Slack Notifications

Send Guard alerts to a Slack channel with an incoming webhook.

This article is Slack webhook notifications only.

Connecting one Slack integration does not configure the others.

Guard sends risk notifications to a Slack channel through a Slack incoming webhook. This notification integration is separate from Marcus.

Note: For detailed information on Slack webhooks, refer to Slack's documentation: https://api.slack.com/messaging/webhooks.

Setting up Slack Webhooks

Visit https://api.slack.com/apps and click "Create New App" to begin.

Enter a name for your app and select the workspace where you want to use the app.

In the app's settings, open Incoming Webhooks.

Toggle "Activate Incoming Webhooks" to On.

Click "Add New Webhook to Workspace".

Select the channel where you want notifications to appear. Click "Authorize".

After authorization, you'll receive a unique webhook URL. Save this URL — you'll need it for the Guard setup.

Configuring Guard

  1. In Guard, go to Integrations > Workplace Messaging and select Slack. You can also go to Settings > Notifications, click Add Integration on the Chat Messaging card, and select Slack.
  2. Paste the webhook URL into the Webhook URL field.
  3. In Severity, choose the minimum risk severity that triggers a notification. The default is Medium, which sends Medium, High, and Critical risks.
  4. Click Connect.

Guard then posts a message to the channel for each new risk at or above the selected severity. The connected webhook is listed on the Chat Messaging card under Settings > Notifications, where you can view or disconnect it.

If you need help with this integration, contact support@praetorian.com.