Government · head to head
Bonfire vs ThetaRay

Bonfire
Government
Public sector sourcing and bid evaluation software with scored, auditable award decisions
- From
- On request
- Free plan
- No

ThetaRay
Cybersecurity
Unsupervised AI transaction monitoring for cross-border and correspondent banking
- From
- On request
- Free plan
- No
The short version
- Each has a real cost: Bonfire it is a sourcing and evaluation tool rather than full procure to pay, so requisitions, purchase orders and invoicing stay in the finance system and the join between them is the agency's problem.; ThetaRay unsupervised models are harder to justify to an examiner than explicit rules, and some regulators still expect documented threshold logic, which can force you to run both systems.
- They diverge on capability: Bonfire covers Solicitation posting, ThetaRay covers Unsupervised detection.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which Bonfire and ThetaRay actually diverge.
Identical on both: starting price (On request), pricing model (quote), free tier (No), platforms (Web), user rating (Not yet rated).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Bonfire
- Solicitation posting
- Sealed submission intake
- Scored evaluation workspace
- Audit trail
- Supplier portal
- Requirement matrices
Only in ThetaRay
- Unsupervised detection
- Cross-border focus
- Sanctions screening
- Alert triage
- Customer risk scoring
- Cloud native
What people use each for
The jobs each tool is most often brought in to do.
Bonfire
- An agency that has lost or nearly lost a bid protest and needs a defensible evaluation recordnot ThetaRay
- A procurement team running scoring committees currently held together by spreadsheets and emailnot ThetaRay
- A university or health system applying public procurement rules without a public procurement systemnot ThetaRay
- An agency wanting suppliers to self register and receive addenda automatically rather than by mailing listnot ThetaRay
ThetaRay
- A correspondent bank that cannot see the ultimate originator and needs behavioural signals rather than counterparty listsnot Bonfire
- A cross-border payments fintech whose rules engine produces more alerts than its compliance team can clearnot Bonfire
- A bank under a regulatory consent order needing demonstrable improvement in detection within a fixed periodnot Bonfire
- A payment institution entering a high-risk corridor where existing thresholds were calibrated on domestic trafficnot Bonfire
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Bonfire
- It is a sourcing and evaluation tool rather than full procure to pay, so requisitions, purchase orders and invoicing stay in the finance system and the join between them is the agency's problem.
- Since the acquisition path from GTY to GI Partners to Euna Solutions, Bonfire sits in a portfolio alongside products it once competed with, which narrows a shortlist that appears independent.
- Suppliers must register on the portal to bid, and small local vendors reliably complain about the extra account, which can reduce responses on low value solicitations.
- Pricing is quoted rather than published and scales with solicitation volume, so an agency with a few very large procurements pays a model designed around throughput.
- Contract management after award is thin compared with dedicated contract lifecycle products, so agencies often buy a second system for the obligations the award created.
ThetaRay
- Unsupervised models are harder to justify to an examiner than explicit rules, and some regulators still expect documented threshold logic, which can force you to run both systems.
- The alert reduction claim depends heavily on your data, so a parallel run is essential and adds months and cost before you can decommission the incumbent.
- Coverage is strongest in cross-border and correspondent flows; institutions whose risk is domestic retail fraud will find the fit weaker than a general-purpose monitoring platform.
- It is a smaller vendor than the incumbents, so integration connectors into legacy core banking systems are often bespoke work rather than a supported adapter.
- Model retraining and tuning are vendor-led, which means changing detection behaviour is a support conversation rather than something your own analysts can do that afternoon.
Pricing, plan by plan
Bonfire
On request- Bonfire$undefined/year
- Quoted by agency size and annual solicitation volume
- Supplier side registration is free, which is how the vendor network grows
- Implementation and training quoted separately from subscription
ThetaRay
On request- ThetaRay Sonar$undefined/year
- Priced by monitored transaction volume and number of monitored entities
- SaaS on Azure with regional data residency options
- Parallel run and model tuning included in onboarding
Which should you pick?
Choose Bonfire if
- You need solicitation posting.
- You also want sealed submission intake.
Questions people ask
- Is Bonfire or ThetaRay better?
- Neither clearly leads. Bonfire starts at On request and ThetaRay at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Bonfire or ThetaRay?
- Bonfire starts at On request and ThetaRay at On request.
- Does Bonfire or ThetaRay run on more platforms?
- Both run on Web, so platform support will not decide this one for you.
- What is Bonfire best used for?
