Notifications
Send messages to a chat or any webhook on a schedule, when findings change status, and when imports finish.
Portal sends notifications as HTTP POST requests to a webhook URL. The JSON body
has a text field with the message in Markdown, so a Slack or Mattermost incoming webhook shows it
as is. The other fields (the event, finding IDs, a link to the findings) are for your own services.
Notifications need a paid license. See License.
Add a webhook
Open the settings, then Notifications under Integrations, and click Add Notification Integration:
- Title and Notification URL.
- Authorization Header and Authorization Header Value, when the webhook needs a token.
- Verify SSL: turn it off only for a server with a self-signed certificate.
- Which products or assets it covers. Notifications are sent only about findings in them.
- Notification for Imported Findings: a message each time a scan report has been processed.
- Notification for Validation Completion: a message each time the Auto Validator rules have been applied.
Test Connection sends a test request and shows the response code. Links in the messages lead back to the external Portal URL.
On a schedule
A scheduled notification sends the findings that match a filter, for example every Monday morning the critical findings that are still unverified.
- Open Findings, or a product’s Findings, and set the filters.
- Click Schedule a notification for current filter.
- Choose the Webhook, a Title and the schedule.
Turn on Provide finding details to list the findings in the message, with the Fields you choose. The schedules are on the Notification Schedule tab of the integration, where you can turn each one off.
When findings change status
On the integration’s Status Change Notifications tab, add a notification:
| Field | Meaning |
|---|---|
| From, To | the old and new status; Any matches every status |
| Changed by | Manual for changes by users, Automation for changes by rules and scans, or Any |
| Findings threshold | send only when at least this many findings change in one action; 0 sends for any number |
| Provide finding details | list the findings, with the Fields you choose |
For example, From Unverified To Verified, changed by Automation, tells the team about findings that the Auto Validator has just confirmed.