Skip to content

Set up alerts

Horus runs on its own overnight, so you shouldn't have to sit in the dashboard to find out something went wrong. Connect a notification channel and Horus tells you when a finding worth your attention appears.

Alerts are managed under Settings → Integrations and require the admin role.


Supported channels

ChannelTypeGood for
SlackslackA team channel that pings on new high/critical findings.
Microsoft TeamsteamsThe same, for Teams shops.
EmailemailOne or more inboxes; also carries the monthly board report.
PagerDutypagerdutyWaking someone up for Act-level issues.
OpsgenieopsgenieOn-call routing and escalation.
WebhookwebhookAnything else: pipe events into your own system.

(Jira, AWS, and GCP are also integrations, but they're for ticketing and cloud audits rather than alerts. See ticket creation and cloud audits.)


Add an integration

  1. Go to Settings → Integrations → Add integration.
  2. Pick the channel type.
  3. Fill in the connection details:
    • Slack / Teams / Webhook: the incoming webhook URL.
    • Email: the recipient address(es).
    • PagerDuty / Opsgenie: the integration/API key.
  4. Set the minimum severity. This is your noise dial: high (recommended) means you're only pinged for high and critical findings; medium widens it; critical narrows it to the most urgent only.
  5. Save, then use Send test to confirm the channel actually receives a message. Fix the connection details if the test fails.

Secrets you enter (webhook URLs, API keys) are masked in the UI afterwards; Horus never shows them back to you in full.


Tune the volume

If a channel is too noisy, raise its minimum severity. If people are ignoring it, it's usually because the threshold is too low, not too high. A good default:

  • Slack/Teams: high, so the channel stays credible.
  • PagerDuty/Opsgenie: critical, reserved for wake-someone-up territory.
  • Email: high or medium, since inboxes tolerate more volume.

You can run several integrations at once with different thresholds, e.g. a broad email digest plus a narrow PagerDuty escalation.


Monthly board report by email

Any email integration can be opted in to the monthly executive posture report. Toggle Board report on the integration, and Horus emails a board-ready PDF of your security trend on the first of each month. See the board posture report guide for what's in it.

Released under the MIT License.