API documentation

Slack

Leak events are posted to the selected Slack channel as notifications.

How it works

The connection runs over a Slack incoming webhook. Notifications go only to the channel that webhook is bound to; no other channel can be selected and nothing in Slack is read.

A notification carries the severity, the leak type, the affected party, the malware family, the date it was seen and a link back to the panel. The leaked value itself is not sent.

Slack accepting the request does not mean the notification was read. For a team on call, use the paging integrations.

Limits

Only hooks.slack.com addresses are accepted.
No bulk mentions are used; a leak notification does not wake the whole workspace.
Turning the connection off stops delivery and deletes the address.

Setup

The setup steps are in the panel, on the integration’s own screen. What to do on the provider side and which value goes where is written there.

Was this page helpful?