Skip to main content

Notification Channels

Kostavo sends notifications about policy findings through configurable channels. Each channel defines where alerts go and how often.

The notification channels page with Slack, Teams, and email channels

Channel Types​

TypeConfiguration
EmailList of email recipients
SlackWebhook URL for a Slack channel
Microsoft TeamsWebhook URL for a Teams channel
WebhookCustom webhook URL (receives JSON POST)

Delivery Modes​

Each channel has two independent delivery modes:

Digest​

Batches findings into a periodic summary. The digest interval is tied to your policy scan frequency: each digest is sent after a scan completes, so you receive one consolidated report per scan cycle.

SettingDescription
EnabledToggle digest notifications on/off

Immediate​

Sends a notification as soon as a finding meets the severity threshold. Good for critical issues that need fast response.

SettingDescription
EnabledToggle immediate notifications on/off
Severity thresholdMinimum severity to trigger: critical, high, medium, or low

For example, set the threshold to high to get immediate alerts only for high and critical findings.

Creating a Channel​

  1. Navigate to Organization → Notifications
  2. Click New channel
  3. Select the channel type
  4. Configure the recipient (emails or webhook URL)
  5. Set digest and/or immediate delivery preferences
  6. Save

Testing a Channel​

Use the Test channel button in the channel editor to send a test message. Kostavo reports delivery success or the exact error.

Webhook Format​

For generic webhooks, Kostavo sends a JSON POST with finding details including resource type, name, severity, action taken, and workspace information.