5. Alerts and Notifications5.3 Webhook Integrations
πŸ“„5. Alerts and Notifications

5.3 Webhook Integrations

Updated 1 min read32 views

5.3.1 Notification Channels#

The Guardpot platform supports multiple notification channels for alert delivery. Throughout the platform, notification channels can be enabled simultaneously for various alert policies.

The following channels are available across the platform:

Channel

Description

email

Send alerts via email

call

Voice call notification

sms

Text message notification

push

Push notification to mobile devices

slack

Send alerts to Slack workspace

discord

Send alerts to Discord server

telegram

Send alerts via Telegram bot

These channels appear in the following configuration areas:

  • Credential Alert Policy (see Section 2.15.2.1.4)

  • Event Alert Policy (see Section 2.15.2.2.1)

  • Interaction Alert Policy (see Section 2.15.2.3.1)

  • MailPot Alert Policies (see Section 2.6.4.3)

  • MFA Policies β€” Discord, Email, SMS, and Telegram channels specifically (see Section 2.7.4.2)

5.3.2 User Contact Information#

User accounts support multiple contact identifiers for notification delivery (see Section 2.7.3.2 and Section 2.7.3.4):

Field

Description

Email

User email address for email notifications

Phone

Contact phone number for SMS and call notifications

Discord ID

Discord user identifier for Discord notifications

Telegram ID

Telegram user identifier for Telegram notifications

5.3.3 Alert Message Templates#

Alert messages can be customized using template variables. Build the alert message by selecting variables to insert into the message body (see Section 2.15.2.1.4).

Available variable categories:

Category

Available Variables

Time

Time

Credentials

Username, Password

Location

Agent Location, Attacker Location

Header

Agent Name, Agent IP, Agent Description, Agent OS

Other Logs

Port, Attack Time, Attack Type, Attacker IP

5.3.4 Export API Integration#

The Export module (see Section 2.13) provides API-based data extraction for integration with SIEM/SOAR platforms. Each export generates a unique API key for programmatic access. The export detail view (see Section 2.13.2.4) displays the API key along with configuration parameters including reliability minimum score, security maximum score, and validity date.

Was this article helpful?

Your feedback helps us improve the documentation.

Still need help?

Our support engineers are one ticket away.

Send feedback by e-mail