Security alerts for rental managers

Flare watches your property system and tells you when something risky changes, before the money is gone.

New admins and changed payout details within minutes; guest payments moved to another account, exposed door codes and scam messages to guests the same day or overnight. Your team gets a plain alert that says how urgent it is and what to do first. Nothing to configure.

Start your free 14-day trial How it works
Read-only: we never change anything No guest data stored No card needed
5 months

How long one host's payouts went to a criminal's bank account before anyone noticed: $34,250 lost.

Consumer Rescue
Since 2025

Ongoing campaigns send rental and hotel staff fake booking-platform emails that install password-stealing malware.

Microsoft via SecurityWeek
“I paid twice”

Guests receive “verify your card” messages with their real booking details, sent from properties' own hijacked accounts.

Sekoia
The threats

Criminals don't break in. They log in.

Almost every attack on rental businesses starts with a stolen login. What matters is how fast you notice what they do next.

Account takeover

A fake “guest complaint” email, and your login is gone

Staff are sent to a page asking them to “verify they're human” by pasting a command. It installs malware that steals every saved password.

The criminal quietly adds an admin, keeps access, and waits.

What Flare does
  • Flags a message in your PMS inbox that links to a fake Booking.com, Airbnb or Guesty page, the way most takeovers start
  • Spots within minutes who gained access and what they can do
  • Alerts on new admins, permission upgrades and, where your system shows sign-ins, old accounts that wake up
  • Spots the takeover pattern: a new admin, then a sensitive change
Payout fraud

The next payout goes to someone else's bank account

Changing an owner's bank details is the fastest way to steal from a rental business, and it's easy to miss.

Nobody notices until an owner asks where their money is.

What Flare does
  • "Act today" alert when owner payout details change, if your property system shares them
  • Warns when an owner's email or phone is changed, often the step before their bank details, and raises an "Act today" alert when both change close together, where your system shares owner contacts
  • "Act today" alert when a listing's guest payments start going to a different payment account
  • Flags a large refund or a run of refunds in one day, where your system shares refunds
  • Tells you exactly what to do: call the owner on a number you already have
  • Fingerprints only: we detect the change without keeping any bank details
Guest phishing

Your guests get fake payment requests in your name

Messages with real booking details ask guests to “re-verify” their card or pay by bank transfer. Guests pay twice, and blame you.

Your reputation and reviews take the hit.

What Flare does
  • Warns you when guests write that they got a suspicious payment request, often the first sign of a scam campaign
  • Flags templates, messages and listing texts from your account that ask for off-platform payment, bank details or short links
  • Warns you when guests mention a payment scam in a review
  • Tells you when a listing's guest contact, door code or check-in instructions change, and when one door code opens several properties, is easy to guess or shows in public listing text
  • Names every app that receives your booking data, asks you to confirm new ones, and warns you when an app you use has a security incident
  • Checks whether criminals could easily send email that looks like yours
  • Gives you a ready-made trust line for guest confirmations
How it works

Set up in minutes. Watching from then on.

Connect your property system

Create a key just for Flare in your property management system and paste it in. Flare only ever reads with it. Add your website with one DNS record to prove it's yours.

We watch, quietly

Who has access and owner payouts within minutes, connected apps and guest messages through the day, and a closer watch after any warning sign. Turn on real-time checks and a scam message to a guest is flagged in under a minute; a changed door code or a new payment account within minutes, not overnight. Listings, door codes, payment accounts, owner contacts, refunds, reviews, your website and your email protection every night. We stay well within your system's limits and leave most of its capacity to your other tools.

You get alerted, with the fix

As a notification on your phone or laptop, by email, or in Slack. Each alert says how urgent it is (Act today, Fix this week, Fix when you can) and what to do first, and the app explains why it matters and how to fix it, in plain language. Every check is on and managed by Flare, so there's nothing to set up and nothing anyone can quietly switch off.

