Flarehawk pricing guide details
Pricing Overview
Flarehawk is an autonomous SOC layer that turns security telemetry into investigations. It prices "on the data you actually keep", never per seat, and publishes four plans: Free at $0, Detect at $749/month, Investigate at $1,499/month, and Enterprise starting at $3,999/month with committed capacity. What you are buying across them is Vigil investigation allowance, accepted data volume and retention -- every plan includes SSO, SCIM provisioning, unlimited team members, notifications, security source integrations and API access.
Plan Comparison
| Feature | Free | Detect ($749/mo) | Investigate ($1,499/mo) | Enterprise (from $3,999/mo) |
|---|---|---|---|---|
| Monthly base | $0 | $749 | $1,499 | Starts at $3,999 |
| Vigil investigations included | 3 | 10 | 50 | 500 by default |
| Vigil investigation overage | Hard cap | $10/case | $10/case | $10/case |
| Accepted ingest included | 2 GB | 250 GB | 500 GB | 1 TB starting commitment |
| Data overage | Hard cap | $4/GB | $3/GB | From $2.50/GB |
| Retention | 7 days | 30 days | 1 year | 1 to 5 years |
| Custom invoicing and SLA | No | No | No | Yes |
The step that matters for most teams is retention rather than features. Free keeps data for at most 7 days and Detect for 30, which is short of most compliance frameworks; a year of history starts at Investigate. Enterprise adds committed capacity, invoicing and SLAs, and Flarehawk says that plan can be customized.
Hidden Costs and Considerations
The variable cost is data volume. Flarehawk meters accepted uncompressed ingest -- the source size of records that pass validation and deduplication, counted only after the storage write succeeds -- so rejected records and retries of an already-accepted batch are not billed twice. Above the included volume it charges $4/GB on Detect, $3/GB on Investigate and from $2.50/GB on Enterprise. Vigil investigations beyond the included allowance are $10 per case on the paid plans. Free is hard-capped instead of metered: it stops at 2 GB of accepted data per billing period.
Flarehawk publishes a sizing tool on its pricing page that estimates ingest from employee count, monthly website visitors and the history you must keep. Its own rough guide is about 1,500 logged requests per visit and about 300 security events per employee per day at roughly 1.2 KB per record, and it says real volume depends on the sources you connect. Prices are shown in USD and charged in your local currency at checkout.
How Flarehawk Pricing Compares
Flarehawk is a specialized autonomous SOC platform rather than a developer or application security tool, and its paid plans sit above the tools it shares a category with. It does publish a permanently free plan, hard-capped at 2 GB, which most of them do not.
| Tool | Pricing Model | Starting Price | Best For |
|---|---|---|---|
| Flarehawk | Tiered (paid) | $0 (paid from $749/mo) | Teams needing autonomous investigation of security telemetry |
| CodeWatchdog | Freemium | $20 per AI Deep Scan | Individual developers and small teams wanting code-level security monitoring |
| PromptBrake | Paid | $499/mo | Teams focused on AI/prompt security at a mid-range budget |
| Vibio | Paid | From £9.99/mo (4 scans) | Budget-conscious teams wanting basic security coverage |
Flarehawk is the most expensive option here, but it is solving a fundamentally different problem. If your challenge is telemetry-scale log analysis with automated investigation and remediation, the alternatives in this table are not direct substitutes. At $749 to $1,499 per month for its paid plans, it costs a fraction of a dedicated SOC analyst -- which is the comparison Flarehawk itself invites.