Skip to main content
It’s a great idea to be sensitive to deploying anything that communicates with your workforce about security issues to avoid confusion or concern that Wirespeed ChatOps is unsafe and actually a bad guy. Here are some options that you have to do this:

Onboarding Group

Underneath the chat ops settings, you can enable an onboarding group. This will allow you to select what users you want to receive chat ops messages. We will only interact with these users while you are in the onboarding phase. You can search for users in bulk and select the add or remove buttons at the bottom of the dialog to add all matches, or select the 3-dot menu on each user to add or remove them.

SMS Chat Ops

All Wirespeed SMS communications will come from +1 (855) 627-0635
You can choose to send chat ops via SMS to increase responsiveness from your users. Due to FCC regulations every user in your organization must explicitly consent to receive SMS messages before we can message them.

How SMS Enrollment Works

After you enable SMS chat ops, Wirespeed automatically sends enrollment emails to eligible users:
  1. Invite emails are sent to users inviting them to enroll in SMS notifications
  2. Up to 3 attempts are made per user, with invites sent weekly
  3. Users who don’t respond after 3 attempts are marked as “Max Attempts” and will not receive further invites

Who Receives Invites

  • Only users with authentication activity in the last 30 days are invited
  • If you have an onboarding group enabled, only users in that group are invited
  • New eligible users are identified and automatically invited once a week
Before enabling SMS we suggest sending a preemptive rollout message so users expect the email and know it is not phishing.

SMS Enrollment Status

You can view each user’s SMS enrollment status on their detail page under Assets > Users. The status shows:
StatusMeaning
EnrolledUser has consented to receive SMS messages
Pending (X/3)Invite sent, awaiting response (shows attempt count)
Max Attempts3 invites sent without response
Opted OutUser declined SMS enrollment
Not InvitedNo invite has been sent yet

Resetting SMS Invites

Wirespeed does not offer a general “re-send enrollment invite” action for every user. Automatic invites are sent weekly (up to 3 attempts). If a user still has pending invites—for example, status Pending (1/3) or Pending (2/3)—wait for the next automatic invite or ask the user to check their inbox for the most recent enrollment email. If a user reaches Max Attempts (3 invites sent with no response) and later wants to enroll, an administrator can reset their invite:
  1. Navigate to Assets > Users and select the user
  2. Confirm their SMS enrollment status is Max Attempts
  3. Open the Actions dropdown menu
  4. Select Reset SMS Invite
Reset SMS Invite only appears in Actions when all of the following are true:
  • The user’s status is Max Attempts (3 enrollment emails sent without a response)
  • The user has not completed SMS enrollment
  • The user has not opted out of SMS enrollment
If you do not see this action, check the user’s SMS enrollment status on their profile. Users who are still pending, already enrolled, or opted out will not show this option.
Resetting clears the attempt counter and immediately sends a new enrollment email.

On First Use Messages

Enabled by default, the “On First Use” messages give a short explanation about what Wirespeed is, like this:
Wirespeed is an application that keeps your company safe from hackers by occasionally asking you questions about you and your coworker’s activities. You can learn more about us here https://wirespeed.co and ask your security team for more information.
You may disable this message by selecting the Trash icon next to the text field.

Account Locked Messages

When a user’s account is locked in response to an actionable detection, they will receive a message like this:
Suspicious activity has been detected for your account which has caused us to reset your password and log you out of all active sessions. To regain access, please follow your company’s password reset instructions.
This message is required but may be customized underneath Settings > Chat Ops. It is recommended to add a link to your password reset instructions.

Initial Rate Limiting

It’s best to rollout new functionality in stages to minimize any issues or confusion. Wirespeed allows you to set a limit on the number of chat ops interactions per day, so you can introduce it in small chunks to your organization. Escalation emails are handled separately through notification subscriptions and team inbox settings.

Preemptive Rollout Messaging

It’s also a good idea to send an organization-wide message about rolling out Wirespeed, using the normal communication channels they would expect to see important updates, such as an organization-wide chat channel or official email address responsible for security or tech changes.​ Here’s an example template you could start from:
Hi Team, This is a quick note to let you know that we have started using a cybersecurity monitoring app called Wirespeed which will occasionally message you asking you questions about your online activity, such as logging in from unusual locations. To the best of your ability, please answer any questions from the app so we can all make sure to keep our organization safe from hackers and ransomware. Wirespeed’s goal is to be painless and only ask you when it matters. Please also note that Wirespeed will never ask you for sensitive information, like your password, bank account, or government ID numbers! A screenshot of an example Wirespeed message is below. Thanks and please let us know if you have any questions! - Security Team

Examples

Below are examples of what the user will receive in Slack, Microsoft Teams, Email, and SMS.

Initial Message

We will initially message the user through all available communication channels. Email, Slack, Teams, and SMS will redirect them to our website and go through the chat ops steps. Microsoft Teams will stay in app and display the chat ops steps in an iframe.

Chat Ops Steps

The user (or their manager) will receive a message with a brief summary of the security alert. If they select no, their account and endpoint will be locked, and they will be told to contact their IT department to unlock it. If they select yes, they will continue to step 2.

Service Provider ChatOps

Wirespeed allows you as a Service Provider to configure default Welcome, Subject Line, Message Signature, and Account Locked messaging for all of your client teams. Within your parent client, navigate to ChatOps and input the default values that you want. When you spin a client team, they will inherit these fields. They can override these fields at any time and can also reset to your original default should they wish to. Should you update the field in your parent team, all client teams that have not overriden your messaging will inherit your latest messaging.

FAQ

No. Due to FCC regulations, each user must provide their own phone number and give explicit consent to receive SMS messages. Administrators cannot manually add phone numbers on behalf of users. The user must complete the SMS enrollment process themselves by clicking the link in their enrollment email and entering their phone number.
Users must have authentication activity in the last 30 days to receive an SMS enrollment invite. If you have an onboarding group enabled, the user must also be in that group. New eligible users are automatically identified and invited once a week. Check the user’s SMS enrollment status under Assets > Users to see their current status.
Wirespeed sends up to 3 enrollment invites per user, with invites sent weekly. After 3 attempts without a response, the user is marked as Max Attempts and will not receive further automatic invites. If they later want to enroll, use Reset SMS Invite from the user’s Actions menu (see Resetting SMS Invites).
Only in limited cases. There is no general re-send action for users who are still pending (Pending (1/3) or Pending (2/3))—those users continue to receive automatic weekly invites until they respond or reach 3 attempts.If a user’s status is Max Attempts, an administrator can use Reset SMS Invite under Assets > Users > [user] > Actions. That option appears only when the user has hit the 3-attempt limit, has not enrolled, and has not opted out. It resets the counter and sends a new enrollment email immediately.You cannot manually re-send invites to users who have already enrolled or who have opted out.
All Wirespeed SMS communications are sent from +1 (855) 627-0635. You may want to share this with your team when rolling out SMS chat ops so they recognize the number.
Yes. Users can opt out of SMS during enrollment or after enrolling. Their status changes to Opted Out and they stop receiving SMS messages. Reset SMS Invite is not available for opted-out users. If someone who opted out later wants SMS Chat Ops, contact Wirespeed support for help re-enrolling them.
During a chat ops investigation, if a user indicates they don’t have access to their phone for MFA verification, Wirespeed will automatically escalate to their manager for verification instead.