choosing a platform, and the comparison is the requirement, not a feature checklist from a sales deck.
- You are deciding a renewal. Write the questions from the last quarter that only this collection answered, and the questions VirusTotal, urlscan, or Shodan already answered. The quote covers the first list. This listing does not invent the number.
Hard cases
The case where the first result is easy to over-read.
The report wants the raw post
An analyst found a relevant post inside the licensed collection and a customer asks for the screenshot of the forum. That sharing may break the contract and may be a bad idea for reasons that have nothing to do with OSINT tooling. Share the indicator, the date, and the vendor citation your agreement allows. Leave the raw post in the platform. If a file hash came out of it, look up the hash in VirusTotal or MalwareBazaar under those products’ own rules.
Questions
Is Flashpoint free?
No. Flashpoint is a paid platform for teams. There is no community edition, and this page does not invent a price.
Is Flashpoint an OSINT tool?
It is a threat-intelligence platform whose collection includes open and illicit online sources. Teams use it beside the free lookups in this directory, not instead of a one-off check.
Citations
07
Titled sources. These public pages are what the quotes on this listing come from.
Product
Flashpoint
https://flashpoint.io/Pricing
Flashpoint pricing
https://flashpoint.io/pricing/