For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
HUMAN DashboardHUMAN WebsiteRequest a Demo
Product GuidesEnforcer GuidesMobile SDKAPI ReferenceCustomer support
Product GuidesEnforcer GuidesMobile SDKAPI ReferenceCustomer support
  • Getting Started
    • Overview
    • Best practices
  • Sightline Cyberfraud Defense
    • About Sightline Cyberfraud Defense
    • Getting Started
    • What's different in Sightline Cyberfraud Defense
    • Sensor changelog
    • About the Overview Dashboard
    • Glossary
  • AgenticTrust
    • Getting started with AgenticTrust
    • AI Agents Monitoring Dashboard
    • AI Visitors Overview Dashboard
    • Manage AI Agent Permissions
    • Agentic Activity Priority
    • Agent Trust Levels
  • Account Defender
    • Account Defender Overview
    • Use Cases
    • Prerequisites
    • Getting Started with Account Defender
    • Optimizing Account Defender Detection
    • Validating Account Defender Integration
    • Risk Triggers
    • About Network Events
      • Data Export Action
      • Email Mitigation
      • HTTP Client Actions
      • Slack Notifications
    • Troubleshooting
  • Bot Defender
    • Bot Defender Overview
    • Detection
    • Bot Defender Policy Settings
    • Footprint
  • Credential Intelligence
    • Credential Intelligence Overview
    • How to Access the Breached Flag
    • Credential Intelligence FAQ
    • Credential Intelligence Dashboard
  • Code Defender
    • Code Defender Introduction
    • Getting Started with Code Defender
    • Code Defender Glossary
    • Website Risk Analyzer
  • Platform
    • Account settings
    • Manage users
    • Role permissions
    • Enforcer configurations
    • Page Type Mapping
  • Client-Side Integration
    • JavaScript tag
    • Improving first page performance
    • Use of cookies & web storage
    • Advanced client integration
LogoLogo
Login
Login
HUMAN DashboardHUMAN WebsiteRequest a Demo
On this page
  • Prerequisites
  • Create a Slack ActionAdd
  • Add a Slack notification action to a policy rule
Account DefenderAccount Defender Actions

Slack notifications

Was this page helpful?
Previous

Troubleshooting

Next
Built with

Account Defender can automatically send you Slack notifications when it detects incidents matching your existing Policy Rules. You can learn how to configure Slack notifications in this article.

Prerequisites

  • An existing Account Defender policy rule to add the action to. See Create Account Defender policy rules for more information.
  • Have Account Defender Admin permissions to add and manage actions. See Role permissions for more information.
  • A configured Slack Integration.

Create a Slack ActionAdd

Before you can add an action to a policy rule, you need to create it.

  1. Navigate to Account Defender > Settings > Action Settings.
  2. Click + Add Action.
  3. Complete the following fields:
    • Action name: The name that will appear for the action throughout the HUMAN console.
    • Action type: Select Slack notification. This will also show a preview of your Slack message.
    • Cooldown duration: The length of time Account Defender should wait to trigger this action each time it detects a match on the rule it’s assigned to.
    • Duration unit: The unit of time for the cooldown.
    • Integration details: The Slack integration you want to use for this action.
    • Application data source: The application the action will be available on.
    • Event type: The type of event the action will be triggered by.
    • Slack message content settings: Select any additional fields you want to include in the Slack message. Default fields are required and cannot be removed.
  4. Click Save changes.

Your Slack notification action has been created. Next, be sure to add it to a policy rule.

Add a Slack notification action to a policy rule

Once you have a Slack notification action, we recommend adding it to a policy rule so you can automate when a request is sent.

Be sure your policy rule’s application and event type match the ones you chose above. Otherwise, the action won’t appear when you try to add it to the rule.

  1. Navigate to Account Defender > Policies > Policy Rules.
  2. Select a rule to edit or create a new rule. See our article for more on creating policy rules.
  3. From the Actions menu, click and drag Data Export to the THEN field.

  1. Enter a Slack channel to send notifications to.

  1. Finish any other changes to your policy rule, then click Simulate rule.
  2. Click Save changes.

Now, whenever Account Defender detects an attack that matches the conditions in that policy rule, the account owner will receive a Slack notification with the content you specified in Create a Slack Action.