Alerts¶
Configure notifications to stay informed about new vulnerabilities. (Pro)
Alert Types¶
| Type | Trigger | Default |
|---|---|---|
| Critical CVE | New critical vulnerability matches | Immediate |
| Ransomware | CVE with ransomware indicator | Immediate |
| New CVE | Any new KEV match | Daily digest |
| Due Date | Approaching remediation deadline | 7 days before |
Email Configuration¶
SMTP Setup¶
- Go to Settings → Email
- Configure SMTP:
- Server: SMTP hostname
- Port: 587 (TLS) or 465 (SSL)
- Username: SMTP user
- Password: SMTP password
- From: Sender address
- Click Test Connection
- Save
Recipients¶
Configure alert recipients per organization:
- Go to Organizations → Select org → Alerts
- Add email addresses
- Set notification preferences per recipient
Webhook Configuration¶
Send alerts to chat platforms:
Slack¶
- Create Incoming Webhook in Slack
- Go to Settings → Webhooks
- Add webhook:
- Type: Slack
- URL: Webhook URL
- Channel: Optional override
- Test and save
Microsoft Teams¶
- Create Incoming Webhook connector in Teams
- Add to SentriKat:
- Type: Teams
- URL: Webhook URL
- Test and save
Discord¶
- Create webhook in Discord channel settings
- Add to SentriKat:
- Type: Discord
- URL: Webhook URL
- Test and save
Custom Webhook¶
For custom integrations:
{
"type": "custom",
"url": "https://your-endpoint.com/webhook",
"method": "POST",
"headers": {
"Authorization": "Bearer your-token"
}
}
Alert Rules¶
Time Windows¶
Configure when alerts are sent:
- Go to Settings → Alert Rules
- Set time window (e.g., 9 AM - 5 PM)
- Select timezone
- Choose days (weekdays only, etc.)
Outside time windows, alerts are queued for the next window.
Severity Filters¶
Only alert on specific severities:
- Critical only
- Critical + High
- All severities
Rate Limiting¶
Prevent alert fatigue:
- Minimum interval: 15 minutes between alerts
- Max per day: Limit daily notifications
- Digest mode: Combine multiple alerts
Alert History¶
View sent alerts:
- Go to Reports → Alert History
- Filter by date, type, status
- View delivery status
Manual Triggers¶
Manually send alerts:
# Trigger critical CVE alert
curl -X POST http://localhost:5000/api/alerts/trigger-critical \
-H "Authorization: Bearer YOUR_TOKEN"
# Trigger webhooks
curl -X POST http://localhost:5000/api/alerts/trigger-webhooks \
-H "Authorization: Bearer YOUR_TOKEN"
Issue Tracker Integration¶
SentriKat can automatically create issues in your project management tools when vulnerabilities are detected. See the dedicated Issue Trackers guide for setup instructions.
Supported platforms:
- Jira
- GitHub Issues
- GitLab Issues
- YouTrack
SIEM Forwarding¶
For forwarding vulnerability events to your SIEM via syslog, see the SIEM Integration guide.
Troubleshooting¶
Emails Not Sending¶
- Check SMTP configuration
- Verify firewall allows outbound SMTP
- Check spam folders
- Review alert logs
Webhooks Failing¶
- Verify webhook URL is accessible
- Check authentication if required
- Review webhook logs for errors
No Alerts Triggering¶
- Verify vulnerabilities match products
- Check severity filters
- Verify time window settings
- Check if alerts are acknowledged