Alerts & Monitoring
Severity-routed alerts, immediate or digest
Watchlists route new findings by severity and category, with immediate or digest delivery depending on your plan entitlement. You choose the channel; nothing pages you for low-severity, informational changes.
What it finds
Signals this pillar surfaces
New exposure alerts
Notification when a new finding appears for a monitored entity.
Severity-routed delivery
High-severity findings can trigger immediate delivery where your plan includes it; others batch into a digest.
Resolution status alerts
Updates when a case changes status, is resolved, or needs your approval.
Coverage alerts
Notification when a scheduled check could not reach a source, so gaps are visible, not silent.
How it works
From identifier to verified finding
- 01
Watchlists are configured
Entities, categories and severity thresholds you care about.
- 02
New findings are matched
Each new finding is checked against active watchlists.
- 03
Routing rules apply
Immediate or digest delivery, and which channel, follow your plan entitlement.
- 04
Delivery is logged
Every alert sent is recorded for audit, alongside acknowledgement status.
What it is not
Boundaries we hold
- Not continuous surveillance — alerts fire on scan cycles and confirmed findings, not live tracking.
- Not delivered outside the channels and entitlement your plan includes.
- Not a substitute for reviewing the underlying evidence before acting.
- Not used to notify anyone about a person without a recorded lawful basis in workforce contexts.