Liferaft vs. Intrace
Liferaft, now part of Securitas, documents protective-intelligence monitoring, deep and dark web coverage, identity resolution, historical research, dossiers, and reporting. Intrace covers the same core protective-intelligence need and extends it with multimodal collection, physical and narrative risk monitoring, and graph-based investigations in the same platform.
How Liferaft and Intrace differ
What Liferaft is built to do
Liferaft is designed around protective intelligence and OSINT decision support: continuous monitoring, threat validation, identity resolution, deep and dark web research, dossiers, and stakeholder reporting.
What Intrace is built to do
Intrace is designed to cover digital, physical, and narrative threats to the same protectees and locations, then carry any alert into Search, Graph, and Social Vault without leaving the platform.
Where each platform is strong
A useful comparison starts with an accurate account of both platforms, so the competitor's documented strengths are stated first and in full.
Liferaft documented strengths
Continuous monitoring with customizable alerts built on keywords, entities, locations, and risk criteria.
Surface, deep, and dark web coverage for protective intelligence and threat research.
Identity resolution, people search, public records, and historical research for investigations.
Dossiers and a case manager that centralize profiles, findings, and uploaded documents.
Risk trend analysis, dashboards, and reports for stakeholders.
Intrace strengths
Deep collection of comments, replies, nested threads, images, and video, with multimodal analysis that surfaces threats which never use an obvious keyword.
Collection from mainstream, regional, hyperlocal, fringe, messaging, and dark-web sources, including restricted outlets reached through sockpuppet accounts where lawful.
Physical Risk Intelligence that places protests, violent events, and severe weather by proximity and severity to protectees and sites.
Narrative Intelligence that separates coordinated campaigns and bot activity from organic criticism.
Graph link analysis and Social Vault evidence capture in the same workspace as monitoring.
Liferaft vs. Intrace: capability comparison
Confirmed in vendor sources means the capability is described in the official vendor sources listed on this page. Not publicly documented means availability, packaging, or scope was not fully published and should be confirmed with the vendor in writing. Where two capabilities are close to equivalent, they are treated as comparable.
| Decision area | Intrace | Liferaft |
|---|---|---|
| Monitoring and alerting | Intrace Monitors are configured with the customer around protectees, facilities, brands, and regions, and intent-aware scoring keeps alerts tied to them. | Liferaft Confirmed in vendor sources Continuous monitoring with near-real-time alerts based on keywords, entities, locations, and risk criteria, delivered through email, mobile, and Slack. |
| How threats are detected | Intrace Multimodal analysis reads text, images, video, comments, and nested replies together, so threats that avoid obvious keywords still surface. | Liferaft Confirmed in vendor sources Filters collected activity against customer-defined keywords and risk criteria, then supports validation of credible threats. |
| Sources | Intrace Mainstream, regional, hyperlocal, fringe, messaging, and dark-web sources, with restricted outlets reached through sockpuppet accounts where lawful. | Liferaft Confirmed in vendor sources Describes surface, deep, and dark web sources for monitoring and research. |
| Physical and narrative risk | Intrace Physical Risk Intelligence and Narrative Intelligence run in the same platform, linking online threats to nearby incidents and coordinated campaigns. | Liferaft Not publicly documented Location-based alerting and situational awareness are described. Buyers should confirm the depth of event and disinformation analysis required. |
| Investigations | Intrace Search expands a name, username, or email address into a connected profile, and Graph maps relationships across people, accounts, domains, and records. | Liferaft Confirmed in vendor sources Identity resolution, people search, public records, historical research, and dossiers support investigations. |
| Cases and evidence | Intrace Social Vault captures posts, media, and metadata with timestamps and source attribution, organized by case, so the record survives after the original content is edited or deleted. | Liferaft Confirmed in vendor sources Dossiers and a case manager centralize profiles, findings, external documents, and investigation outputs. |
| Analytics and reporting | Intrace Narrative reports include timelines and risk assessments, and findings move into existing tools through the REST API. | Liferaft Confirmed in vendor sources Historical and live risk trend analysis, dashboards, visualizations, and reports. |
| Buying path | Intrace Intrace brings deep monitoring and deep investigations together in one comprehensive platform. Engagements are scoped during a demo to the people, locations, and investigations the team covers. | Liferaft Not publicly documented Product information and demos are public. Pricing was not published in the official materials reviewed. |
This page compares public product descriptions, not negotiated statements of work. Buyers should confirm native versus partner data, package entitlements, retention, usage limits, services, and roadmap status directly with each vendor.
How Intrace moves from signal to evidence
Collect from mainstream and specialized sources
Intrace monitors major social networks and the open web alongside regional, hyperlocal, fringe, messaging, and dark-web sources, and reaches restricted outlets through sockpuppet accounts where lawful.
Read the full context
Collection goes past top-level posts into comments, replies, nested threads, images, and video. Multimodal analysis reads text, media, and context together, across languages.