- Bonfire is most often used for an agency that has lost or nearly lost a bid protest and needs a defensible evaluation record, a procurement team running scoring committees currently held together by spreadsheets and email, a university or health system applying public procurement rules without a public procurement system, an agency wanting suppliers to self register and receive addenda automatically rather than by mailing list. Of those, an agency that has lost or nearly lost a bid protest and needs a defensible evaluation record and a procurement team running scoring committees currently held together by spreadsheets and email are not what ThetaRay is typically brought in for.
- What can Bonfire do that ThetaRay cannot?
- Bonfire covers Solicitation posting, Sealed submission intake, Scored evaluation workspace, Audit trail. ThetaRay covers Unsupervised detection, Cross-border focus, Sanctions screening, Alert triage.
Answered from the vendors’ own pages
Bonfire: Who owns Bonfire?
Euna Solutions. Bonfire was acquired by GTY Technology in 2019, GTY was taken private by GI Partners in 2022, and the portfolio was rebranded Euna Solutions in 2023.
ThetaRay: Does it replace a rules engine entirely?
Rarely on day one. Most institutions run it alongside existing rules during a parallel period, and some keep specific regulator-mandated rules permanently.
Bonfire: Is it full procure to pay?
No. It covers sourcing and evaluation through award. Purchase orders and invoicing remain in the finance system.
ThetaRay: Where is the data processed?
SaaS runs on Microsoft Azure with regional deployment options, which is the mechanism for meeting data residency conditions in regulated markets.
Bonfire: What is the real value?
A defensible, time stamped evaluation record when an award is protested, which is the expensive failure mode in public procurement.
ThetaRay: Is sanctions screening included?
Screening is available on the same platform but licensed as part of the commercial package rather than bundled by default. Confirm it is in your quote.
Bonfire: Can we see what other agencies pay?
Yes. These contracts are public records. Read several comparable awards before negotiating.
Related pages
Other head to heads
- Bonfire vs Bidnet Direct
- Bonfire vs Periscope Holdings
- Bonfire vs NEOGOV
- Bonfire vs ArchiveSocial
- Bonfire vs CivicPlus Asset Management
- Bonfire vs mySidewalk
- Bonfire vs SAP for Government
- Bonfire vs Clariti
- Bonfire vs GovPilot
- Bonfire vs Zencity
- Bonfire vs Tyler Technologies
- Bonfire vs Polco
- Bonfire vs SafeCity
- Bonfire vs SeeClickFix
- Bonfire vs ShotSpotter
- Bonfire vs Springbrook Software
- Bonfire vs Rock Solid
- Bonfire vs Feedzai
- Bonfire vs Unit21
- Bonfire vs Quantexa
- Bonfire vs Silent Eight
- Bonfire vs NICE Actimize
- Bonfire vs Sardine
- Bonfire vs Fenergo
- Bonfire vs Jumio
- Bonfire vs Featurespace ARIC Risk Hub
- Bonfire vs Sumsub
- Bonfire vs iDenfy
- Bonfire vs Shufti Pro
- Bonfire vs VMware Carbon Black
- Bonfire vs Wireshark
- Bonfire vs WorkOS
- Bonfire vs Zscaler Internet Access
- Bonfire vs Milestone XProtect
- Bonfire vs Osano
- ThetaRay vs Bidnet Direct
- ThetaRay vs Periscope Holdings
- ThetaRay vs NEOGOV
- ThetaRay vs ArchiveSocial
- ThetaRay vs CivicPlus Asset Management
- ThetaRay vs mySidewalk
- ThetaRay vs SAP for Government
- ThetaRay vs Clariti
- ThetaRay vs GovPilot
- ThetaRay vs Zencity
- ThetaRay vs Tyler Technologies
- ThetaRay vs Polco
- ThetaRay vs SafeCity
- ThetaRay vs SeeClickFix
- ThetaRay vs ShotSpotter
- ThetaRay vs Springbrook Software
- ThetaRay vs Rock Solid
- ThetaRay vs Feedzai
- ThetaRay vs Unit21
- ThetaRay vs Quantexa
- ThetaRay vs Silent Eight
- ThetaRay vs NICE Actimize
- ThetaRay vs Sardine
- ThetaRay vs Fenergo
- ThetaRay vs Jumio
- ThetaRay vs Featurespace ARIC Risk Hub
- ThetaRay vs Sumsub
- ThetaRay vs iDenfy
- ThetaRay vs Shufti Pro
- ThetaRay vs VMware Carbon Black
- ThetaRay vs Wireshark
- ThetaRay vs WorkOS
- ThetaRay vs Zscaler Internet Access
- ThetaRay vs Milestone XProtect
- ThetaRay vs Osano
