Slack Alerts: Know About Critical Findings Within Minutes

Why does timing matter for critical security alerts?

A scan takes 90 to 120 minutes to complete. If a Critical finding — a leaked API key, an exposed database, a subdomain takeover — is detected in the first 10 minutes of a scan, waiting for the full report to arrive means your team is unaware of a serious exposure for another hour.

VeilScan fires Slack alerts for Critical and High findings as soon as they are detected and verified, not when the full scan report is ready. For security-sensitive environments, this can be the difference between a finding being contained quickly and a finding sitting unnoticed until someone checks their email.

What does a VeilScan Slack alert contain?

Each Slack alert contains:

• Domain — the domain and subdomain where the finding was detected
• Finding type — the vulnerability category (e.g. "Exposed .env file", "Subdomain Takeover", "SQL Injection")
• Severity — Critical or High, with colour-coded severity indicator
• Asset — the specific URL, hostname, or service where the finding was detected
• Dashboard link — a direct link to the finding detail in your VeilScan dashboard

The alert is designed to give your team enough context to begin triage immediately, without waiting for the full report.

How do you set up the Slack integration?

1. In your Slack workspace, go to Apps → Incoming Webhooks and create a new webhook. Select the channel where you want security alerts (e.g. #security-alerts or #engineering).
2. Copy the Incoming Webhook URL that Slack generates.
3. In your VeilScan dashboard, go to Settings → Slack Integration.
4. Paste the webhook URL and click Save.
5. Click Test Integration to send a test message and confirm the connection is working.

The full setup takes under 60 seconds. The integration works with any Slack workspace and any channel — you can route different domain alerts to different channels using multiple webhook URLs if needed.

Which plans include Slack alerts?

Slack alerts are available on Starter, Core, and Pro plans. The free plan does not include Slack integration. See all plans for a full comparison.

For teams that want faster response to critical findings, the Pro plan includes weekly scans — reducing the window between a vulnerability being introduced and being detected, and sending alerts more frequently.

See: Continuous Monitoring feature · Documentation: Connecting Slack

What are the most common questions?

Can I receive alerts for Medium and Low findings in Slack?

Slack alerts are sent for new Critical and High findings only. Medium and Low findings appear in your dashboard and email report. If you want Slack notifications for all findings, contact hello@veilscan.net to discuss your use case.

Can I have alerts go to multiple Slack channels?

Each VeilScan account supports one Slack webhook configuration. If you need alerts in multiple channels, you can configure your Slack workspace to forward messages from one channel to another. Enterprise multi-webhook support is on the roadmap — contact hello@veilscan.net if this is a priority for your team.

What if the Slack webhook stops working?

If the webhook fails to deliver (e.g. the webhook URL is revoked in Slack), VeilScan logs the failed delivery attempt. The finding still appears in your dashboard and email report. You can update the webhook URL in Settings at any time. Use the Test Integration button to verify the connection is active.