Skip to content

Alerts

Configure notifications to stay informed about new vulnerabilities. (Pro)

Alert Management Alert Management

Alert Types

Type Trigger Default
Critical CVE New critical vulnerability matches Immediate
Ransomware CVE with ransomware indicator Immediate
New CVE Any new exploited match Daily digest
Due Date Approaching remediation deadline 7 days before

Email Configuration

SMTP Setup

  1. Go to SettingsEmail
  2. Configure SMTP:
  3. Server: SMTP hostname
  4. Port: 587 (TLS) or 465 (SSL)
  5. Username: SMTP user
  6. Password: SMTP password
  7. From: Sender address
  8. Click Test Connection
  9. Save

Recipients

Configure alert recipients per organization:

  1. Go to ManagementOrganizations
  2. Open the organization for editing
  3. Use the Alert Settings tab: add the email addresses and set the preferences per recipient. The Webhook tab next to it is for the webhooks

Webhook Configuration

Send alerts to chat platforms:

Slack

  1. Create an Incoming Webhook in Slack
  2. Go to Settings > Alert Management
  3. Add the webhook:
  4. Type: Slack
  5. URL: Webhook URL
  6. Channel: Optional override
  7. Test and save

Microsoft Teams

  1. Create Incoming Webhook connector in Teams
  2. Add to SentriKat:
  3. Type: Teams
  4. URL: Webhook URL
  5. Test and save

Discord

  1. Create webhook in Discord channel settings
  2. Add to SentriKat:
  3. Type: Discord
  4. URL: Webhook URL
  5. Test and save

Custom Webhook

For custom integrations:

{
  "type": "custom",
  "url": "https://your-endpoint.com/webhook",
  "method": "POST",
  "headers": {
    "Authorization": "Bearer your-token"
  }
}

What fires, and to whom

Alerts are configured per organization, not per user. Everyone who should be told is on the organization's notification list.

The alert for a vulnerability confirmed as exploited is always on and cannot be switched off.

Alert history

The Alerts page lists what was sent, when, and whether it was delivered.

Manual Triggers

Manually send alerts:

# Trigger critical CVE alert
curl -X POST http://localhost:5000/api/alerts/trigger-critical \
  -b cookies.txt

# Trigger webhooks
curl -X POST http://localhost:5000/api/alerts/trigger-webhooks \
  -b cookies.txt

Issue Tracker Integration

SentriKat can automatically create issues in your project management tools when vulnerabilities are detected. See the dedicated Issue Trackers guide for setup instructions.

Supported platforms:

  • Jira
  • GitHub Issues
  • GitLab Issues
  • YouTrack

SIEM Forwarding

For forwarding vulnerability events to your SIEM via syslog, see the SIEM Integration guide.

Troubleshooting

Emails Not Sending

  1. Check SMTP configuration
  2. Verify firewall allows outbound SMTP
  3. Check spam folders
  4. Review alert logs

Webhooks Failing

  1. Verify webhook URL is accessible
  2. Check authentication if required
  3. Review webhook logs for errors

No Alerts Triggering

  1. Verify vulnerabilities match products
  2. Check severity filters
  3. Verify time window settings
  4. Check if alerts are acknowledged