Notifications
Configure how and when you receive alerts when tripwires are triggered.
Notification Channels
Tripwires delivers per-user trip alerts over two channels — email and Slack:
Receive detailed alerts via email with full detection information.
Slack
Send alerts to a Slack channel for team visibility.
Self-hosted deployments can additionally forward every detection to a SIEM/SOC pipeline — see SIEM / SOC forwarding.
Email Notifications
Email is the default notification channel. Alert emails include:
- Tripwire Name - Which tripwire was triggered
- Detection Time - Exact timestamp of the event
- Source IP - Where the connection came from
- Credentials Used - The username that was attempted
- Quick Actions - Links to view details in the dashboard
Notification settings
Manage your channels under Settings → Notifications. Alerts are sent immediately when one of your tripwires is triggered.
| Setting | Description |
|---|---|
| Email alerts | Toggle email on/off and set the address alerts are sent to (defaults to your account email). |
| Slack alerts | Connect Slack, or paste an incoming-webhook URL manually, to post alerts to a channel. |
Test Your Notifications
After enabling a channel, trigger one of your own tripwires (e.g. connect to a decoy you created) to confirm alerts arrive as expected before relying on them.