Set-up walkthrough, 2 minutes: account, two-step login, connecting your property system, and your first results.
What we watch

The places attackers go first

People and access

New users, new admins, permission changes, too many admins, accounts nobody uses where your system shows sign-ins, and people who left the business but still have an account.

within minutes

Owners and payouts

New or changed payout methods, owners' email or phone being changed, a listing's payment account changing, and unusual refunds, where your property system shares them.

payouts within minutes, the rest nightly

Connected apps

A named list of the apps receiving your booking data, with a "did you add this?" alert when a new one appears and a warning when an app you use has a security incident; data going to a server you've never used or without protection, broken booking-channel connections where your system shows them, and, where your system reports its API usage, unusually heavy use that may be a bulk export.

through the day

Guest messages and listings

Messages that link to fake booking-platform or payment pages; guests writing in about suspicious payment requests; messages trying to give orders to an AI assistant; messages, templates or listing texts asking for off-platform payment; changed door codes, wifi, check-in instructions or listing contact details; door codes that are shared, easy to guess or public; scams mentioned in guest reviews.

messages through the day, listings nightly

Booking website

HTTPS, payment-page protection against card skimming, exposed secret keys and files, outdated software.

nightly

Email protection

Whether criminals can send email that looks like yours, checked through SPF, DKIM and DMARC.

nightly

We connect the dots, so you don't have to

One change is usually routine. A new admin followed by a payout change, an owner's email changed just before their bank account, an old account suddenly active, booking data suddenly sent somewhere new, or several different risky changes on the same day: those sequences are how attacks look. Flare spots the pattern and sends one clear alert instead of noise.

No false promises

What Flare can and can't see

Nothing makes a business hack-proof. Flare is there so an attack doesn't go unnoticed for weeks, and so you know what to do.

We watch

  • Your property management system: users, roles, payouts, owners, listings, payment accounts, door codes, refunds, reviews, connected apps, calendar links, templates
  • Your booking website and payment pages, as any visitor sees them
  • Your domain's email protection
  • Your team's answers about two-step login, offboarding and AI tools

We can't see (yet)

  • Inside your Airbnb or Booking.com accounts: we give you the routines and checks for those instead
  • Your team's computers: we catch what an intruder does next, not the malware itself
  • Your email: we check your domain's protection, never your emails. A phishing email sent straight to your mailbox stays invisible to us; a phishing message in your PMS inbox doesn't

What's next

Today Flare sees what changed. Next, we want to show who changed it and from where, and to alert on suspicious sign-ins before anything is touched. That needs property systems to share security events with trusted partners, and we're pushing for it. Customers who join now get it first.

Owner's bank accountc4a1…9f2e
Admin's permissions7be0…11ad
Where booking data is sente92f…40c7

A fingerprint tells us “this changed”, never what it says.

Privacy by design

Fingerprints, not your data

A security tool shouldn't become your biggest risk. So we built Flare to keep as little as possible.

  • No guest data. Names, messages, reservations and bank details stay in your system.
  • Your key, locked to your company. Encrypted with a key unique to you, used only to read. Prefer we keep nothing? Choose “live check only”: your key is used for that check and never stored.
  • Two-step login for everyone. Every Flare account has it, no exceptions.
  • Your data, your call. Export or delete everything at any time.
When it happens

One button when you think you've been hacked

Anyone on your team can raise the alarm. Everyone is alerted on every channel, and a step-by-step checklist walks you through the first hours: who to call, what to check, what to tell guests.

Plus a library of short security habits for your team, from spotting fake platform emails to the payout call-back rule.

Catching one redirected payout in time is worth years of Flare.

Connect your property system in a few minutes and see your first results tomorrow. No card, nothing to install.

Start your free trial
Questions

Good questions to ask a security tool

Do you store our guests' data?

No. We read your system's configuration (users, permissions, payout settings, owner contacts, listing texts and door codes, refund amounts, webhooks, templates) and new guest messages and reviews, turn what we need into one-way fingerprints or a flag, and discard the rest. Guest names, messages, reservations and bank details are never stored.

Can Flare change anything in our systems?

Flare never edits or deletes anything in your property management system, your website or your email. It only reads, with one optional exception: if an owner turns on real-time checks, Flare creates one webhook in the PMS so it hears about new guest messages within seconds, and removes it when they're turned off.

Which property management systems do you support?

Guesty today, with more to come. Each property system shares different data, so the app shows, for each check, whether it runs on your account.

Will it slow down our system or other integrations?

No. Flare caps its own requests and stops at half of your system's remaining API quota. If your system asks us to slow down, we check the most important areas first and finish the rest later.

We use Airbnb and Booking.com directly. Is that covered?

Their accounts can't be monitored from outside, so we cover them with checks of your own setup, regular security routines and our incident checklist.

What happens when the free trial ends?

Monitoring pauses and nothing is charged: there's no card to charge. Your settings and findings are kept for 12 months, so you can start monitoring whenever you're ready, or delete everything yourself.

What if we've been hacked right now?

Change the password of your email and property system from a computer you trust, turn on two-step login, check payout details, and contact the booking platforms. Then start the free trial and connect your system: it takes a few minutes, and Flare's incident checklist takes you through the rest, step by step.