White-label features — branded reports, emails, and the checkout page — are only activated when you have an active subscription.

1. Open Settings → Subscription in the left menu.
2. Choose a plan from the pricing table and complete the checkout.
3. Your subscription status badge will update to active.
4. All white-label features activate immediately once payment is confirmed.

Your branding is applied to report headers, email footers, and the Stripe checkout page.

1. Go to Settings → Branding.
2. Enter your Display name — appears in emails and the checkout page.
3. Add a Logo URL — must be a public https:// URL (PNG or SVG recommended).
   Example: https://yourcompany.com/logo.png
4. Pick your brand colours using the colour pickers — primary, secondary, and accent.
5. Optionally set your subdomain (see Step 3 below).
6. Click Save branding.

A custom subdomain lets your customers access the assessment on your own domain — e.g. security.yourcompany.com.

What you need to do

1. Choose your subdomain — e.g. reports.yourcompany.com.
2. Create a CNAME DNS record at your domain registrar:

Type:   CNAME
Name:   reports          (or the subdomain prefix of your choice)
Value:  getflare.net
TTL:    300 (or auto)

If you're using a root-level apex domain, you may need an ALIAS or ANAME record instead. Check your DNS provider's documentation.

Common DNS providers

3. Wait for DNS propagation (usually 5–30 min, up to 48 h).
4. Enter the full hostname (e.g. reports.yourcompany.com) in the Subdomain field in Branding settings and save.
5. Click Re-check DNS in the Branding settings — the status badge will update to ✓ DNS verified once propagation is complete.

By default, welcome and report emails are sent from Flare's domain. With a custom sending domain, your customers receive emails from your own address — e.g. [email protected].

This uses Resend for reliable delivery. You do not need a Resend account — Flare manages everything on your behalf.

1. Open Settings → Email Domain.
2. Enter the address you want to send from and an optional display name.
3. Click Register domain — you'll receive a set of DNS records to add.
4. Add the displayed DNS records in your provider (typically DKIM TXT + SPF TXT + Return-Path CNAME).
   DNS changes can take up to 48 hours to propagate.
5. Click Verify DNS records — the status updates to Verified ✓ when complete.
6. All future emails to your customers will now be sent from your address.

Once branding is configured, you are ready to start delivering branded security assessments to your customers. There are two ways to trigger an assessment:

Option A — Manual (no tech required)

Best for non-technical partners or one-off customers.

1. Collect payment from your customer using your own method (invoice, Stripe, etc.).
2. Go to the Customers tab and click Add Customer.
3. Enter the customer's email, name, and service type.
4. Click Send Assessment — the customer receives a branded email immediately.
5. Once they complete the assessment, the report is generated and sent directly to them.

Option B — API (automated)

Best for partners with a backend that can call an API after payment confirms.

1. Go to Settings → API Integration and generate an API key.
2. In your payment confirmation webhook or success handler, call:
   Request Copy

   POST https://api.getflare.net/api/partners/customers
   Authorization: Bearer YOUR_API_KEY
   Content-Type: application/json
   
   { "email": "[email protected]", "name": "João", "service_type": "starter" }

3. Flare sends the branded assessment email automatically — no further action needed.

When you add a new customer, you can choose who receives the report email by default: the customer directly, or you (so you can forward it). This setting applies to new customers; you can override it per customer when adding them.

1. Open Settings, then scroll to the Report delivery section (under the Preferences heading).
2. Toggle Default: send report to me so I can forward it to my customers on or off.
3. Click Save.

Protect your partner account with a second factor. After you enable 2FA, you will need your password plus a 6-digit code from an authenticator app each time you sign in.

1. Go to Settings → Two-factor authentication (2FA) in the left menu.
2. Click Enable 2FA.
3. Scan the QR code with an authenticator app (e.g. Google Authenticator, Authy, 1Password, or your phone’s built-in app). If you can’t scan, enter the secret code manually.
4. On your next sign-in, you’ll be asked for the 6-digit code after entering your password. Enter the code shown in your app.
5. To turn 2FA off later, go back to Settings → 2FA and click Disable 2FA (you’ll need to confirm).