---
title: "Notifications"
description: "Send messages to a chat or any webhook on a schedule, when findings change status, and when imports finish."
url: https://whitespots.io/docs/appsec-portal/integrations/notifications
slug: appsec-portal/integrations/notifications
publish_date: 2026-10-30T19:42:15.000Z
last_modified: 2026-10-30T19:42:15.000Z
---

# Notifications

Portal sends notifications as HTTP POST requests to a webhook URL. The JSON body
has a `text` field with the message in Markdown, so a Slack or Mattermost incoming webhook shows it
as is. The other fields (the event, finding IDs, a link to the findings) are for your own services.

Notifications need a paid license. See [License](https://whitespots.io/docs/appsec-portal/administration/license).

## Add a webhook

Open the settings, then **Notifications** under **Integrations**, and click
**Add Notification Integration**:

- **Title** and **Notification URL**.
- **Authorization Header** and **Authorization Header Value**, when the webhook needs a token.
- **Verify SSL**: turn it off only for a server with a self-signed certificate.
- Which products or assets it covers. Notifications are sent only about findings in them.
- **Notification for Imported Findings**: a message each time a scan report has been processed.
- **Notification for Validation Completion**: a message each time the
  [Auto Validator](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/auto-validator) rules have been applied.

**Test Connection** sends a test request and shows the response code. Links in the messages lead
back to the external Portal URL.

## On a schedule

A scheduled notification sends the findings that match a filter, for example every Monday morning
the critical findings that are still unverified.

1. Open [Findings](https://whitespots.io/docs/appsec-portal/triage-findings/findings), or a product's **Findings**, and set the
   filters.
2. Click **Schedule a notification for current filter**.
3. Choose the **Webhook**, a **Title** and the schedule.

Turn on **Provide finding details** to list the findings in the message, with the **Fields** you
choose. The schedules are on the **Notification Schedule** tab of the integration, where you can
turn each one off.

## When findings change status

On the integration's **Status Change Notifications** tab, add a notification:

| Field | Meaning |
| --- | --- |
| **From**, **To** | the old and new status; **Any** matches every status |
| **Changed by** | **Manual** for changes by users, **Automation** for changes by rules and scans, or **Any** |
| **Findings threshold** | send only when at least this many findings change in one action; 0 sends for any number |
| **Provide finding details** | list the findings, with the **Fields** you choose |

For example, From **Unverified** To **Verified**, changed by **Automation**, tells the team about
findings that the Auto Validator has just confirmed.

---

## Navigation

- Location: [Docs](https://whitespots.io/docs) > [Application Security Portal](https://whitespots.io/docs/appsec-portal) > [Integrations](https://whitespots.io/docs/appsec-portal/integrations)
- Previous: [Task trackers](https://whitespots.io/docs/appsec-portal/integrations/task-trackers)
- Next: [LLM](https://whitespots.io/docs/appsec-portal/integrations/llm)