Score relevance to what the team protects
Signals are classified and filtered against each customer's protectees, facilities, brands, and regions before they reach an analyst, so alerts arrive with the source and context attached.
Connect digital signals to physical events
Physical Risk Intelligence tracks protests, violent events, severe weather, and infrastructure disruptions by proximity and severity, and Narrative Intelligence separates coordinated campaigns from organic criticism.
Investigate and connect entities
An alert opens as an investigation. Search expands a name, username, or email address into a connected profile, and Graph maps people, accounts, domains, organizations, and records.
Preserve evidence and deliver outputs
Social Vault keeps posts, media, and metadata with timestamps and source attribution, organized by case. Reports and a REST API carry findings into existing security workflows.
Which platform fits the requirement
Intrace is usually the better fit when
Threats to protectees need to be caught in comments, images, video, and niche communities, not only in keyword matches.
Digital threats, nearby physical incidents, and coordinated narratives should be monitored for the same people and places in one platform.
Analysts need graph-based link analysis and preserved evidence alongside monitoring.
Liferaft may be the better fit when
The workflow centers on protective-intelligence monitoring, identity resolution, and dossiers.
The team wants Liferaft's case-oriented investigation experience and reporting.
A vendor backed by a global security services provider such as Securitas is a procurement advantage.
Questions to ask both vendors
Ask the same questions in both demos and require the answers in the proposal or statement of work.
Which sources are native, licensed, partner-provided, or supplied by the customer?
Coverage claims are only comparable once the origin of each source is known, including restricted and regional platforms.
What is included in the quoted package, and what needs separate modules, credits, or services?
Tiered packaging can move core capabilities such as investigations or API access into a different price band.
How long is data retained, and what historical search is possible after an alert?
Retention decides whether analysts can reconstruct how a threat developed or only see the latest post.
How are false positives, duplicates, and alert fatigue handled?
Ask for a sample of real alerts for the team's own protectees and locations, not a curated demo feed.
Can the team add new people, locations, and risk topics without vendor engineering?
Programs change quickly after an incident. Configuration speed matters as much as initial coverage.
What is automated, what needs the team's analysts, and what does the vendor operate?
Responsibility for tuning monitors, reviewing alerts, and producing reports should be written into the proposal.
Which seats, entities, sources, alerts, API calls, or services change the price?
Understanding the pricing drivers shows how cost will move as the program grows.
Which capabilities are generally available, beta, roadmap, or partner-delivered?
Demos often show the full vision. The contract should reflect what is available on day one.
Official Liferaft sources used for this page
Every claim in the Liferaft column is drawn from the current official product pages and dated vendor releases below. Intrace claims describe the Intrace platform as documented on this website.
- Liferaft, Threat Monitoring and Alerting
Continuous collection, risk criteria, real-time notifications, channels, and location-based alerting.
- Liferaft, OSINT Platform FAQ
Surface, deep, and dark sources, identity resolution, historical research, people search, public records, and dossiers.
- Liferaft, OSINT Platform Overview
Product modules, reports, dashboards, identity resolution, case management, and risk analysis.
- Liferaft, Investigations and Dossiers
Dossiers, identity resolution, case results, and investigative workflows.
- Liferaft, Risk Trends and Analysis
Historical and live risk analysis.
- Securitas Completes Acquisition of Liferaft
Used only for current ownership context.Mar. 18, 2026
Last evidence review: September 30, 2026. Product packaging and capabilities change. Intrace re-verifies this page at least quarterly and after material vendor announcements.
Compare other security intelligence platforms
Online risk intelligence and classification
DigitalStakeout vs. Intrace
DigitalStakeout's scenario-based online risk classification, knowledge graph, and analyst services compared with Intrace's protectee-focused monitoring, investigations, and evidence preservation.
Corporate security system of record
Ontic vs. Intrace
Ontic's connected security platform, cases, incidents, and FedRAMP authorization compared with Intrace's focused protective intelligence and investigations.
Digital risk protection and external cybersecurity
ZeroFox vs. Intrace
ZeroFox's packaged digital risk protection, takedowns, and attack-surface intelligence compared with Intrace's protective intelligence across digital, physical, and narrative risk.
Frequently Asked Questions
For protective-intelligence monitoring and investigations, Intrace covers the same core requirement and adds multimodal collection, physical and narrative risk monitoring, and graph link analysis. Teams should compare both against their own protectees and sources during a scoped demo.
Liferaft documents continuous monitoring with configurable alerts, surface, deep, and dark web coverage, identity resolution, people search, dossiers, case management, and risk trend reporting.
Securitas completed its acquisition of Liferaft in March 2026, according to Securitas's official press release.
It should list the sources and platforms covered, how alerts are filtered, retention periods, which investigation and evidence features are included, who tunes monitoring, and what changes the price.