Slack, Teams and webhook

In the organisation panel, a summary of new findings is posted to your team's channel. An administrator adds channels on the panel's Notifications page.

Channel types

  • Slack: bir “incoming webhook” adresi.
  • Microsoft Teams: bir iş akışı (workflow) adresi.
  • Webhook: kendi HTTPS adresiniz; JSON gövdeli bir POST isteği alır.

An organisation can add up to 10 channels. You can send a test message to any channel at any time.

When messages are sent

With automatic notification on, each channel receives a single summary after every matching run that produces new findings. With automatic notification off, nothing is sent to channels on its own.

Webhook signature

Webhook requests carry, in the x-daybreach-signature header, an HMAC-SHA256 signature of the body. The signing key is shown once, when the channel is created; with it you verify that a request really comes from DayBreach.

Address rules

  • Yalnızca HTTPS ve 443 numaralı kapı kabul edilir.
  • Slack ve Teams adresleri bu servislerin kendi alan adlarında olmalıdır.
  • İç ağ adresleri kabul edilmez; yönlendirmeler izlenmez.
  • İstek 10 saniyede yanıt alamazsa başarısız sayılır.

A saved address is never shown in full afterwards. A finding summary sent to a channel leaves the platform by your organisation's own choice; this is recorded in the audit trail.