Notifications

Two independent channels, so a critical issue reaches you even if you don't have the dashboard open.

Email

The organization owner always receives an email alert the moment a scan produces a new critical-severity finding or an exposed secret — this isn't configurable, since it's the minimum baseline every organization gets regardless of any other setup.

Slack

Connect a Slack channel from Settings → General → Notifications by pasting in an incoming webhook URL created from Slack's own App Directory. Once connected, Slack receives:

• Critical findings (the same event that triggers the email alert)
• Git provider access issues — a GitHub App suspension or a GitLab authorization revocation, surfaced the moment it's detected rather than waiting for the next scan to fail
• A BYOK Anthropic key issue — invalid or revoked, if you've brought your own key

Use Send test after connecting to confirm the webhook actually works before relying on it — it posts a real message and reports back honestly whether Slack accepted it, rather than assuming success.

Only https://hooks.slack.com/services/... URLs are accepted — this is a deliberate restriction, not a limitation of the integration, since accepting arbitrary URLs here would turn a settings field into a way to make this server send requests anywhere.

Clear the webhook field and save to disconnect.